Private data leak in 0.2.2 debs
In our Tor 0.2.2 debs, we enable cores by default:
#
# Comment this out if you do not want to get coredumps
#
ulimit -c unlimited
But most users don't know about this setting, so they accrue core files in their $datadir. These core files could include keys, relay cell payloads, buffer contents, etc.
We should turn this feature off by default.