Opened 5 years ago

Last modified 3 months ago

#10824 reopened defect

Using Firefox UI to remember history disables third party tracking/cookie protection

Reported by: gk Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-linkability, tbb-usability
Cc: Wyom123 Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

In https://lists.torproject.org/pipermail/tor-talk/2014-February/032049.html the user mentions the following steps to reproduce the problem:

I now tried a clean installation of TBB 3.5.1 win32

I change the option from "Never remember history" to "Remember History".
It requested a restart.
Then I checked and it was "Use custom settings for history".
I looked at the TorButton extension security tab settings and it had
the first and third option UNchecked.
I changed it to "Never remember history", it requested a restart again.
I looked at the TorButton extension security tab settings and it had
the third option UNchecked.

Child Tickets

Change History (10)

comment:1 Changed 5 years ago by joebt

In my TBB v3.5.1 - Windows, if I change from default "never remember history" to "use custom history" then check something else - like "remember my browsing & download history,"
it prompts for restart.

After it restarts & I change back to "never remember history" & check
"always use private browsing" (or it's automatically re-checked), it retains those settings - UNTIL I close Options, then reopen it (no messages, doesn't complain).

After the above & reopening Options again, it then shows "use custom settings for history." But "always use private browsing" is still checked.

After that, in Torbutton > Security tab, the 3rd option - "restrict 3rd party cookies & other tracking data," is NOT checked.
It probably should be.

AND when then look in about:config (while Options still shows "always use private browsing" - checked, & "accept cookies" is UNchecked), then about:config shows: "extensions.torbutton.restrict_thirdparty = false.
It should be True.

In spite of Torbutton's "restrict 3rd party cookies & other tracking data," NOT being checked under this scenario, TBB 3.5.1 - Windows doesn't seem to allow 1st or 3rd party cookies. But the setting being incorrectly unchecked raises false concern.

comment:2 Changed 4 years ago by erinn

Component: TorBrowserButtonTor Browser
Keywords: tbb-torbutton added
Owner: changed from mikeperry to tbb-team

comment:3 Changed 4 years ago by mikeperry

I tried to reproduce this in TBB 4.5a3 and was unable to do so. Does it still happen?

comment:4 in reply to:  3 Changed 4 years ago by gk

Replying to mikeperry:

I tried to reproduce this in TBB 4.5a3 and was unable to do so. Does it still happen?

Yes. Just tested it with a clean Tor Browser 4.5a3 on Linux and followed the steps in the description.

comment:5 Changed 4 years ago by mikeperry

Summary: Remembering the history disables third party tracking/cookie protectionUsing Firefox UI to remember history disables third party tracking/cookie protection

Ah, is this specific to using the Firefox Privacy UI then? I used the Torbutton UI.

comment:6 Changed 2 years ago by bugzilla

Keywords: tbb-usability added; tbb-torbutton removed
Severity: Normal

As #20244 has been closed as fixed, this ticket gains more severity.

comment:7 Changed 2 years ago by gk

Cc: Wyom123 added

#20690 is a duplicate. This actually already happens if one cancels the restart.

comment:8 Changed 3 months ago by traumschule

Resolution: worksforme
Status: newclosed

I fail to reproduce it because the UI changed too much, especially the "looked at the TorButton extension security tab settings" part - this tab does not seem to exist anymore in tb 8.5a1.

comment:9 in reply to:  8 ; Changed 3 months ago by 1-hop

Resolution: worksforme
Status: closedreopened

Replying to traumschule:

I fail to reproduce it

Try harder ;)

because the UI changed too much,

Not for this issue.

especially the "looked at the TorButton extension security tab settings" part - this tab does not seem to exist anymore in tb 8.5a1.

Exists ;)

comment:10 in reply to:  9 Changed 3 months ago by traumschule

Replying to 1-hop:

Replying to traumschule:

especially the "looked at the TorButton extension security tab settings" part - this tab does not seem to exist anymore in tb 8.5a1.

Exists ;)

What do i need to do to open it?

Note: See TracTickets for help on using tickets.