Package: chromium Version: 122.0.6261.57-1 Severity: normal X-Debbugs-Cc: Daniel Kahn Gillmor <d...@fifthhorseman.net>
I regularly launch chromimum with --temp-profile to have a completely isolated, throwaway browsing session. I am experimenting with switching to wayland. To use chromium with wayland, i need to launch it with --ozone-platform=wayland. Surprisingly, i discovered that if i launch it this way: chromium --ozone-platform=wayland --temp-profile Then it launches with the primary chromium profile, *not* an ephemeral profile. But if i launch it this way: chromium --temp-profile --ozone-platform=wayland then it does in fact use an ephemeral profile. I discovered this by using the former invocation to visit a site where i have a login, and noticed that i was already logged in as soon as i visited it. I consider this a pretty serious privacy violation: my entire client side state was mapped in to a process that i expected to be otherwise anonymous. --dkg -- System Information: Debian Release: trixie/sid APT prefers testing-debug APT policy: (500, 'testing-debug'), (500, 'testing'), (500, 'stable'), (500, 'oldstable'), (200, 'unstable-debug'), (200, 'unstable'), (1, 'experimental-debug'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 6.6.15-amd64 (SMP w/4 CPU threads; PREEMPT) Kernel taint flags: TAINT_FIRMWARE_WORKAROUND Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) Versions of packages chromium depends on: ii chromium-common 122.0.6261.57-1 ii libasound2 1.2.10-3 ii libatk-bridge2.0-0 2.50.0-1+b1 ii libatk1.0-0 2.50.0-1+b1 ii libatomic1 14-20240201-3 ii libatspi2.0-0 2.50.0-1+b1 ii libc6 2.37-15 ii libcairo2 1.18.0-1+b1 ii libcups2 2.4.7-1+b1 ii libdbus-1-3 1.14.10-4 ii libdouble-conversion3 3.3.0-1+b1 ii libdrm2 2.4.120-2 ii libevent-2.1-7t64 [libevent-2.1-7] 2.1.12-stable-8.1+b1 ii libexpat1 2.5.0-2+b2 ii libflac12 1.4.3+ds-2+b1 ii libfontconfig1 2.15.0-1.1 ii libfreetype6 2.13.2+dfsg-1+b1 ii libgbm1 23.3.5-1 ii libgcc-s1 14-20240201-3 ii libglib2.0-0 2.78.4-1 ii libgtk-3-0 3.24.41-1 ii libjpeg62-turbo 1:2.1.5-2+b2 ii libjsoncpp25 1.9.5-6+b2 ii liblcms2-2 2.14-2+b1 ii libminizip1 1:1.3.dfsg-3+b1 ii libnspr4 2:4.35-1.1+b1 ii libnss3 2:3.99-1 ii libopenh264-7 2.4.1+dfsg-1 ii libopenjp2-7 2.5.0-2+b2 ii libopus0 1.4-1+b1 ii libpango-1.0-0 1.52.0+ds-1 ii libpng16-16t64 [libpng16-16] 1.6.43-5 ii libpulse0 16.1+dfsg1-3 ii libsnappy1v5 1.1.10-1+b1 ii libstdc++6 14-20240201-3 ii libwebp7 1.3.2-0.4 ii libwebpdemux2 1.3.2-0.4 ii libwebpmux3 1.3.2-0.4 ii libwoff1 1.0.2-2+b1 ii libx11-6 2:1.8.7-1 ii libxcb1 1.15-1 ii libxcomposite1 1:0.4.5-1 ii libxdamage1 1:1.1.6-1 ii libxext6 2:1.3.4-1+b1 ii libxfixes3 1:6.0.0-2 ii libxkbcommon0 1.6.0-1 ii libxml2 2.9.14+dfsg-1.3+b2 ii libxnvctrl0 530.41.03-1 ii libxrandr2 2:1.5.4-1 ii libxslt1.1 1.1.35-1 ii xdg-desktop-portal-gtk [xdg-desktop-portal-backend] 1.15.1-1 ii xdg-desktop-portal-wlr [xdg-desktop-portal-backend] 0.7.1-1 ii zlib1g 1:1.3.dfsg-3+b1 Versions of packages chromium recommends: ii chromium-sandbox 122.0.6261.57-1 Versions of packages chromium suggests: ii chromium-driver 122.0.6261.57-1 pn chromium-l10n <none> pn chromium-shell <none> Versions of packages chromium-common depends on: ii libc6 2.37-15 ii libjsoncpp25 1.9.5-6+b2 ii libstdc++6 14-20240201-3 ii libx11-6 2:1.8.7-1 ii libxnvctrl0 530.41.03-1 ii x11-utils 7.7+6 ii xdg-utils 1.1.3-4.1 ii zlib1g 1:1.3.dfsg-3+b1 Versions of packages chromium-common recommends: ii awesome [notification-daemon] 4.3-7 ii chromium-sandbox 122.0.6261.57-1 ii dunst [notification-daemon] 1.9.2-1 ii fonts-liberation 1:2.1.5-3 ii libgl1-mesa-dri 23.3.5-1 pn libu2f-udev <none> ii notification-daemon 3.20.0-4+b1 pn system-config-printer <none> ii upower 1.90.2-8 Versions of packages chromium-driver depends on: ii libatomic1 14-20240201-3 ii libc6 2.37-15 ii libdouble-conversion3 3.3.0-1+b1 ii libevent-2.1-7t64 [libevent-2.1-7] 2.1.12-stable-8.1+b1 ii libglib2.0-0 2.78.4-1 ii libjsoncpp25 1.9.5-6+b2 ii libminizip1 1:1.3.dfsg-3+b1 ii libnspr4 2:4.35-1.1+b1 ii libnss3 2:3.99-1 ii libstdc++6 14-20240201-3 ii libxcb1 1.15-1 ii zlib1g 1:1.3.dfsg-3+b1 Versions of packages chromium-sandbox depends on: ii libc6 2.37-15 -- no debconf information
signature.asc
Description: PGP signature