Hi. When I need to hard reset Tor Browser identity I always download a new instance of Tor Browser using Tor Browser Downloader (AnonDist) package. But the problem is that I need to download Tor Browser tarball every time I need to restart Tor Browser identity. Unfortunately, Tor Browser Downloader (AnonDist) doesn’t have an ability to cache downloaded Tor Browser tarball and keep it locally on Workstation machine. I need to download Tor Browser every time from Tor Project servers.
Can you add an ability to cache downloaded Tor Browser tarball?
Tor Browser is designed to be amnesiac and resistant to fingerprinting. Of course certain other properties (like swap on the host or non-Whonix guest) could violate the principle.
I also do not use the integrated bookmarks of Tor Browser over similar concerns
doesn’t have an ability to cache downloaded Tor Browser tarball and keep it locally on Workstation machine
Also think this is fine. As long as verification signatures are either retrieved or stored and verified against a pinned-key during installation to avoid tampering do not see any downsides other than the storage requirements for cached installation-files.
Well, then what’s the difference between pressing New Identity buttion on Tor Browser and completely reinstalling Tor Browser using Tor Browser Downloader (AnonDist) ? Any difference between these two actions?
Sometimes I need to change some about:config values for my personal reasons. If I just reset them to default values will this action return my fingerprint to default value or I need to completely reinstall Tor Browser every time I change about:config options?
A little update. tb-updater version 3:23.7-1 --reset works as described. However tb_skip_functions+=" tb_cleanup " needs to be added to the configuration file for update-torbrowser else the archive gets cleaned up after a normal download.
This raises the question, why re-download the same version anyhow if it was previously downloaded? Perhaps:
Perform update-torbrowser
Check the version number
If it’s a new version, download it. If it is the same version and download was previously completed, and if digital software signature verification succeeded, don’t needlessly re-download.
But this is getting more and more complex for such a rather minority use case. tb-updater source code is already complex enough. The additional complexity required might make it unmaintainable.