Opened 21 months ago

Last modified 21 months ago

#25064 new defect

Don't record update history on the Tor Browser

Reported by: cypherpunks Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-disk-leak
Cc: brade, mcs Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

  1. Open "about:support".
  2. Click "Show update history".

My TBB shows long history.

Can you stop logging these(and clear existing history)?
The date/time information is useful to track Tor users.

Child Tickets

Change History (3)

comment:1 Changed 21 months ago by gk

Component: - Select a componentApplications/Tor Browser
Keywords: tbb-disk-leak added
Owner: set to tbb-team
Priority: Very HighMedium
Severity: CriticalNormal

comment:2 Changed 21 months ago by mcs

Cc: brade mcs added

To remove the existing information, find the updates.xml file within your Tor Browser profile and delete it.

Currently, there is no preference (visible or hidden) that we can use to disable writing of the update history. Having the information available can be useful, but I can also understand why, at least for some people, it may give away too much information. For example, the timestamps associated with the list of updates could be used to determine that Tor Browser was likely in use on certain days and at certain times.

Georg, do you think that recording this info violates the disk avoidance aspect of the Tor Browser design?

comment:3 Changed 21 months ago by gk

Yes, I think it should at least not be as detailed as it is right now. We should think about what exactly we want to retain from the update history and scrub the remaining things. I am actually not even sure we want to have the history available at all. As far as I can see we have never needed it so far to debug anything.

Note: See TracTickets for help on using tickets.