[tor-bugs] #10530 [Tor bundles/installation]: TBB on Linux leaks info to terminal

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Dec 31 01:48:50 UTC 2013


#10530: TBB on Linux leaks info to terminal
--------------------------------------+-----------------------
 Reporter:  runa                      |          Owner:  erinn
     Type:  defect                    |         Status:  new
 Priority:  major                     |      Milestone:
Component:  Tor bundles/installation  |        Version:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
--------------------------------------+-----------------------
 A Reddit user wrote
 [https://pay.reddit.com/r/TOR/comments/1u174m/psa_tor_leaks_links_to_terminal/
 this post] saying TBB is leaking information about the sites a user is
 trying to visit (i.e. unresolved domains) to the terminal.

 Below are steps to reproduce, according to the post. I have not tested
 this myself.

  1. Visit an invalid domain, such as asdfghjklkjhgfdsasfgjhk.com or a
 .onion URL.

  2. Click "Try Again".

  3. Change the tab and change back.

 The following messages appears in the terminal:
 {{{
 (about:neterror?e=connectionFailure&u=http%3A//www.asdfghjklkjhgfdsasfgjhk.com/&c=UTF-8&d=Firefox%20can%27t%20establish%20a%20connection%20to%20the%20server%20at%20www.asdfghjklkjhgfdsasfgjhk.com.)
 Could not check applicable rules for
 about:neterror?e=connectionFailure&u=http%3A//www.asdfghjklkjhgfdsasfgjhk.com/&c=UTF-8&d=Firefox%20can%27t%20establish%20a%20connection%20to%20the%20server%20at%20www.asdfghjklkjhgfdsasfgjhk.com.
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10530>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list