[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #27608 [Applications/Tor Browser]: TB 8.5a1: messages from the update engine

To: undisclosed-recipients: ;
Subject: Re: [tor-bugs] #27608 [Applications/Tor Browser]: TB 8.5a1: messages from the update engine
From: "Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>
Date: Sun, 16 Sep 2018 02:39:48 -0000
Auto-submitted: auto-generated
Delivered-to: archiver@xxxxxxxx
Delivery-date: Sat, 15 Sep 2018 22:40:01 -0400
In-reply-to: <051.7ead11e66359eba0d933dd31933cfa26@torproject.org>
List-archive: <http://lists.torproject.org/pipermail/tor-bugs/>
List-help: <mailto:tor-bugs-request@lists.torproject.org?subject=help>
List-id: "auto: Tor bug tracker status mails" <tor-bugs.lists.torproject.org>
List-post: <mailto:tor-bugs@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs>, <mailto:tor-bugs-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-bugs>, <mailto:tor-bugs-request@lists.torproject.org?subject=unsubscribe>
References: <051.7ead11e66359eba0d933dd31933cfa26@torproject.org>
Reply-to: no-reply@xxxxxxxxxxxxxx, tor-assistants@xxxxxxxxxxxxxx
Sender: "tor-bugs" <tor-bugs-bounces@xxxxxxxxxxxxxxxxxxxx>

#27608: TB 8.5a1: messages from the update engine
--------------------------------------+--------------------------
 Reporter:  traumschule               |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-8.0-issues            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------
Changes (by traumschule):

 * status:  needs_information => new


Comment:

 does this help or should i poke my logs a bit more?

 {{{
 ,{"id":"{73a6fe31-595d-460b-a920-fcc0f8843232}","syncGUID":"{679a3a4d-4728
 -44ef-b1a3-9e0b5637f057}","location":"app-
 profile","version":"10.1.9.6","type":"webextension","internal
 Name":null,"updateURL":null,"updateKey":null,"optionsURL":"ui/options.html","optionsType":3,"optionsBrowserStyle":true,"aboutURL":null,"defaultLocale":{"name":"NoScript","descri
 ption":"Extra protection for your Firefox: NoScript allows JavaScript,
 Flash (and other plugins) only for trusted domains of your choice (e.g.
 your home-banking web site). This
 whitelist based pre-emptive blocking approach prevents exploitation of
 security vulnerabilities (known and even unknown!) with no loss of
 functionality… Experts will agree: Fire
 fox is really safer with NoScript
 :-)","creator":null,"developers":null,"translators":null,"contributors":null},"visible":true,"active":true,"userDisabled":false,"appDisabled":f
 alse,"installDate":946684800000,"updateDate":1537011357000,"applyBackgroundUpdates":1,"bootstrap":true,"path
 ":"[...]tor-browser8.0a10/Browser
 /TorBrowser/Data/Browser/profile.default/extensions/{73a6fe31-595d-
 460b-a920-fcc0f8843232}.xpi","skinnable":false,"size":1001138,"sourceURI":"https://addons.cdn.mozilla.net/user
 -media/addons/722/noscript_security_suite-10.1.9.6-an+fx.xpi?filehash=sha256%3A336ae26d0a70688e6c2b3c14267c9e80f52f6f36c31f23b8242e0edae3666d42","releaseNotesURI":"https://addon
 s.mozilla.org/versions/updateInfo/2532678/en-
 US/","softDisabled":false,"foreignInstall":true,"strictCompatibility":true,"locales":[{"name":"NoScript","description":"Extra
 protec
 tion for your Firefox: NoScript allows JavaScript, Flash (and other
 plugins) only for trusted domains of your choice (e.g. your home-banking
 web site). This whitelist based pre-
 emptive blocking approach prevents exploitation of security
 vulnerabilities (known and even unknown!) with no loss of functionality…
 Experts will agree: Firefox is really safer
 with NoScript
 :-)","creator":null,"developers":null,"translators":null,"contributors":null,"locales":["en"]},{"name":"NoScript","description":"Une
 protection supplémentaire pour
  votre Firefox : NoScript autorise JavaScript, Flash (et autres greffons)
 seulement pour les domaines de votre choix (p. ex. le site Web de votre
 banque). Cette approche de bloc
 age préemptif, fondé sur une liste blanche, prévient l’exploitation de
 vulnérabilités informatiques (connues et inconnues) sans perte de
 fonctionnalité. Les experts seront d’acc
 ord : Firefox est vraiment plus sûr avec NoScript
 :-)","creator":null,"developers":null,"translators":null,"contributors":null,"locales":["fr"]},{"name":"NoScript","description"
 :"Protezione extra per Firefox: NoScript consente JavaScript, Flash (e
 altri plug-in) solo per domini verificati di tua scelta (ad es. il tuo
 sito web di home banking). Questo a
 pproccio di blocco preventivo basato su whitelist previene lo sfruttamento
 delle vulnerabilità della sicurezza (note e persino sconosciute!) senza
 alcuna perdita di funzionalità
 … Gli esperti saranno d‘accordo: Firefox è davvero più sicuro con NoScript
 :-)","creator":null,"developers":null,"translators":null,"contributors":null,"locales":["it"]},{"name"
 :"NoScript","description":"Zusätzliche Sicherheit für Ihren Firefox: Mit
 NoScript können Sie JavaScript, Flash, Java und andere ausführbare Inhalte
 bloß auf vertrauenswürdigen D
 omains Ihrer Wahl zulassen, z.B. beim Online-Banking. Dieser whitelist-
 basierte präventive Ansatz verhindert das Ausnutzen von (bekannten und
 unbekannten!) Sicherheitslücken ohn
 e Verlust an Funktionalität… Experten sind sich einig: Firefox wird
 wirklich noch sicherer mithilfe von NoScript
 ;-)","creator":null,"developers":null,"translators":null,"contri
 butors":null,"locales":["de"]},{"name":"NoScript","description":"Protecció
 addicional per al vostre Firefox: NoScript permet JavaScript, Flash (i
 altres connectors) només per al
 s dominis de confiança que trieu (p. ex. el web de banca de la llar).
 L'enfocament de bloqueig preventiu basat en la llista blanca evita
 l'explotació de vulnerabilitats de segur
 etat (conegudes i fins i tot desconegudes) sense pèrdua de
 funcionalitat... Els experts hi estan d'acord: Firefox és realment més
 segur amb NoScript :-)","creator":null,"develop
 ers":null,"translators":null,"contributors":null,"locales":["ca"]},{"name":"NoScript","description":"
 为 Firefox 提供额外的保护：NoScript 只允许在您选择的信任域执行 JavaScript
 、F
 lash 以及其他插件（比如您的家庭银行网站）。这种基于预设白名单的拦截策略可
 以防止（已知或未知的）安全漏洞攻击，同时不损失任何功能…专业人士也会同意：
 NoScript 让 Firefox 更安全 :-)"
 ,"creator":null,"developers":null,"translators":null,"contributors":null,"locales
 ":["zh-CN"]},{"name":"NoScript","description":"Дополнительная защита для
 Firefox: NoScript позво
 ляет разрешать JavaScript, Flash (и другие плагины) только для доверенных
 доменов, выбранных вами (например: сайт банковского обслуживания). Белый
 список, основанный на принципе
  упреждающего блокирования, позволяет предотвратить использование
 уязвимостей (известных и еще не известных!) без потери функциональности…
 Эксперты соглашаются: Firefox действит
 ельно безопаснее с NoScript
 :-)","creator":null,"developers":null,"translators":null,"contributors":null,"locales":["ru"]},{"name":"NoScript","description":"Gwarez
 ouzhpenn evit
  ho Firefox: NoScript a aotren JavaScript, Flash (ha lugantoù all)
 nemetken evit an domanioù a c'heller kaout fiziañs enno diouzh ho c'hoant
 (da skouer, ho lec'hienn bank er gêr
 ). An hentenn stankañ-mañ dizarbenn diazezet war ar wennlistenn a vir ouzh
 ar c'horvoiñ frailhoù surentez (anaveet ha dianaveet!) Hep koll
 arc'hweladur ebet... An dud arbennig a
  lavaro deoc'h: Firefox a zo suroc'h hag a galz gant NoScript
 :-)","creator":null,"developers":null,"translators":null,"contributors":null,"locales":["br"]},{"name":"NoScript","
 description":"Protección adicional para tu Firefox: NoScript permite
 JavaScript, Flash (y otros plugins) sólo para dominios de confianza de su
 elección (por ejemplo, su sitio we
 b de banca en casa). Este enfoque de bloqueo preventivo basado en listas
 blancas evita la explotación de vulnerabilidades de seguridad (¡conocidas
 e incluso desconocidas!) sin p
 érdida de funcionalidad... Los expertos estarán de acuerdo: Firefox es
 realmente más seguro con NoScript :-)\n\nTraducción realizada con el
 traductor www.DeepL.com/Translator","
 creator":null,"developers":null,"translators":null,"contributors":null,"locales":["es"]},{"name":"NoScript","description":"Proteção
 extra para o seu Firefox: NoScript permite Ja
 vaScript, Flash (e outros plugins) somente para domínios confiáveis de sua
 escolha (por exemplo, o site de seu home-banking). Esta abordagem de
 bloqueio preventivo baseada em li
 sta de permissões impede a exploração de vulnerabilidades de segurança
 (conhecidas e até mesmo desconhecidas!) sem perda de funcionalidade...
 Especialistas vão concordar: o Fire
 fox é muito mais seguro com o NoScript
 :-)","creator":null,"developers":null,"translators":null,"contributors":null,"locales
 ":["pt-BR"]},{"name":"NoScript","description":"Firefo
 x için ek koruma: NoScript, yalnız güvenilir olarak seçtiğiniz etki
 alanları için (İnternet bankacılığı gşbş) JavaScript, Flash (ve diğer
 uygulama ekleri) gibi bileşenlere izin
 verir. Bu beyaz liste temelli engelleme yaklaşımı, herhangi bir özellik
 kaybına neden olmadan güvenlik açıklarından yararlanılmasını engeller
 (bilinen ve bilinmeyen!)... Uzmanla
 r Firefox uygulamasının NoScript ile gerçekten güvenli olduğu konusunda
 hemfikir
 :-)","creator":null,"developers":null,"translators":null,"contributors":null,"locales":["tr"]},{
 "name":"NoScript","description":"Extra bescherming voor uw Firefox:
 NoScript staat JavaScript, Flash en andere plug-ins alleen toe voor
 vertrouwde domeinen van uw keuze (zoals u
 w website voor thuisbankieren). Deze op een toestemmingenlijst gebaseerde
 preventieve benadering van blokkering voorkomt exploitatie van
 beveiligingskwetsbaarheden (bekende en z
 elfs onbekende!) zonder verlies van functionaliteit… Experts zijn het
 ermee eens: Firefox is echt veiliger met NoScript.
 :-)","creator":null,"developers":null,"translators":null
 ,"contributors":null,"locales":["nl"]}],"targetApplications":[{"id":"toolkit@xxxxxxxxxxx","minVersion":"59.0","maxVersion":null}],"targetPlatforms":[],"multiprocessCompatible":t
 rue,"signedState":2,"seen":true,"dependencies":[],"hasEmbeddedWebExtension":false,"userPermissions":{"permissions":["contextMenus","privacy","storage","tabs","unlimitedStorage",
 "webNavigation","webRequest","webRequestBlocking"],"origins":["<all_urls>"]},"icons":{"48":"img/icon48.png","96":"img/icon96.png","256":"img/icon256.png"},"iconURL":null,"icon64
 URL":null,"blocklistState":0,"blocklistURL":null,"startupData":null},{"id":...
 [another addon]
 }}}
 You can see that no manifest is defined.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27608#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

References:
- [tor-bugs] #27608 [Applications/Tor Browser]: TB 8.5a1: messages from the upgrade engine
  - From: Tor Bug Tracker & Wiki

Prev by Author: Re: [tor-bugs] #19812 [Applications/Tor Browser]: onion everywhere
Next by Author: [tor-bugs] #27451 [Core Tor/Tor]: Refactor socket closing in tor_tls_free()
Previous by thread: Re: [tor-bugs] #27608 [Applications/Tor Browser]: TB 8.5a1: messages from the update engine
Next by thread: [tor-bugs] #27609 [Applications/Tor Browser]: TBA: Evaluate Tor Onion Proxy Library
Index(es):
- Author
- Thread