Re: [tor-bugs] #10824 [TorBrowserButton]: Remembering the history disables third party tracking/cookie protection

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#10824: Remembering the history disables third party tracking/cookie protection
----------------------------------+-----------------------------
     Reporter:  gk                |      Owner:  mikeperry
         Type:  defect            |     Status:  new
     Priority:  normal            |  Milestone:
    Component:  TorBrowserButton  |    Version:
   Resolution:                    |   Keywords:  tbb-linkability
Actual Points:                    |  Parent ID:
       Points:                    |
----------------------------------+-----------------------------

Comment (by joebt):

 In my TBB v3.5.1 - Windows, if I change from default "never remember
 history" to "use custom history" then check something else - like
 "remember my browsing & download history,"
 it prompts for restart.

 After it restarts & I change back to "never remember history" & check
 "always use private browsing" (or it's automatically re-checked), it
 retains those settings - UNTIL I close Options, then reopen it (no
 messages, doesn't complain).

 After the above & reopening Options again, it then shows "use custom
 settings for history."  But "always use private browsing" is still
 checked.

 After that, in Torbutton > Security tab, the 3rd option - "restrict 3rd
 party cookies & other tracking data," is NOT checked.
 It probably should be.

 AND when then look in about:config (while Options still shows "always use
 private browsing" - checked, & "accept cookies" is UNchecked), then
 about:config shows:   "extensions.torbutton.restrict_thirdparty = false.
 It should be True.

 In spite of Torbutton's "restrict 3rd party cookies & other tracking
 data," NOT being checked under this scenario, TBB 3.5.1 - Windows doesn't
 __''seem''__ to allow 1st or 3rd party cookies.  But the setting being
 incorrectly unchecked raises false concern.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10824#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs