#31160: Turn off automatic updates by default for installed add-ons --------------------------------------+-------------------------- Reporter: cypherpunks | Owner: tbb-team Type: enhancement | Status: closed Priority: Medium | Milestone: Component: Applications/Tor Browser | Version: Severity: Normal | Resolution: wontfix Keywords: | Actual Points: Parent ID: | Points: Reviewer: | Sponsor: --------------------------------------+--------------------------
Comment (by gk): Replying to [comment:4 cypherpunks]: > I mean it's not even breaking any functionality, it would just be providing a safe default for people who install extensions. Since those extensions can't be considered security critical, I am not sure what you mean by that but I think it is fair to assume that any extension added to the browser is a risk both security- and privacy- wise as it is running priviledged code and has the availability to do way more harm than a website, especially in the Tor Browser context. That is the reason why we don't recommend installing additional extensions to begin with. And disabling the update mechanism without any process in place to check for potential security issues of any installed extension (yes, there are thousands!) does not seem to be the responsible thing to do. -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31160#comment:5> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online
_______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs