Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1193568

Bug#1068122: /usr/bin/firefox: clings to USB stick, Debian 12.5 up-to-date, Xfce

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Sat, 6 Apr 2024 21:26:25 +0700 Max Nikulin <manikulin@gmail.com> wrote:
> On Mon, 1 Apr 2024 21:32:41 +0300 Antti-Pekka Känsälä wrote:
> > Closing the Gmail tab will not help.
>
> I rarely use gmail web UI. At least in the case of KDE, Firefox releases
> file descriptor a few seconds after compose dialog is closed. It seems
> even closing the tab is not necessary. It was a file on an internal
> drive, but I do not think it matters.
>
> > appe@renaissance:~$ lsof | grep -i KINGSTON
> > x-www-bro 83803                             appe  128r      REG
> >   8,33      3433       6939 /media/appe/KINGSTON/noname/file4.gpg
> > x-www-bro 83803 83807 glean.dis             appe  128r      REG
> >   8,33      3433       6939 /media/appe/KINGSTON/noname/file4.gpg
> [...]
>
>  From my point of view it is in contradiction with the original complain:
>
> > I am worried Gmail in a Firefox tab is able to break out of Firefox
> > somehow, gaining unauthorized access to 128 files on a mounted USB
stick.
>
> Isn't /media/appe/KINGSTON/noname/file4.gpg the file you attached? What
> are other 127 files?

For my initial bug report, I just quickly did a "wc -l" on a long initial
printout, so I was mistaken to claim those were distinct files, I don't
know if they were.  But now I think it is strange that the same file should
be open so many times, it is wasteful at least and could lead to a cause
for the clinging.  In the dicussion in debian-user I think I said, that the
clinging once lasted for about a minute, after which the unmounting
completed. This probably led me to suspect that other files besides a less
than 4 kB file (an earlier "file3.gpg") could have been accessed.

If the problem is real, I think it should be easy to reproduce.  Maybe it
has to do with semi-legitimate virus scanning, or semi-legitimate concerns
some might have about encrypted messages, and my data security personally
is not at risk.  If the file was on an internal drive, you would be
unlikely to unmount it anyway.

I continue to worry about my USB stick security.  I have received advice,
and have plans to improve my data security (including switching to the
Chromium browser), but I still suspect that something is not right here.

Thanks.

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#1068122: /usr/bin/firefox: clings to USB stick, Debian 12.5 up-to-date, Xfce Antti-Pekka Johannes Känsälä <antti.pekka.kansala@iki.fi> - 2024-03-31 12:00 +0200
  Bug#1068122: My thoughts on the possible problem Antti-Pekka Känsälä <antti.pekka.kansala@gmail.com> - 2024-03-31 17:30 +0200
  Bug#1068122: /usr/bin/firefox: clings to USB stick, Debian 12.5 up-to-date, Xfce Max Nikulin <manikulin@gmail.com> - 2024-04-06 09:52 +0200
  Bug#1068122: /usr/bin/firefox: clings to USB stick, Debian 12.5 up-to-date, Xfce Max Nikulin <manikulin@gmail.com> - 2024-04-06 16:40 +0200
  Bug#1068122: /usr/bin/firefox: clings to USB stick, Debian 12.5 up-to-date, Xfce Antti-Pekka Känsälä <antti.pekka.kansala@gmail.com> - 2024-04-09 13:40 +0200
    Bug#1068122: /usr/bin/firefox: clings to USB stick, Debian 12.5 up-to-date, Xfce Max Nikulin <manikulin@gmail.com> - 2024-04-12 18:50 +0200
  Bug#1068122: /usr/bin/firefox: clings to USB stick, Debian 12.5 up-to-date, Xfce Antti-Pekka Känsälä <antti.pekka.kansala@gmail.com> - 2024-04-18 19:40 +0200
    Bug#1068122: /usr/bin/firefox: clings to USB stick, Debian 12.5 up-to-date, Xfce Max Nikulin <manikulin@gmail.com> - 2024-05-06 18:40 +0200

csiph-web