[tbb-bugs] #30388 [Applications/Tor Browser]: NoScript and all user-installed add-ons got deactivated! (armagadd-on-2.0)

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon May 6 12:58:02 UTC 2019

#30388: NoScript and all user-installed add-ons got deactivated! (armagadd-on-2.0)
 Reporter:  cypherpunks                          |          Owner:  tbb-
                                                 |  team
     Type:  task                                 |         Status:
                                                 |  needs_review
 Priority:  Immediate                            |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Blocker                              |     Resolution:
 Keywords:  AffectsTails, TorBrowserTeam201905R  |  Actual Points:
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:

Comment (by flowerpt):

 Since the blog asked people to "Please remember to" re-enable security,
 and that's the kind of thing which is the bane of security when it comes
 to ordinary users, can a subsequent release please force this back to
 'false' and alert the user if the flip is made?

 It's better to have people need to toggle it again than to leave people
 unintentionally unguarded.  I realize both options are sub-optimal, but
 "fail safe" is better than "fail dangerous".  Without such a change, it's
 very likely that some users will go on forever set to not validate addons
 - the typical user pattern is "fix it and forget it".

Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30388#comment:42>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

More information about the tbb-bugs mailing list