[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-talk] if browser remembers URLs visited before shutdown even during Never Remember History



I understand Tor is based on Firefox. I haven't had Tor recently, but that was my impression when I did use it. If it is and if you don't read all of the Firefox Bugzilla bugs implicating security, please look at https://bugzilla.mozilla.org/show_bug.cgi?id=1476152 and consider weighing in as appropriate.

It's about the Never Remember History setting remembering old history, meaning URLs visited. Some of us think that undermines security while some people think remembering visited URLs even after a reboot is what it should do. As an alternative, I proposed amending the wording "Never Remember History" to reflect what the program does, maybe "Never Remember Future History (Keep Old History)", but even rewording seems to be in dispute. That's in discussion at https://bugzilla.mozilla.org/show_bug.cgi?id=513421 but that's years old and still hasn't been implemented. If I were to try to patch it myself, patching might take hours and there's substantial risk it would be rolled back by another programmer. This is a security leak.
If it could affect Tor, please consider participating or patching.

I Googled all your mailing lists and I don't see this issue.
Best wishes.

-- Nick
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk