[tor-bugs] #29887 [Applications/Tor Browser]: Potential user activity data leak
Tor Bug Tracker & Wiki
blackhole at torproject.org
Wed Mar 27 08:29:17 UTC 2019
#29887: Potential user activity data leak
--------------------------------------+--------------------------
Reporter: pf.team | Owner: tbb-team
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: tbb-disk-leak | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
--------------------------------------+--------------------------
Comment (by cypherpunks):
I would argue hiding the browser's last run time wouldn't be very
successful and both the profile creation time or last run time may be
easily gathered from the browser's file/folder creation/modification
timestamps.
But at least resetting the value of
browser.laterrun.bookkeeping.sessionCount seems to be a good idea.
@pf.team bookmarkbackups folder can contain up to 15 backups from
different dates with timestamps that will show exactly when the browser
was used. You may consider regularly cleaning that or disabling the
bookmark backups altogether.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/29887#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list