[tor-bugs] #6734 [Firefox Patch Issues]: TBB-Firefox sends extension blocklist queries to Mozilla

Thu Aug 30 02:56:23 UTC 2012

#6734: TBB-Firefox sends extension blocklist queries to Mozilla
----------------------------------+-----------------------------------------
 Reporter:  rransom               |          Owner:  mikeperry
     Type:  defect                |         Status:  new      
 Priority:  critical              |      Milestone:           
Component:  Firefox Patch Issues  |        Version:           
 Keywords:                        |         Parent:           
   Points:                        |   Actualpoints:           
----------------------------------+-----------------------------------------
 ‘echelon’ in #tor reports that TBB-Firefox sends the current OS and kernel
 version to addons.mozilla.org:
 {{{
 2012-08-30 01:23:48 <echelon>
 https://addons.mozilla.org/blocklist/3/%7Bec8030f7-c20a-464f-9b0e-
 13a3a9e97384%7D/10.0.5/Firefox/20120608001639/Linux_x86-gcc3/en-
 US/default/Linux%202.6.37.6-smp%20(GTK%202.24.4)/default/default/20/20/3/
 }}}

 This is at least an information leak, and more seriously, Firefox's
 ‘extension blocklist’ could be used to disable Torbutton (or other
 preconfigured extensions) in TBB-Firefox.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6734>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online