3 ms·
Doesn't (Desktop) Firefox use it for history and bookmarks and various things as well[1]? I wonder if 'delete my history' GUI action actually removes the file
by shabble 12y ago
Doesn't (Desktop) Firefox use it for history and bookmarks and various things as well[1]?
I wonder if 'delete my history' GUI action actually removes the file (securely) or just deletes entries from it, exposing it to this sort of recovery?
[1] The file location and sample query against places.sqlite from http://www.forensicswiki.org/wiki/Mozilla_Firefox#History http://www.forensicswiki.org/wiki/Mozilla_Firefox#History works for me on OSX 10.9/FF37
- deleted 12y ago[deleted]
- asutherland 12y agoFirefox's Places subsystem does use SQLite. Firefox's built-in SQLite implementation is compiled with the SQLITE_SECURE_DELETE mechanism referenced elsewhere in this thread (https://dxr.mozilla.org/mozilla-central/source/db/sqlite3/src/moz.build#37 https://dxr.mozilla.org/mozilla-central/source/db/sqlite3/sr...) and a configure check is performed when Firefox is built with system SQLite (https://dxr.mozilla.org/mozilla-central/source/configure.in#6653 https://dxr.mozilla.org/mozilla-central/source/configure.in#...). Additionally, there's a unit test that verifies that the feature is really working at https://dxr.mozilla.org/mozilla-central/source/storage/test/unit/test_sqlite_secure_delete.js https://dxr.mozilla.org/mozilla-central/source/storage/test/... that checks that a string shows up in the database and then disappears from the database when the row is removed from the database.