[tor-talk] Tor Browser disabled NoScript, but can't update

[Roman Mamedov]

On Sat, 4 May 2019 02:21:15 -0500
Joe <joebtfsplk at gmx.com> wrote:

> I've used the latest stable TBB 8.0.8 (Linux) since released with the
> latest NoScript (at that time).
> Today is the 1st day I saw that NoScript was disabled by TBB.
> 
> I see now that it's not a TBB only issue, but also Firefox.
> A comment on Reddit said, "They [Mozilla] let their add-on signing
> certificate expire and it invalidated a shitload of add-ons."

It is very surprising to see that TBB relies on Mozilla like this. Turns out
an unrelated 3rd party can suddenly remotely disable Tor anonymity protections
at their whim, and possibly endanger TBB users (or deliberately help in
deanonymizing them).

-- 
With respect,
Roman