[tbb-bugs] #19417 [Applications/Tor Browser]: asm.js files should be no linkability risk

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Feb 9 07:19:24 UTC 2018


#19417: asm.js files should be no linkability risk
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:
                                                 |  assigned
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Major                                |     Resolution:
 Keywords:  tbb-linkability, GeorgKoppen201609,  |  Actual Points:
  TorBrowserTeam201609, ff52-esr,                |
  TorBrowserTeam201802                           |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by gk):

 * keywords:  tbb-linkability, GeorgKoppen201609, TorBrowserTeam201609,
     ff52-esr =>
     tbb-linkability, GeorgKoppen201609, TorBrowserTeam201609, ff52-esr,
     TorBrowserTeam201802


Comment:

 Replying to [comment:31 gk]:
 > Replying to [comment:30 legind]:
 > > Here's a friendly ping to revisit this issue, now that the transition
 to 52 is complete.
 >
 > So, the disk leak is gone but there is still the problem of asmjs not
 adhering to our URL bar domain isolation. This part still needs to be
 investigated. I am adjusting the title and description of the ticket.

 Actually, asm.js should be governed by the QuotaManager which in turn
 should take care of FPI. We should double-check that and, if it is indeed
 true, put it again into our security slider-treatment.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19417#comment:32>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list