[tor-bugs] #23963 [Applications/Tor Browser]: Tor Browser can use a Tor that's running under another user

[Tor Bug Tracker & Wiki]

#23963: Tor Browser can use a Tor that's running under another user
--------------------------------------+--------------------------
 Reporter:  teor                      |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by yawning):

 Replying to [comment:4 teor]:
 > Replying to [comment:3 yawning]:
 > > Replying to [comment:2 mcs]:
 > > > I am also not sure how Tor Browser can tell the difference between
 "I am using a system Tor which is what the user wants" and "I am using a
 leftover Tor that was possibly started by another user."
 > >
 > > Getting Tor Browser to use a system tor requires a bunch of env vars
 to be set to suppress launching the tor instance.
 >
 > It used to require this in older Firefox versions.
 >
 > In recent versions, Firefox will happily open links before Tor Launcher
 has finished, at least on macOS..


 You missed my point, which is that, "It's trivial to tell if the user
 wants a system tor".  Regardless of the current buggy behavior, the fixed
 behavior can distinguish between the two cases, by checking an env var.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23963#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online