[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-bugs] #8985 [Tor bundles/installation]: OS X HFS+ files may contain traces of the Tor Browser Bundle
#8985: OS X HFS+ files may contain traces of the Tor Browser Bundle
--------------------------------------+-------------------------------------
Reporter: runa | Owner: erinn
Type: defect | Status: new
Priority: normal | Milestone:
Component: Tor bundles/installation | Version:
Keywords: tbb-disk-leak | Parent:
Points: | Actualpoints:
--------------------------------------+-------------------------------------
A forensic analysis of the Tor Browser Bundle (version 2.3.25-6, 64-bit)
on OS X 10.8 indicates that OS X HFS+ files may contain traces of the Tor
Browser Bundle.
HFS+ is the default filesystem on OS X; it supports journaling, quotas,
Finder information in metadata, hard and symbolic links, aliases, etc.
HFS+ also supports hot file clustering, which tracks read-only files that
are frequently requested and then moves them into a "hot zone". The hot
file clustering scheme uses an on-disk B-Tree file for tracking.
I have not been able to open /.hotfiles.btree and /.journal, but they
might contain traces of the Tor Browser Bundle and/or the attached
external drive.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8985>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs