[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #7449 [Applications/Tor Browser]: TorBrowser creates temp files in Linux /tmp & Windows %temp% and OSX(various places) during the file downloads dialog & when using internal browser video player

To: undisclosed-recipients: ;
Subject: Re: [tor-bugs] #7449 [Applications/Tor Browser]: TorBrowser creates temp files in Linux /tmp & Windows %temp% and OSX(various places) during the file downloads dialog & when using internal browser video player
From: "Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>
Date: Mon, 20 Jan 2020 04:07:53 -0000
Auto-submitted: auto-generated
Delivered-to: archiver@xxxxxxxx
Delivery-date: Sun, 19 Jan 2020 23:08:04 -0500
In-reply-to: <047.c7ba73c09535d670fac5e93d5762bf59@torproject.org>
List-archive: <http://lists.torproject.org/pipermail/tor-bugs/>
List-help: <mailto:tor-bugs-request@lists.torproject.org?subject=help>
List-id: "auto: Tor bug tracker status mails" <tor-bugs.lists.torproject.org>
List-post: <mailto:tor-bugs@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs>, <mailto:tor-bugs-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-bugs>, <mailto:tor-bugs-request@lists.torproject.org?subject=unsubscribe>
References: <047.c7ba73c09535d670fac5e93d5762bf59@torproject.org>
Reply-to: no-reply@xxxxxxxxxxxxxx, blackhole@xxxxxxxxxxxxxx
Sender: "tor-bugs" <tor-bugs-bounces@xxxxxxxxxxxxxxxxxxxx>

#7449: TorBrowser creates temp files in Linux /tmp & Windows %temp% and
OSX(various places) during the file downloads dialog & when using internal
browser video player
--------------------------------------+--------------------------
 Reporter:  unknown                   |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  High                      |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-disk-leak             |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by cypherpunks):

 Can the severity of this issue at least be upped, as this breaks one of
 the most fundamental design goals [1] of the Tor Browser Bundle, namely:

 {{{
 4.3. Disk Avoidance
 Design Goal:

 The User Agent MUST (at user option) prevent all disk records of browser
 activity
 }}}

 To be clear, the problem is even more severe than the issue description
 suggests, because the temporary file is already saved ''before'' the user
 chooses an option in the "Download an external file type?" dialog. This
 means that any clicking any ordinary link can cause something to be
 (temporarily) stored on the hard-drive of an unsuspecting user.

 This ticket's severity is not "Normal". A solution should be sought
 independently of Firefox fixing this for private browsing mode.

 [1] https://2019.www.torproject.org/projects/torbrowser/design/#disk-
 avoidance

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7449#comment:24>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs