Opened 3 years ago

Last modified 12 months ago

#25064 new defect

Don't record update history on the Tor Browser

Reported by: cypherpunks Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-disk-leak, tbb-update
Cc: brade, mcs Actual Points:
Parent ID: Points:
Reviewer: Sponsor:


  1. Open "about:support".
  2. Click "Show update history".

My TBB shows long history.

Can you stop logging these(and clear existing history)?
The date/time information is useful to track Tor users.

Child Tickets

Change History (4)

comment:1 Changed 3 years ago by gk

Component: - Select a componentApplications/Tor Browser
Keywords: tbb-disk-leak added
Owner: set to tbb-team
Priority: Very HighMedium
Severity: CriticalNormal

comment:2 Changed 3 years ago by mcs

Cc: brade mcs added

To remove the existing information, find the updates.xml file within your Tor Browser profile and delete it.

Currently, there is no preference (visible or hidden) that we can use to disable writing of the update history. Having the information available can be useful, but I can also understand why, at least for some people, it may give away too much information. For example, the timestamps associated with the list of updates could be used to determine that Tor Browser was likely in use on certain days and at certain times.

Georg, do you think that recording this info violates the disk avoidance aspect of the Tor Browser design?

comment:3 Changed 3 years ago by gk

Yes, I think it should at least not be as detailed as it is right now. We should think about what exactly we want to retain from the update history and scrub the remaining things. I am actually not even sure we want to have the history available at all. As far as I can see we have never needed it so far to debug anything.

comment:4 Changed 12 months ago by gk

Keywords: tbb-update added
Note: See TracTickets for help on using tickets.