[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #9701 [Tor Browser]: Prevent TorBrowser from creating clipboardcache turds

#9701: Prevent TorBrowser from creating clipboardcache turds
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  mikeperry
  cypherpunks            |     Status:  needs_review
         Type:  defect   |  Milestone:
     Priority:  normal   |    Version:
    Component:  Tor      |   Keywords:  tbb-disk-leak, interview,
  Browser                |  GeorgKoppen201405, tbb-firefox-patch,
   Resolution:           |  TorBrowserTeam201501R
Actual Points:           |  Parent ID:
       Points:           |
-------------------------+-------------------------------------------------

Comment (by michael):

 Replying to [comment:24 gk]:
 > What speaks against the solution in comment:13?
 >
 If you mean, why did I implement the condition according to
 ''privacy.thirdparty.isolate'' rather than
 ''NS_UsePrivateBrowsing(aChannel)'', it's because the nsTransferable code
 block dealing with disk caching has no chance at knowing in which channel
 it's operating. So it can't know if Private Browsing Mode is active.
 [[br]]
 > Isolating possible (cache) identifiers to the URL bar domain is one
 thing but the clipboard cache is of a different kind I think.
 >
 I see your point and agree. Lets figure out:

 1) How hard it would be to implement the channel driven PBM approach.
 2) If we want to go this distance at giving something so obvious (for Tor)
 a condition.
 [[br]]
 > Moreover, I still think this is a real bug in Firefox's PBM (seen as a
 do-not-store-things-to-disk-mode) and should get fixed there directly.
 >
 I'm not sure, since Firefox in PBM doesn't have as strong a requirement as
 Tor to not store things to disk. Mozilla would probably rather support old
 hardware by '''reducing memory consumption.'''

 Is there some specification that you're referring to where Mozilla
 emphasizes disk avoidance?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9701#comment:25>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs