[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #21260 [Applications/Tor Browser]: Tor browser should be set so add-ons will not automaton update in the background

#21260: Tor browser should be set so add-ons will not automaton update in the
background
------------------------------------------+----------------------
     Reporter:  Dbryrtfbcbhgf             |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+----------------------
 If a company that develops a add-on gets compromised, they could released
 a Malicious update for there extension and all users running tor browser
 would get the new malicious update that could compermise there
 Anonymity, the users would not even know that the Malicious add-on would
 be installed  "ex. HTTPS Everywhere"

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21260>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs