[tor-bugs] #4192 [Tor Browser]: make Tor Browser fail to connect when not launched from Vidalia

[Tor Bug Tracker & Wiki]

#4192: make Tor Browser fail to connect when not launched from Vidalia
-------------------------+--------------------------------------------------
 Reporter:  ioerror      |          Owner:  mikeperry
     Type:  defect       |         Status:  assigned 
 Priority:  blocker      |      Milestone:           
Component:  Tor Browser  |        Version:           
 Keywords:  security     |         Parent:           
   Points:               |   Actualpoints:           
-------------------------+--------------------------------------------------

Comment(by rransom):

 Replying to [comment:8 mikeperry]:
 > Replying to [comment:6 phobos]:
 > > I don't understand why this is a 'security blocker'.  It seems the
 equivalent of "I can drive my car into a wall at high speed!" Clearly the
 automaker should make this use case impossible to protect me from my own
 way to use my car.
 > >
 > > We explicitly tell people everywhere to run "start tor browser".
 >
 > IUC, the problem is that Windows decides that since it sees the user
 using this Aurora/TorBrowser thing, it should get added to their
 dock/frequently used apps ribbon/whatever. Then, much later, the user goes
 to start Tor back up, and clicks on the browser icon instead of the
 Vidalia onion in their recent apps dock, and they get it running without
 Vidalia.
 >
 > Is this the pattern we're seeing?

 This is what ioerror saw someone do.  We don't know whether it's a
 pattern, but it does sound like something a moderately experienced Windows
 user would do.

 > It sounds like it may be specific to a certain flavor of windows. Do we
 know which one?

 The ‘Pin to Taskbar’ feature was added in Windows NT 6.1 (marketed as
 ‘Windows 7’).

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4192#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online