Opened 4 years ago

Last modified 3 years ago

#8989 new defect

OS X swap file may contain traces of the Tor Browser Bundle

Reported by: runa Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Keywords: tbb-disk-leak, needs-triage
Cc: runa Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

A forensic analysis of the Tor Browser Bundle (version 2.3.25-6, 64-bit) on OS X 10.8 showed that the OS X swap file may contain traces of the Tor Browser Bundle.

OS X relies on swap files and paging for memory and cache management. I have not been able to open the swap file, but I would say it is likely that /var/vm/swapfile0 contains traces of the Tor Browser Bundle and/or the attached external drive.

Child Tickets

Change History (3)

comment:1 Changed 4 years ago by cypherpunks

According to Apple, swap is encrypted in OS X 10.8: https://support.apple.com/kb/PH11128

comment:2 Changed 3 years ago by erinn

  • Keywords needs-triage added

comment:3 Changed 3 years ago by erinn

  • Component changed from Tor bundles/installation to Tor Browser
  • Owner changed from erinn to tbb-team
Note: See TracTickets for help on using tickets.