[tbb-bugs] #21260 [Applications/Tor Browser]: Tor browser should be set so add-ons will not automaton update in the background
Tor Bug Tracker & Wiki
blackhole at torproject.org
Thu Jan 19 04:47:05 UTC 2017
#21260: Tor browser should be set so add-ons will not automaton update in the
background
------------------------------------------+----------------------
Reporter: Dbryrtfbcbhgf | Owner: tbb-team
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Keywords:
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
------------------------------------------+----------------------
If a company that develops a add-on gets compromised, they could released
a Malicious update for there extension and all users running tor browser
would get the new malicious update that could compermise there
Anonymity, the users would not even know that the Malicious add-on would
be installed "ex. HTTPS Everywhere"
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21260>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tbb-bugs
mailing list