[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] using themes in Aurora



On 10/14/2011 1:28 PM, Andrew Lewman wrote:
On Friday, October 14, 2011 12:49:32 Joe Btfsplk wrote:
No one's EVER looked into Tor security issues of using themes (from
Mozilla addons site) or Firefox GUI enhancement addons, like Tab Mix Plus?
You could be the first!

My first step would be to see what information is sent back to mozilla's
getpersonas.com site by the theme.
What type of info & by what mechanism would you be looking for, that's sent to MAO site?

There was long discussion in the recent past about updating addons / FF in a Tor or TBB session. FWIW, looks like the DEFAULT setting in Aurora (TBB 2.2.33-3) under Options>Network>Update, is to automatically check for addons updates (by design or mistake), but NOT to check Firefox updates. Now, whether NoScript in later TBB versions over rides all that, don't know. Either way, checking for themes & addons updates is same Mozilla site.

I don't think info sent to MAO site for themes would be diff than other addons. Except for a very few addons that take you to external pages, once addon is installed / updated. But, "auto check for addons" can be manually DESELECTED, once an addon / theme is installed.

_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk