Opened 4 years ago

Last modified 19 months ago

#10824 new defect

Using Firefox UI to remember history disables third party tracking/cookie protection

Reported by: gk Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-linkability, tbb-usability
Cc: Wyom123 Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

In https://lists.torproject.org/pipermail/tor-talk/2014-February/032049.html the user mentions the following steps to reproduce the problem:

I now tried a clean installation of TBB 3.5.1 win32

I change the option from "Never remember history" to "Remember History".
It requested a restart.
Then I checked and it was "Use custom settings for history".
I looked at the TorButton extension security tab settings and it had
the first and third option UNchecked.
I changed it to "Never remember history", it requested a restart again.
I looked at the TorButton extension security tab settings and it had
the third option UNchecked.

Child Tickets

Change History (7)

comment:1 Changed 4 years ago by joebt

In my TBB v3.5.1 - Windows, if I change from default "never remember history" to "use custom history" then check something else - like "remember my browsing & download history,"
it prompts for restart.

After it restarts & I change back to "never remember history" & check
"always use private browsing" (or it's automatically re-checked), it retains those settings - UNTIL I close Options, then reopen it (no messages, doesn't complain).

After the above & reopening Options again, it then shows "use custom settings for history." But "always use private browsing" is still checked.

After that, in Torbutton > Security tab, the 3rd option - "restrict 3rd party cookies & other tracking data," is NOT checked.
It probably should be.

AND when then look in about:config (while Options still shows "always use private browsing" - checked, & "accept cookies" is UNchecked), then about:config shows: "extensions.torbutton.restrict_thirdparty = false.
It should be True.

In spite of Torbutton's "restrict 3rd party cookies & other tracking data," NOT being checked under this scenario, TBB 3.5.1 - Windows doesn't seem to allow 1st or 3rd party cookies. But the setting being incorrectly unchecked raises false concern.

comment:2 Changed 4 years ago by erinn

Component: TorBrowserButtonTor Browser
Keywords: tbb-torbutton added
Owner: changed from mikeperry to tbb-team

comment:3 Changed 3 years ago by mikeperry

I tried to reproduce this in TBB 4.5a3 and was unable to do so. Does it still happen?

comment:4 in reply to:  3 Changed 3 years ago by gk

Replying to mikeperry:

I tried to reproduce this in TBB 4.5a3 and was unable to do so. Does it still happen?

Yes. Just tested it with a clean Tor Browser 4.5a3 on Linux and followed the steps in the description.

comment:5 Changed 3 years ago by mikeperry

Summary: Remembering the history disables third party tracking/cookie protectionUsing Firefox UI to remember history disables third party tracking/cookie protection

Ah, is this specific to using the Firefox Privacy UI then? I used the Torbutton UI.

comment:6 Changed 20 months ago by bugzilla

Keywords: tbb-usability added; tbb-torbutton removed
Severity: Normal

As #20244 has been closed as fixed, this ticket gains more severity.

comment:7 Changed 19 months ago by gk

Cc: Wyom123 added

#20690 is a duplicate. This actually already happens if one cancels the restart.

Note: See TracTickets for help on using tickets.