Opened 9 years ago

Closed 9 years ago

Last modified 3 years ago

#3597 closed defect (fixed)

betterprivacy included in TBB deletes all Flash cookies from computer

Reported by: cypherpunks Owned by: erinn
Priority: Immediate Milestone: TorBrowserBundle 2.2.x-stable
Component: Applications/Tor bundles/installation Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:


For some reason, the better privacy extension is included in the tor browser bundle.  Curious, as the tor browser bundle does not, in fact, support nor allow adobe flash to be run.  However, better privacy seeks out your local flash directory, outside of the tor browser bundle directory structure, and annihilates all flash cookies and such located within.  While I can appreciate your need to eradicate all anti-anonymity technology from the face of the earth, it breaks many flash applications that are reliant, nay co-dependent, on those cookies.  Such as, all of my schoolwork is completed through flash applications.  While suffering the slings and arrows of oppression during school is bad enough, having my privacy software wipe my cookies without asking is of grave consequence.  Yes, the flash applications we use here at this private school in the deep mines of moria store your state in flash cookies on your registered laptop as received from the school.  

better privacy should be configured to clean out flash cookies inside tbb.  As this is not needed until tbb supports flash, better privacy should be removed from the bundle. 


Child Tickets

Change History (7)

comment:1 Changed 9 years ago by rransom

Component: Tor BrowserTor bundles/installation
Owner: changed from mikeperry to erinn
Priority: normalblocker
Status: newassigned
Summary: betterprivacy included in TBB breaks my flash applicationsbetterprivacy included in TBB deletes all Flash cookies from computer
Type: enhancementdefect

This bug can be used to detect that someone has used TBB on a publicly accessible computer. We need to fix it immediately.

comment:2 Changed 9 years ago by erinn

Status: assignedaccepted

Thanks a lot for the report. We're debating re-enabling the ability for TBB to use system plug-ins (such as Flash) since NoScript at least gives them the ability to choose, so I'm not going to remove it right now, but I'll fix the path & system-wide cookie destruction. I'm really sorry that happened.

comment:3 Changed 9 years ago by mikeperry

Milestone: TorBrowserBundle 2.2.x-stable

comment:4 Changed 9 years ago by arma

Update: looks like erinn left betterprivacy out of the new TBB builds, "until we can figure out how to make it safe in all bundles".

comment:5 Changed 9 years ago by rransom

Resolution: fixed
Status: acceptedclosed

BetterPrivacy is gone for now. 'Bring BetterPrivacy back safely' should be a different ticket.

comment:6 in reply to:  5 Changed 8 years ago by proper

Replying to rransom:

BetterPrivacy is gone for now. 'Bring BetterPrivacy back safely' should be a different ticket.

--> #3974: "Disable flash's "allow cookies" pref somehow"

comment:7 Changed 3 years ago by teor

Severity: Normal

Set all tickets without a severity to "Normal"

Note: See TracTickets for help on using tickets.