[tor-bugs] #12158 [Tor bundles/installation]: Disable automatic add-ons update

[Tor Bug Tracker & Wiki]

#12158: Disable automatic add-ons update
------------------------------------------+--------------------
     Reporter:  cypherpunks               |      Owner:  erinn
         Type:  defect                    |     Status:  closed
     Priority:  normal                    |  Milestone:
    Component:  Tor bundles/installation  |    Version:
   Resolution:  wontfix                   |   Keywords:
Actual Points:                            |  Parent ID:
       Points:                            |
------------------------------------------+--------------------
Changes (by gk):

 * status:  new => closed
 * resolution:   => wontfix


Comment:

 1) Disabling auto-updates of extensions, especially security-related ones
 like NoScript, is not a good idea. Not counting users that are coming with
 weird problems to our support due to a cocktail of outdated add-ons having
 NoScript up-to-date is good for your security.
 2) "If left running the Tor Browser will upgrade to NoScript 2.6.8.26
 without any user interaction or knowledge." This is not true. For an
 update to take effect there is a restart required. So if you let your
 browser running the whole time you won't get newer versions deployed. So,
 even if the Tor Browser is shipping an outdated NoScript (which
 unfortunately happened in 3.6.1) you still have the means to prevent the
 application of updates if the extensions got faster downloaded than you
 were able to disable that mechanism.

 All in all this is a WON'T FIX.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12158#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online