Post #2664689

IndexedDB in Firefox returned database names in a deterministic order — process-scoped, not origin-scoped. A website could observe that order as a fingerprint and link it to what you were doing in Tor Browser. No cookies. No localStorage. Just the API returning results in the wrong sequence. Fix: Firefox 150 / ESR 140.10.0. Update now if you use Tor Browser. The lesson: privacy bugs don't always look like data leaks. Sometimes they look like a sorted list.