[tor-talk] using themes in Aurora

Joe Btfsplk joebtfsplk at gmx.com
Fri Oct 14 19:40:51 UTC 2011


On 10/14/2011 1:28 PM, Andrew Lewman wrote:
> On Friday, October 14, 2011 12:49:32 Joe Btfsplk wrote:
>> No one's EVER looked into Tor security issues of using themes (from
>> Mozilla addons site) or Firefox GUI enhancement addons, like Tab Mix Plus?
> You could be the first!
>
> My first step would be to see what information is sent back to mozilla's
> getpersonas.com site by the theme.
What type of info & by what mechanism would you be looking for, that's 
sent to MAO site?

There was long discussion in the recent past about updating addons / FF 
in a Tor or TBB session.  FWIW, looks like the DEFAULT setting in Aurora 
(TBB 2.2.33-3) under Options>Network>Update, is to automatically check 
for addons updates (by design or mistake), but NOT to check Firefox 
updates.  Now, whether NoScript in later TBB versions over rides all 
that, don't know.  Either way, checking for themes & addons updates is 
same Mozilla site.

I don't think info sent to MAO site for themes would be diff than other 
addons.  Except for a very few addons that take you to external pages, 
once addon is installed / updated.  But, "auto check for addons" can be 
manually DESELECTED, once an addon / theme is installed.



More information about the tor-talk mailing list