1473581 - "Open anonymous window" doesn't work in Italian Firefox 61.0

Status: RESOLVED INACTIVE

(Firefox :: Private Browsing, defect)

Description

[leonardo.porpora]

Attachment: Firefox_PoC.mp4

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0
Build ID: 20180626223325

Steps to reproduce:

Hi everyone!

Here is Leonardo Porpora aka 'n0sign4l' today I want to send you a bug.
The latest version of Firefox 61.0 64-bit and probably also the 32-bit
(I haven't tested) both for GNU-Linux and Windows (I think also for
MacOS but I haven't tested this) are vulnerable to this Bug. ESR are not
vulnerable. The anonymous navigation doesn't work:

Step to reproduce:

- open Firefox

- click open menu

- click 'open new anonymous window'

- you will see that a new 'normal' window is open not an anonymous one.

I sent you also a video as PoC. Personally I consider this Bug quite
serious because we always have to think about ppl who doesn't know
anything about IT, they click open new anonymous window and they think
it is opened since a new window comes up BUT it's a normal one.

Please keep me updated and let me know if I Can get a CVE for this.

Thanks,

Leonardo

Comment 1

[Daniel Veditz [:dveditz]]

This feature still works for me (in the English version, at least).

Your video wasn't all that useful -- just showed the version you're using which you already told us, but doesn't actually demonstrate the problem happened. A failure to open a private browsing window would be a serious functional regression but it's not a "vulnerability" that needs to be hidden (nor get a CVE).

It this is a general bug in the Italian version I would have expected a lot more noise about it, so I suspect this problem is unique to your set up. Perhaps an Extension is interfering? You might have better luck with the initial investigation from https://support.mozilla.org/it/ and then fill out the bug once more details are known.

Comment 2

[:Gijs (he/him)]

Can you reproduce in a clean profile? ( https://support.mozilla.org/kb/profile-manager-create-and-remove-firefox-profiles )

If not, in the profile where you're reproducing, can you attach a copy of the JSON data from about:support ?

Comment 3

[leonardo.porpora]

I can reproduce in a clean profile. I tested creating 2 new VM one with win 10 and one with debian 9 both of them were without firefox 61.0 I installed it and saw this bug. In origin I tested without any profile logged in (so as the highest quantity of people does)

Comment 4

[leonardo.porpora]

"so I suspect this problem is unique to your set up." i haven't set up anything... is how you gave me, the only thing I changed was that I use duckduckgo instead of ... but I tried also with google and bing the problem persists (and I don't think that the chose of the type can interferer with this problem)

Comment 5

[Josh Matthews [:jdm]]

Have you enabled "never remember history" mode (as described in https://support.mozilla.org/en-US/kb/settings-privacy-browsing-history-do-not-track)?

Comment 6

[Sylvestre Ledru [:Sylvestre]]

Closing as we don't have enough information to act on it.
Please reopen with more information if you have any.