[tor-bugs] #12158 [Tor bundles/installation]: Disable automatic add-ons update
Tor Bug Tracker & Wiki
blackhole at torproject.org
Thu May 29 20:31:10 UTC 2014
#12158: Disable automatic add-ons update
--------------------------------------+-----------------------
Reporter: cypherpunks | Owner: erinn
Type: defect | Status: new
Priority: normal | Milestone:
Component: Tor bundles/installation | Version:
Keywords: | Actual Points:
Parent ID: | Points:
--------------------------------------+-----------------------
The option, "Update Add-ons Automatically", should be unchecked by default
in the Tor Browser.
The option can be found under the Add-ons Manager page.
This is to protect against the installation of an automatic upgrade that
could compromise the Tor Browser, or accidentally break some of the
functionality, or be malicious in nature.
As an example, the latest Tor Browser 3.6.1 shipped with NoScript version
2.6.8.22. If left running the Tor Browser will upgrade to NoScript
2.6.8.26 without any user interaction or knowledge.
I think the users should always rely on the add-ons versions supplied by
the tor browser bundle.
Thank you.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12158>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list