[tbb-bugs] #30388 [Applications/Tor Browser]: NoScript and all user-installed add-ons got deactivated! (armagadd-on-2.0)

Tor Bug Tracker & Wiki blackhole at torproject.org
Sun May 5 15:57:57 UTC 2019


#30388: NoScript and all user-installed add-ons got deactivated! (armagadd-on-2.0)
-------------------------------------------------+-------------------------
 Reporter:  cypherpunks                          |          Owner:  tbb-
                                                 |  team
     Type:  task                                 |         Status:
                                                 |  needs_review
 Priority:  Immediate                            |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Blocker                              |     Resolution:
 Keywords:  AffectsTails, TorBrowserTeam201905R  |  Actual Points:
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by doomeinow):

 While toggling JavaScript to false with about:config disables JavaScript,
 things like HTML5 are still enabled, which means things like processor
 "speculative execution" vulnerabilities still exist (Meltdown, Foreshadow,
 Spectre). While these are more discovered than deployed, the receiver in
 my tinfoil hat says state actors are probably fiddling with them.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30388#comment:34>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list