[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-talk] Tor Browser disabled NoScript, but can't update
Thanks to all & for the link.
A slight change this morning. - that I didn't see last night (Fri
5/3/2019).
Last night I changed the about:config pref,
"xpinstall.signatures.required" to false - before I saw the post on Tor
Project's blog
https://blog.torproject.org/noscript-temporarily-disabled-tor-browser#comment-form.
Last night, the pref change & restarting TBB made no difference in NS
being disabled or in the addons manager message that the unverified
addon was disabled.
This morning - on TBB's 1st start, the addons manager allowed *NS to
load* normally & the message now says: "NoScript could not be verified
for use in Tor Browser. Proceed with caution."
Guessing Mozilla made a change so when Firefox contacts their addons
server, it doesn't disable addons - just shows a different warning?
The newest "Proceed with Caution" warning will likely confuse or concern
many.
If it's a hard coded message, there may be no alternative. Otherwise,
"better" wording could be used.
Would it be possible when TBB automatically or manually checks for a
newer TBB version, to temporarily show a short explanation & a link to a
Tor Project page for some explanation?
Is HTTPS Everywhere (in TBB) not signed by Mozilla - rather by Tor
Project, thus no warning about it in the addons manager?
On 5/4/19 8:30 AM, Georg Koppen wrote:
Mirimir:
On 05/04/2019 12:21 AM, Joe wrote:
I've used the latest stable TBB 8.0.8 (Linux) since released with the
latest NoScript (at that time).
Today is the 1st day I saw that NoScript was disabled by TBB.
I see now that it's not a TBB only issue, but also Firefox.
A comment on Reddit said, "They [Mozilla] let their add-on signing
certificate expire and it invalidated a shitload of add-ons."
I assume it expired today? When TBB & Fx checked for addon versions, it
saw the expired signing certificate.
There is a script listed on Reddit that supposedly will re-enable the
addons, but until Mozilla fixes the signing certificate bug, they said
the script would need running every 24 hrs.
See https://trac.torproject.org/projects/tor/ticket/30388 for temporary fix.
In addition to that: We plan to ship an updated Tor Browser as soon as
Mozilla has fixed the bug on their side. I expect Mozilla to be ready
later today so that we might be able to get a new Tor Browser out
tomorrow, or latest, Monday morning EU time. Sorry for the inconvenience.
Georg
--
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk