{"action":"created","issue":{"url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2389","repository_url":"https://api.github.com/repos/QubesOS/qubes-issues","labels_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2389/labels{/name}","comments_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2389/comments","events_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2389/events","html_url":"https://github.com/QubesOS/qubes-issues/issues/2389","id":184614709,"number":2389,"title":"GRAVE privacy issue in Qubes DVMs","user":{"login":"Rudd-O","id":346306,"avatar_url":"https://avatars.githubusercontent.com/u/346306?v=3","gravatar_id":"","url":"https://api.github.com/users/Rudd-O","html_url":"https://github.com/Rudd-O","followers_url":"https://api.github.com/users/Rudd-O/followers","following_url":"https://api.github.com/users/Rudd-O/following{/other_user}","gists_url":"https://api.github.com/users/Rudd-O/gists{/gist_id}","starred_url":"https://api.github.com/users/Rudd-O/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Rudd-O/subscriptions","organizations_url":"https://api.github.com/users/Rudd-O/orgs","repos_url":"https://api.github.com/users/Rudd-O/repos","events_url":"https://api.github.com/users/Rudd-O/events{/privacy}","received_events_url":"https://api.github.com/users/Rudd-O/received_events","type":"User","site_admin":false},"labels":[{"id":184545373,"url":"https://api.github.com/repos/QubesOS/qubes-issues/labels/C:%20core","name":"C: core","color":"cccccc","default":false},{"id":184545393,"url":"https://api.github.com/repos/QubesOS/qubes-issues/labels/P:%20major","name":"P: major","color":"fbca04","default":false},{"id":353446674,"url":"https://api.github.com/repos/QubesOS/qubes-issues/labels/privacy","name":"privacy","color":"5319e7","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/QubesOS/qubes-issues/milestones/18","html_url":"https://github.com/QubesOS/qubes-issues/milestones/Release%203.2","labels_url":"https://api.github.com/repos/QubesOS/qubes-issues/milestones/18/labels","id":1222185,"number":18,"title":"Release 3.2","description":"","creator":{"login":"marmarek","id":726704,"avatar_url":"https://avatars.githubusercontent.com/u/726704?v=3","gravatar_id":"","url":"https://api.github.com/users/marmarek","html_url":"https://github.com/marmarek","followers_url":"https://api.github.com/users/marmarek/followers","following_url":"https://api.github.com/users/marmarek/following{/other_user}","gists_url":"https://api.github.com/users/marmarek/gists{/gist_id}","starred_url":"https://api.github.com/users/marmarek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marmarek/subscriptions","organizations_url":"https://api.github.com/users/marmarek/orgs","repos_url":"https://api.github.com/users/marmarek/repos","events_url":"https://api.github.com/users/marmarek/events{/privacy}","received_events_url":"https://api.github.com/users/marmarek/received_events","type":"User","site_admin":false},"open_issues":98,"closed_issues":102,"state":"open","created_at":"2015-07-23T14:28:15Z","updated_at":"2016-10-31T15:12:18Z","due_on":null,"closed_at":null},"comments":13,"created_at":"2016-10-22T07:06:13Z","updated_at":"2016-11-02T15:09:14Z","closed_at":null,"body":"In any Qubes OS VM that unpacks `/etc/dispvm-dotfiles.tbz` (to my verification, any DVM whose template is the Fedora one, and whose owner has not told that the `/home` is customized with `/home/user/.qubes-dispvm-customized`) the Mozilla profiles directory is unpacked into `/home` prior to launching any disposable apps.\n\nThis profiles directory contains a Google tracking cookie called `PREF`.  This cookie is well-known to be the cookie that NSA was using to track users uniquely using their mass surveillance selectors, but now the cookie has been deprecated.\n\nTwo other sites have left cookies in that surprise Firefox profile: `stats.webtrendslive.com` and `mozilla.org`.  **The cookies are marked to be transmitted over plain HTTP**.\n\nThe Firefox cache is also not empty.\n\nFinally, there are a number of settings and other SQLite databases there.  I am pretty sure they have not been vacuumed, so whichever browser cache and history that was when the `tbz` file was constructed, that exact same profile has been the profile that everyone using Qubes DispVM uses.\n\nThere are numerous other personal dotfile settings that are stored in the `tbz` file in question.\n\nFrankly, I do not know how `/etc/dispvm-dotfiles.tbz` came to be, but I am shocked to have discovered this.  The DispVM ought to boot with exactly zero customizations from a `/etc/skel` home directory.\n\nI find no rationale for the contents of the `tbz` file anywhere.\n\nI donno what to think.\n"},"comment":{"url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/comments/257893634","html_url":"https://github.com/QubesOS/qubes-issues/issues/2389#issuecomment-257893634","issue_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2389","id":257893634,"user":{"login":"jpouellet","id":1231207,"avatar_url":"https://avatars.githubusercontent.com/u/1231207?v=3","gravatar_id":"","url":"https://api.github.com/users/jpouellet","html_url":"https://github.com/jpouellet","followers_url":"https://api.github.com/users/jpouellet/followers","following_url":"https://api.github.com/users/jpouellet/following{/other_user}","gists_url":"https://api.github.com/users/jpouellet/gists{/gist_id}","starred_url":"https://api.github.com/users/jpouellet/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jpouellet/subscriptions","organizations_url":"https://api.github.com/users/jpouellet/orgs","repos_url":"https://api.github.com/users/jpouellet/repos","events_url":"https://api.github.com/users/jpouellet/events{/privacy}","received_events_url":"https://api.github.com/users/jpouellet/received_events","type":"User","site_admin":false},"created_at":"2016-11-02T15:09:14Z","updated_at":"2016-11-02T15:09:14Z","body":"> In case of local compromise a VM will always be unique from other compromised VMs so killing file timestamps would not help.\r\n\r\n@adrelanos Are you aware of an attempt to enumerate a list of such observable unique attributes anywhere?"}}
{"actor":{"display_login":"jpouellet"}}