Re: [tor-bugs] #18995 [Applications/Tor Browser]: Investigate CacheStorage feature for tracking usage in Tor Browser

[Tor Bug Tracker & Wiki]

#18995: Investigate CacheStorage feature for tracking usage in Tor Browser
-+-
 Reporter:  gk   |  Owner:
 |  arthuredelstein
 Type:  task | Status:  closed
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Major| Resolution:  fixed
 Keywords:  ff45-esr, TorBrowserTeam201605R  |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by arthuredelstein):

 * keywords:  ff45-esr, TorBrowserTeam201605R, tbb-no-uplift => ff45-esr,
 TorBrowserTeam201605R


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #18995 [Applications/Tor Browser]: Investigate CacheStorage feature for tracking usage in Tor Browser

[Tor Bug Tracker & Wiki]

#18995: Investigate CacheStorage feature for tracking usage in Tor Browser
-+-
 Reporter:  gk   |  Owner:
 |  arthuredelstein
 Type:  task | Status:  closed
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Major| Resolution:  fixed
 Keywords:  ff45-esr, TorBrowserTeam201605R, |  Actual Points:
  tbb-no-uplift  |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by arthuredelstein):

 * keywords:  ff45-esr, TorBrowserTeam201605R, tbb-dont-uplift => ff45-esr,
 TorBrowserTeam201605R, tbb-no-uplift


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #18995 [Applications/Tor Browser]: Investigate CacheStorage feature for tracking usage in Tor Browser

[Tor Bug Tracker & Wiki]

#18995: Investigate CacheStorage feature for tracking usage in Tor Browser
-+-
 Reporter:  gk   |  Owner:
 |  arthuredelstein
 Type:  task | Status:  closed
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Major| Resolution:  fixed
 Keywords:  ff45-esr, TorBrowserTeam201605R, |  Actual Points:
  tbb-dont-uplift|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by arthuredelstein):

 * keywords:  ff45-esr, TorBrowserTeam201605R => ff45-esr,
 TorBrowserTeam201605R, tbb-dont-uplift


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #18995 [Applications/Tor Browser]: Investigate CacheStorage feature for tracking usage in Tor Browser

[Tor Bug Tracker & Wiki]

#18995: Investigate CacheStorage feature for tracking usage in Tor Browser
-+-
 Reporter:  gk   |  Owner:
 Type:  task |  arthuredelstein
 Priority:  High | Status:  closed
Component:  Applications/Tor Browser |  Milestone:
 Severity:  Major|Version:
 Keywords:  ff45-esr, TorBrowserTeam201605R  | Resolution:  fixed
Parent ID:   |  Actual Points:
 Reviewer:   | Points:
 |Sponsor:
-+-
Changes (by gk):

 * status:  needs_review => closed
 * resolution:   => fixed


Comment:

 Thanks! Applied to tor-browser-45.1.0esr-6.0-1 (commit
 cea5f1efcd9590885127a0763432143aca01524c)..

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #18995 [Applications/Tor Browser]: Investigate CacheStorage feature for tracking usage in Tor Browser

[Tor Bug Tracker & Wiki]

#18995: Investigate CacheStorage feature for tracking usage in Tor Browser
-+-
 Reporter:  gk   |  Owner:
 Type:  task |  arthuredelstein
 Priority:  High | Status:
Component:  Applications/Tor Browser |  needs_review
 Severity:  Major|  Milestone:
 Keywords:  ff45-esr, TorBrowserTeam201605R  |Version:
Parent ID:   | Resolution:
 Reviewer:   |  Actual Points:
 | Points:
 |Sponsor:
-+-

Comment (by arthuredelstein):

 Replying to [comment:6 gk]:
 > Looks good to me. Could we get rid of the commented SimpleTest.js
 inclusion in the .html files? I think the "#" is not necessary before the
 bug number there either. "Bug 18995" is perfectly fine. :)

 Thanks for the review. Here's the new version:
 ​https://github.com/arthuredelstein/tor-browser/commit/18995+1
 Hash cea5f1efcd9590885127a0763432143aca01524c

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #18995 [Applications/Tor Browser]: Investigate CacheStorage feature for tracking usage in Tor Browser

[Tor Bug Tracker & Wiki]

#18995: Investigate CacheStorage feature for tracking usage in Tor Browser
-+-
 Reporter:  gk   |  Owner:
 Type:  task |  arthuredelstein
 Priority:  High | Status:
Component:  Applications/Tor Browser |  needs_review
 Severity:  Major|  Milestone:
 Keywords:  ff45-esr, TorBrowserTeam201605R  |Version:
Parent ID:   | Resolution:
 Reviewer:   |  Actual Points:
 | Points:
 |Sponsor:
-+-

Comment (by gk):

 Looks good to me. Could we get rid of the commented SimpleTest.js
 inclusion in the .html files? I think the "#" is not necessary before the
 bug number there either. "Bug 18995" is perfectly fine. :)

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #18995 [Applications/Tor Browser]: Investigate CacheStorage feature for tracking usage in Tor Browser

[Tor Bug Tracker & Wiki]

#18995: Investigate CacheStorage feature for tracking usage in Tor Browser
-+-
 Reporter:  gk   |  Owner:
 Type:  task |  arthuredelstein
 Priority:  High | Status:
Component:  Applications/Tor Browser |  needs_review
 Severity:  Major|  Milestone:
 Keywords:  ff45-esr, TorBrowserTeam201605R  |Version:
Parent ID:   | Resolution:
 Reviewer:   |  Actual Points:
 | Points:
 |Sponsor:
-+-
Changes (by arthuredelstein):

