#24421: "Temporarily allow all this page" gets inherited when New Identity is chosen. ----------------------------------------------+-------------------------- Reporter: cypherpunks | Owner: tbb-team Type: defect | Status: new Priority: High | Milestone: Component: Applications/Tor Browser | Version: Severity: Major | Resolution: Keywords: tbb-newnym, TorBrowserTeam201712 | Actual Points: Parent ID: | Points: Reviewer: | Sponsor: ----------------------------------------------+--------------------------
Comment (by cypherpunks): Steps to reproduce for comment:5: 1. Set High security setting (I was using that one, didn't bother to see if it affects other security settings). 2. Go to the Bezos Washington Post Secure Drop: jcw5q6uyjioupxcc.onion (you can verify it here: securedrop.org/directory ) 3. Click on "Submit Documents". 4. Click on "Use New Codename". 5. Select some large file (we don't want the upload to finish so we don't waste the journalists' time wasting Bezos' money) like a Tor Browser tar.gz 6. Open your Gnome System Monitor and go to "Resources" and watch the network graph. You should see the upload at its peek values. 7. Close the tab, you can see that the upload is still going. 8. Click on New Identity, again, upload is still going. 9. Close the Tor Browser, upload halts. It works for clearnet websites as well, you can test with https://catbox.moe/ following essentially the same procedure as the last ones above (i.e. 5-9). -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24421#comment:6> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online
_______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs