Delivery-Date: Mon, 16 Jun 2014 20:41:37 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.3 required=5.0 tests=BAYES_00,FREEMAIL_FROM,
	FROM_LOCAL_NOVOWEL,RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD autolearn=ham
	version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by moria.seul.org (Postfix) with ESMTPS id 8C3B61E0BFF
	for <archiver@seul.org>; Mon, 16 Jun 2014 20:41:35 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 72EE42FF5B;
	Tue, 17 Jun 2014 00:41:34 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 0B2482FE04
 for <tor-talk@lists.torproject.org>; Tue, 17 Jun 2014 00:38:28 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id vthE1pxTK7ig for <tor-talk@lists.torproject.org>;
 Tue, 17 Jun 2014 00:38:27 +0000 (UTC)
Received: from mout.gmx.com (mout.gmx.com [74.208.4.201])
 (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id E15AC2FC61
 for <tor-talk@lists.torproject.org>; Tue, 17 Jun 2014 00:38:27 +0000 (UTC)
Received: from [127.0.0.1] ([99.190.181.188]) by mail.gmx.com (mrgmxus002)
 with ESMTPSA (Nemesis) id 0LuxWx-1WnanQ0aLx-01082b for
 <tor-talk@lists.torproject.org>; Tue, 17 Jun 2014 02:38:25 +0200
Message-ID: <539F8DF1.5010107@gmx.com>
Date: Mon, 16 Jun 2014 19:38:09 -0500
From: Joe Btfsplk <joebtfsplk@gmx.com>
User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64;
 rv:24.0) Gecko/20100101 Thunderbird/24.5.0
MIME-Version: 1.0
To: tor-talk@lists.torproject.org
References: <539F42E7.7010104@gmx.com> <539F8581.60305@cyblings.on.ca>
In-Reply-To: <539F8581.60305@cyblings.on.ca>
X-Provags-ID: V03:K0:IOaojCLgMEd4/YJOHxASMDdaK0sQ6GWToF1fbEGrx6+UQD0mBm9
 7gek71iRL8+EJPEZdpWTgsdOWrS6Itn5sS6mdAeiYQ0WuJP0t0I/QrxOmWN3aL25LZaKtz0
 zlnKKIRL83ZyAFgb06Ip8fGBBF7Oswah31rDarMwBltEwrC++Cjm/xKpkV+E/5orVR9vSm6
 NsTomxg0Zn5EmreA8Fcgg==
Subject: Re: [tor-talk] Flash executables keep starting in background when
 using TBB
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>


On 6/16/2014 7:02 PM, krishna e bera wrote:
> On 14-06-16 03:17 PM, Joe Btfsplk wrote:
>> In at least the last couple TBB versions, or longer, I've found
>> FlashPlayerPlugin_x.x.exe (latest *13_0_0_214.exe) running in background
>> - numerous times.
>> Actually, 2 instances of flash exe files are always shown running.
>>
>> Biggest question is, what is Flash doing to Tor anonymity in these
>> cases.  Just because Flash isn't playing doesn't mean it's not
>> contacting someone, somewhere.
>> I rarely use Flash - I assume TBB *now comes w/ it installed?*
>> [snip]
> Adobe Flashplayer has never come with TBB.
>
> Are you sure it isnt the ActiveX plugin that comes with MS-Windows? Or
> perhaps it got installed at the same time as you updated the flashplayer
> for Internet Explorer?  If not, your computer may be infected with a
> fake flashplayer.  Many website ads offer them with a button that looks
> deceptively like the download you may have wanted to click on, or even a
> drive-by exploit.
>
> Preventing infections from 3rd party sites is one big reason to run
> either an ad blocker or a more rigorous add-on such as RequestPolicy.
>
No, I think it's more likely that if Flash plugin is installed for one 
version of Fx, it gets installed for all versions of Fx.

That may explain how it gets there, but not why it starts 2 flash 
executables in background, when the plugin in TBB has always been, & 
still is set at "Never Activate."
It's not like I'm temporarily activating the plugin, playing some Flash 
vids, then forgetting to disable it.

As said, I never see the Flash files that run in background, being 
*associated w/ regular Fx* - only TBB.  They're always listed under Tor 
Browser - in Process Explorer window.
Has to be a bug?  If I catch the files running in background (as process 
under TBB), then immediately check TBB plugins status - & it's still 
disabled, how could that be?

Again, the same version Flash plugin is installed in regular Fx & those 
2 Flash files *never start in background, under it.*

I (maybe) can just remove the plugin from TBB - I rarely use Flash. But 
if I keep it in regular Fx - for emergencies - I'll have to keep 
removing it in TBB.  Sometimes, I'll forget, cause I don't think of 
plugins being installed in TBB.
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

