[tbb-bugs] #21260 [Applications/Tor Browser]: Tor browser should be set so add-ons will not automaton update in the background

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Jan 19 04:47:05 UTC 2017


#21260: Tor browser should be set so add-ons will not automaton update in the
background
------------------------------------------+----------------------
     Reporter:  Dbryrtfbcbhgf             |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+----------------------
 If a company that develops a add-on gets compromised, they could released
 a Malicious update for there extension and all users running tor browser
 would get the new malicious update that could compermise there
 Anonymity, the users would not even know that the Malicious add-on would
 be installed  "ex. HTTPS Everywhere"

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21260>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list