When in privacy mode, cache files can still be recovered!
The whole purpose of Privacy mode, is that there is no trace of cache files. This so called "Privacy mode" is a joke. The cache files are "Easily" recovered. (Recuva) I'd suggest to anyone is to operate in "Normal" mode. When done, close Firefox. (do not set it to delete files) Navigate to the cache folder and used a utility like "Eraser" or "SDelete" to permanently remove them with no chance of recovery. Mozilla might want to mention that. Just as you do when warning about "ISP can still track your visits"
Solução escolhida
Thanks for your responses. I was just surprised to see the files in cache2 and "doomed" folder that could be recovered. Also, I see small entries of web visits in files that are resident in MFT entries that have already been deleted. Those are now stuck there, clearly visible with any recovery program. Like I said before, If you "truly" want to remove any tracks of visits, (less ISP records) do not let FF delete your cache or cookies. Use SDelete or Eraser to wipe them. They will also wipe or zero-out data in files resident in the MFT.
Ler esta resposta 👍 2Todas as respostas (4)
Hi kendall_63, Thank you for your suggestion. I might also suggest to mention this in user feedback.You may submit feedback directly to the Advocacy team through the following page:
The User Advocacy team reviews all feedback and reports on the findings to the product teams and relevant parties, helping to influence and shape our products.
There shouldn't be any new data in the disk cache from the Private Browsing mode session. What plugins and extensions possibly store is something different. Note that the disk cache isn't cleared when you enter PB mode, so data that was present in the cache will still be there and is used once you close all PB mode windows and tabs.
See also the about:cache page.
Solução escolhida
Thanks for your responses. I was just surprised to see the files in cache2 and "doomed" folder that could be recovered. Also, I see small entries of web visits in files that are resident in MFT entries that have already been deleted. Those are now stuck there, clearly visible with any recovery program. Like I said before, If you "truly" want to remove any tracks of visits, (less ISP records) do not let FF delete your cache or cookies. Use SDelete or Eraser to wipe them. They will also wipe or zero-out data in files resident in the MFT.
Did you ever do a search in the Windows registry to see what other programs store there, especially MS programs like Internet Explorer?
Windows is not very secure when it comes to deleting data and only sets a delete flag in the MFT and doesn't even clear the index entry with the complete cluster chain and other meta data like happens in FAT16 and FAT32, so even fragmented files can easily be restored successfully if clusters haven't been reused.