Opened 5 years ago

Closed 5 years ago

Last modified 5 years ago

#13542 closed defect (worksforme)

torbrowser logs lots of data to ~/.xsession-errors

Reported by: ioerror Owned by: tbb-team
Priority: High Milestone:
Component: Applications/Tor Browser Version:
Severity: Keywords: security, privacy
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description (last modified by ioerror)

I've noticed that TBB (on Tails, perhaps elsewhere) when loading some pages will log an excessive amount of data to ~/.xsession-errors

Sample:

[10-22 17:15:37] Torbutton INFO: SSC: Parent null for https://trac.torproject.org/projects/tor/newticket
[10-22 17:15:37] Torbutton INFO: SSC: Set cacheDomain to trac.torproject.org for https://trac.torproject.org/projects/tor/newticket
[10-22 17:15:39] Torbutton INFO: SSC: Parent trac.torproject.org for https://trac.torproject.org/projects/tor/chrome/common/draft.png
[10-22 17:15:39] Torbutton INFO: SSC: Set cacheDomain to trac.torproject.org for https://trac.torproject.org/projects/tor/chrome/common/draft.png
[10-22 17:16:17] Torbutton INFO: SSC: Parent trac.torproject.org for https://trac.torproject.org/projects/tor/chrome/common/topbar_gradient2.png
[10-22 17:16:17] Torbutton INFO: SSC: Set cacheDomain to trac.torproject.org for https://trac.torproject.org/projects/tor/chrome/common/topbar_gradient2.png
[10-22 17:16:22] Torbutton INFO: SSC: Parent null for https://trac.torproject.org/projects/tor/newticket
[10-22 17:16:22] Torbutton INFO: SSC: Set cacheDomain to trac.torproject.org for https://trac.torproject.org/projects/tor/newticket
[10-22 17:16:22] Torbutton INFO: SSC: Parent trac.torproject.org for https://trac.torproject.org/projects/tor/chrome/common/loading.gif
[10-22 17:16:22] Torbutton INFO: SSC: Set cacheDomain to trac.torproject.org for https://trac.torproject.org/projects/tor/chrome/common/loading.gif

This looks like a seriously bad bug:

amnesia@amnesia:~$ wc -l .xsession-errors 
140733 .xsession-errors

On a system not running Tails, I can imagine that this is a privacy disaster. It may just be my Tails system with TBB (31.2.0 (Tor Browser 4.0)) and it may be confined to Tails and Tails alone.

While writing this bug report the number of lines went up:

amnesia@amnesia:~$ wc -l .xsession-errors 
140749 .xsession-errors

Child Tickets

Change History (4)

comment:1 Changed 5 years ago by ioerror

Description: modified (diff)

comment:2 Changed 5 years ago by gk

Resolution: worksforme
Status: newclosed

This particular problem is tracked on Tail's side: https://labs.riseup.net/code/issues/8160. Looking at the .xsession-errors when using a vanilla Tor Browser 4 I don't see this problem.

comment:3 Changed 5 years ago by ioerror

Apparently this happens to other people running TBB (wiretapped reports) depending on where it is started. Perhaps he can comment about his DWM issues here too?

comment:4 in reply to:  3 Changed 5 years ago by gk

Replying to ioerror:

Apparently this happens to other people running TBB (wiretapped reports) depending on where it is started. Perhaps he can comment about his DWM issues here too?

Sure, I was just responding to the particular issue you brought up.

Note: See TracTickets for help on using tickets.