Security Hole with Bookmarks

Feedback Tor Browser Feedback
8

Mine just says “recent bookmarks” - a chrome.css has at least stopped this being so visible (in Fireox).

This has been an eye opener for me - this should be a choice, not the default setting.

Thanks

···

On Monday, August 26th, 2024 at 08:47, PieroV via Tor Project Forum noreply@forum.torproject.org wrote:

PieroV Abituale
August 26

Rocketboy0:

As stated, there is a simple way to stop this in mainstream Firefox.

userChrome.css?
Then you’re hiding the problem, not solving it.

As far as I can tell , Firefox doesn’t even save the information on when you lastly visited a bookmark with the bookmarks themselves (check the moz_bookmarks table in places.sqlite).

If it’s saved anywhere else also in private browsing mode (where?), it’s a disk leak we should solve and send to upstream Firefox.
Keep in mind that disabling private browsing mode isn’t officially supported for Tor Browser, so we won’t fix issues that don’t apply to PBM.

However, for me Firefox shows the recently added bookmarks, not visited.
There are two fields in the moz_bookmarks table: dateAdded and lastModified.
Maybe we could add a pref to hardcode them to some date (e.g., Jan 1st 2020) and then not update anymore.

But as already said, userChrome.css isn’t a solution.
The data is stil there.

Visit Topic or reply to this email to respond.

To unsubscribe from these emails, click here.