Firefox Sync should probably be disabled (or at least a warning included about its implications)
Firefox includes an ability to sync tabs, bookmarks, passwords, etc via a built in sync tool. This seems to be an obvious security leak and this functionality should probably be disabled. A user must create and/or sign in before its active, but due to the Tor Browser bundling, the info text reads as "Access your tabs, bookmarks, passwords and more wherever you use Tor Browser." and might confuse the less technically savvy user. Help button links to Mozilla Support.
Trac:
Username: nsimpson