Comment 3 for bug 1334469

Revision history for this message
Matiss Treinis (mrtreinis) wrote :

Thank you for reviewing this issue, Seth!

I believe that AppArmor profile would not solve this issue, only changing Tumbler default behavior would, for example, to have thumbnails expire after certain time.

This might not be a issue for every-day users storing family photos, however we use Ubuntu in our corporate environment, and upon reviewing our desktops we found that Tumblr has stored thumbnails for files from removable drives, some in quite large resolutions and on close inspection they could let attacker imply and deduce things, even after they are wiped from drives or not even present on the computer itself. This is why I believe this default functionality is partially flawed, because a non-expert user would never know that such cache of thumbnails exists.