Opened 5 years ago

Closed 4 years ago

#6845 closed project (fixed)

Forensic Analysis of current TBB on Windows 7

Reported by: phobos Owned by: runa
Priority: Medium Milestone:
Component: Applications/Tor bundles/installation Version:
Severity: Keywords: SponsorJ SponsorL
Cc: g.koppen@…, runa, StrangeCharm Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description


Child Tickets

Attachments (2)

noriben.txt (547.6 KB) - added by runa 4 years ago.
windows_changed_files.txt (22.2 KB) - added by runa 4 years ago.

Download all attachments as: .zip

Change History (16)

comment:1 Changed 5 years ago by phobos

Type: defectproject

comment:2 Changed 5 years ago by phobos

I started this out of curiosity on a fresh Win7 system. See https://wiki.lewman.is/torleaks for the output.

comment:3 Changed 5 years ago by gk

Cc: g.koppen@… added

comment:4 Changed 5 years ago by runa

Cc: runa added

comment:5 Changed 4 years ago by phobos

Status?

comment:6 Changed 4 years ago by runa

I have everything set up and ready to go, so some progress has been made. I expect to have some partial results within the next couple of weeks.

comment:7 Changed 4 years ago by phobos

Keywords: SponsorL added

comment:8 Changed 4 years ago by phobos

Keywords: SponsorJ, SponsorLSponsorJ SponsorL

comment:9 Changed 4 years ago by runa

The use case I am going to cover is:

  • User boots Windows 7
  • User logs in as a normal user (i.e. not admin)
  • User attaches an external drive
  • User copies the Tor Browser Bundle archive from the external drive to the Desktop
  • User extracts the Tor Browser Bundle
  • User runs the Tor Browser Bundle by clicking on the Tor Browser icon
  • User browses a few sites in the Tor Browser
  • User closes the Tor Browser window and clicks the Exit-button in Vidalia
  • User deletes the Tor Browser package and archive, and empties the trash
  • User shuts down Windows 7

comment:10 Changed 4 years ago by runa

Owner: changed from erinn to runa
Status: newassigned

Changed 4 years ago by runa

Attachment: noriben.txt added

Changed 4 years ago by runa

Attachment: windows_changed_files.txt added

comment:12 Changed 4 years ago by StrangeCharm

Cc: StrangeCharm added

comment:14 Changed 4 years ago by runa

Resolution: fixed
Status: assignedclosed
Note: See TracTickets for help on using tickets.