[tor-bugs] #12158 [Tor bundles/installation]: Disable automatic add-ons update

[Tor Bug Tracker & Wiki]

#12158: Disable automatic add-ons update
--------------------------------------+-----------------------
 Reporter:  cypherpunks               |          Owner:  erinn
     Type:  defect                    |         Status:  new
 Priority:  normal                    |      Milestone:
Component:  Tor bundles/installation  |        Version:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
--------------------------------------+-----------------------
 The option, "Update Add-ons Automatically", should be unchecked by default
 in the Tor Browser.

 The option can be found under the Add-ons Manager page.

 This is to protect against the installation of an automatic upgrade that
 could compromise the Tor Browser, or accidentally break some of the
 functionality, or be malicious in nature.

 As an example, the latest Tor Browser 3.6.1 shipped with NoScript version
 2.6.8.22. If left running the Tor Browser will upgrade to NoScript
 2.6.8.26 without any user interaction or knowledge.

 I think the users should always rely on the add-ons versions supplied by
 the tor browser bundle.

 Thank you.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12158>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online