 * status:  assigned => needs_review
 * keywords:  ff45-esr, TorBrowserTeam201605 => ff45-esr,
 TorBrowserTeam201605R


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #18995 [Applications/Tor Browser]: Investigate CacheStorage feature for tracking usage in Tor Browser

[Tor Bug Tracker & Wiki]

#18995: Investigate CacheStorage feature for tracking usage in Tor Browser
+--
 Reporter:  gk  |  Owner:
 Type:  task|  arthuredelstein
 Priority:  High| Status:  assigned
Component:  Applications/Tor Browser|  Milestone:
 Severity:  Major   |Version:
 Keywords:  ff45-esr, TorBrowserTeam201605  | Resolution:
Parent ID:  |  Actual Points:
 Reviewer:  | Points:
|Sponsor:
+--

Comment (by arthuredelstein):

 Here's a regression test that is supposed to work:

 https://github.com/arthuredelstein/tor-browser/commit/18995
 Hash cdb08d1a81ee5ffb7e9308942ea67035be864f2b

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #18995 [Applications/Tor Browser]: Investigate CacheStorage feature for tracking usage in Tor Browser

[Tor Bug Tracker & Wiki]

#18995: Investigate CacheStorage feature for tracking usage in Tor Browser
+--
 Reporter:  gk  |  Owner:
 Type:  task|  arthuredelstein
 Priority:  High| Status:  assigned
Component:  Applications/Tor Browser|  Milestone:
 Severity:  Major   |Version:
 Keywords:  ff45-esr, TorBrowserTeam201605  | Resolution:
Parent ID:  |  Actual Points:
 Reviewer:  | Points:
|Sponsor:
+--
Changes (by arthuredelstein):

 * owner:  tbb-team => arthuredelstein
 * status:  new => assigned


Comment:

 Replying to [comment:1 gk]:
 > Seems the worker case is no issue for us:
 >
 > https://mxr.mozilla.org/mozilla-
 esr45/source/dom/cache/CacheStorage.cpp#200

 CacheStorage is also "blocked" in the non-worker case. Here's the relevant
 line:
 https://mxr.mozilla.org/mozilla-
 esr45/source/dom/base/nsGlobalWindow.cpp#10244

 I manually confirmed that caches.open("test") reports a SecurityError in
 our TBB/ESR45 alpha. I will work on writing a mochitest that ensures that
 the CacheStorage is inactive in both workers and main-thread content.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #18995 [Applications/Tor Browser]: Investigate CacheStorage feature for tracking usage in Tor Browser

[Tor Bug Tracker & Wiki]

#18995: Investigate CacheStorage feature for tracking usage in Tor Browser
+--
 Reporter:  gk  |  Owner:  tbb-team
 Type:  task| Status:  new
 Priority:  High|  Milestone:
Component:  Applications/Tor Browser|Version:
 Severity:  Major   | Resolution:
 Keywords:  ff45-esr, TorBrowserTeam201605  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+--
Changes (by arthuredelstein):

 * cc: arthuredelstein (added)


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #18995 [Applications/Tor Browser]: Investigate CacheStorage feature for tracking usage in Tor Browser

[Tor Bug Tracker & Wiki]

#18995: Investigate CacheStorage feature for tracking usage in Tor Browser
+--
 Reporter:  gk  |  Owner:  tbb-team
 Type:  task| Status:  new
 Priority:  High|  Milestone:
Component:  Applications/Tor Browser|Version:
 Severity:  Major   | Resolution:
 Keywords:  ff45-esr, TorBrowserTeam201605  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+--

Comment (by gk):

 Seems the worker case is no issue for us:

 https://mxr.mozilla.org/mozilla-
 esr45/source/dom/cache/CacheStorage.cpp#200

 Given https://bugzilla.mozilla.org/show_bug.cgi?id=1145744 and us
 disabling 3rd party cookies I wonder whether there is still stuff left we
 need to tackle.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #18995 [Applications/Tor Browser]: Investigate CacheStorage feature for tracking usage in Tor Browser

[Tor Bug Tracker & Wiki]

#18995: Investigate CacheStorage feature for tracking usage in Tor Browser
-+-
 Reporter:  gk   |  Owner:  tbb-team
 Type:  task | Status:  new
 Priority:  High |  Milestone:
Component:  Applications/Tor |Version:
  Browser|   Keywords:  ff45-esr,
 Severity:  Major|  TorBrowserTeam201605
Actual Points:   |  Parent ID:
   Points:   |   Reviewer:
  Sponsor:   |
-+-
 In ESR45 we have a new CacheStorage feature that might be usable for
 tracking users. We should bind it to our cache isolation code if so. Even
 though being part of the ServiceWorker spec it is not bound to it. Quoting
 from comment:8:ticket:18545
 {{{
 The API page includes "It provides a master directory of all the named
 caches that a ServiceWorker, other type of worker or window scope can
 access (you don't have to use it with service workers, even though that is
 the spec that defines it) and maintains a mapping of string names to
 corresponding Cache objects." Also, some of the top-level objects are
 present in regular DOM windows. See:
 ​https://lists.torproject.org/pipermail/tbb-dev/2016-May/000372.html
 }}}

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs