Delivery-Date: Mon, 16 Jun 2014 15:26:30 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.3 required=5.0 tests=BAYES_00,FREEMAIL_FROM,
	FROM_LOCAL_NOVOWEL,RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD autolearn=ham
	version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by moria.seul.org (Postfix) with ESMTPS id AEEE91E0BFF
	for <archiver@seul.org>; Mon, 16 Jun 2014 15:26:28 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id DBDC52FFCE;
	Mon, 16 Jun 2014 19:26:26 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 9BED23004E
 for <tor-talk@lists.torproject.org>; Mon, 16 Jun 2014 19:18:16 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id HcnOS-OYMh1y for <tor-talk@lists.torproject.org>;
 Mon, 16 Jun 2014 19:18:16 +0000 (UTC)
Received: from mout.gmx.com (mout.gmx.com [74.208.4.201])
 (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id 82F702FECF
 for <tor-talk@lists.torproject.org>; Mon, 16 Jun 2014 19:18:16 +0000 (UTC)
Received: from [127.0.0.1] ([99.190.181.188]) by mail.gmx.com (mrgmxus002)
 with ESMTPSA (Nemesis) id 0Lyn0j-1WhcKA1igZ-016APG for
 <tor-talk@lists.torproject.org>; Mon, 16 Jun 2014 21:18:13 +0200
Message-ID: <539F42E7.7010104@gmx.com>
Date: Mon, 16 Jun 2014 14:17:59 -0500
From: Joe Btfsplk <joebtfsplk@gmx.com>
User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64;
 rv:24.0) Gecko/20100101 Thunderbird/24.5.0
MIME-Version: 1.0
To: Tor-Talk <tor-talk@lists.torproject.org>
X-Provags-ID: V03:K0:UeAKaM0xFiT3lJvWsRDsgi0UtCOD2/vjKMbhsPTmJ4TG2ReLW/5
 nnoPvIOM3zHgPfLsA5XOGqmalBJ9nYD+bOPCHeSMJCCS3lKCqaXraRE65MTwJpmbs/hqwRE
 QxQ66h9snC5m7jZEiCU2ocgS+Qf6yeWjWH325DvXplAuMJz+R8Dvw/7cg/7gr+CZLa6vBr4
 ga5qwmDQiigSIUZOcGKJg==
Subject: [tor-talk] Flash executables keep starting in background when using
	TBB
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

In at least the last couple TBB versions, or longer, I've found 
FlashPlayerPlugin_x.x.exe (latest *13_0_0_214.exe) running in background 
- numerous times.
Actually, 2 instances of flash exe files are always shown running.

Biggest question is, what is Flash doing to Tor anonymity in these 
cases.  Just because Flash isn't playing doesn't mean it's not 
contacting someone, somewhere.
I rarely use Flash - I assume TBB *now comes w/ it installed?*  The only 
time I would use it, is for something there appeared to be no other way 
possible AND on a site I wasn't concerned about.  Then immediately get a 
new identity.

Flash is NOT activated in TBB (always set to *"never activate"*) & I've 
never played any Flash content the times I've found the flash files 
running.
I'm not sure that when the flash files are found running, that I had 
played ANY video content at all.

By contrast, when I rarely play youtube vids in TBB, if it can't / won't 
play in HTML5, it always shows Flash as disabled or missing, & prompts 
to d/l it.
I'm not sure why that event would start these files running in 
background, if it does.

In Process Explorer, one flash*.exe instance has command line: 
\...\flash\NPSWF32_13_0_0_214.dll
The other has command line:  \...\flash\NPSWF32_13_0_0_214.dll" 
--host-npapi-version=27 --type=renderer

Both of those are shown under the process:  G:\Program Files\*Tor 
Browser\Browser\browser" - 7344 plugin* - (where TBB is installed).
Of all the times I've caught it, I don't believe Flash ever started 
uninvited under Firefox.

Activity history for the 2 files show they do write & read to disk, but 
I haven't sniffed them to see if they try to contact a server.

Has anyone ever looked in task manager or a process explorer & noticed 
these running?
Other than uninstalling Flash, how can I keep them from silently 
starting in background?
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

