#24421: "Temporarily allow all this page" gets inherited when New Identity is
chosen.
----------------------------------------------+--------------------------
 Reporter:  cypherpunks                       |          Owner:  tbb-team
     Type:  defect                            |         Status:  new
 Priority:  High                              |      Milestone:
Component:  Applications/Tor Browser          |        Version:
 Severity:  Major                             |     Resolution:
 Keywords:  tbb-newnym, TorBrowserTeam201712  |  Actual Points:
Parent ID:                                    |         Points:
 Reviewer:                                    |        Sponsor:
----------------------------------------------+--------------------------

Comment (by cypherpunks):

 Steps to reproduce for comment:5:

 1. Set High security setting (I was using that one, didn't bother to see
 if it affects other security settings).
 2. Go to the Bezos Washington Post Secure Drop: jcw5q6uyjioupxcc.onion
 (you can verify it here: securedrop.org/directory )
 3. Click on "Submit Documents".
 4. Click on "Use New Codename".
 5. Select some large file (we don't want the upload to finish so we don't
 waste the journalists' time wasting Bezos' money) like a Tor Browser
 tar.gz
 6. Open your Gnome System Monitor and go to "Resources" and watch the
 network graph. You should see the upload at its peek values.
 7. Close the tab, you can see that the upload is still going.
 8. Click on New Identity, again, upload is still going.
 9. Close the Tor Browser, upload halts.

 It works for clearnet websites as well, you can test with
 https://catbox.moe/ following essentially the same procedure as the last
 ones above (i.e. 5-9).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24421#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Reply via email to