[tor-bugs] #6021 [TorBirdy]: disable addons

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Thu May 31 21:47:34 UTC 2012


#6021: disable addons
----------------------+-----------------------------------------------------
 Reporter:  proper    |          Owner:  ioerror
     Type:  defect    |         Status:  new    
 Priority:  critical  |      Milestone:         
Component:  TorBirdy  |        Version:         
 Keywords:            |         Parent:         
   Points:            |   Actualpoints:         
----------------------+-----------------------------------------------------
 There are a few addons installed on Ubuntu by default installation.
  * EDS Contacts Integration for Thunderbird
  * Global Menu Bar integration
  * Messaging Menu and Unity Launcher integration

 Some of them might be risky.

 For example "Messaging Menu and Unity Launcher integration" syncs with the
 Evolution Data Server (EDS). And the EDS possibly syncs with Google and/or
 Ubuntu One. ([http://mikeconley.ca/blog/2011/08/08/eds-contacts-
 integration-for-thunderbird/ source of that information])

 Contacts from Thunderbird/TorBirdy should not be uploaded and stored
 unencrypted in any cloud.

 My suggestions is, do it like TorButton, deactivate most addons. Perhaps
 with the exception of enigmail (#6019) and mixgui (#6020). Allow users to
 override the function, at least through an about:config setting.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6021>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list