Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

All extensions disabled due to expiration of intermediate signing cert

bugzilla.mozilla.org

Post reply on HN
Print view View original

261–270 of 955 posts

Re: All extensions disabled due to expiration of intermediate signing cert

#261

Post by drewmol »

mevile wrote: post #218
SimeVidas wrote: post #33

Earlier quoted context omitted.

I dunno. I’m a typical Firefox user, and I’d rather jump off a bridge than switch to a different browser because of a fuckup like this. People make mistakes, but Mozilla still stands for things that certain other browser vendors don’t, last time I checked.

That's my thinking too. I went back to Firefox a few months ago and it is back to being a fantastic browser now, and it feels good to use something that is also a force for good. I'm hoping they resolve this quickly and that it all turns out ok.

>and that it all turns out ok.

While I agree with you two assuming the bridge is over water and not too high, there are real consequences that cannot be reversed. I cannot unsee the ads I saw in the past few minutes before switching to nightly.

Re: All extensions disabled due to expiration of intermediate signing cert

#262

Post by hodgesrm »

strainer wrote: post #136
weavejester wrote: post #48

There's a workaround that involves going to about:config and setting xpinstall.signatures.required to false. However, if you're running the Stable or Beta version, it will only work under Linux. On Windows and MacOS you'll need to download Nightly or the Developer Edition. To fix this on MacOS I did the following: 1. Downloaded and installed Firefox Nightly 2. Ran /Applications/Firefox\ Nightly.app/Contents/MacOS/fir…

Gotta love the Linux release team for not disabling this ability.

And Linux desktop for being pretty usable. :)

Re: All extensions disabled due to expiration of intermediate signing cert

#263

Post by sjwright »

jchw wrote: post #250
unreal37 wrote: post #102

Earlier quoted context omitted.

Seems like an over-reaction. "Destroy user trust in Mozilla?" Really? Because your extensions got disabled for a day?

(Big fat disclaimer: I work for Google. These are my opinions and not my employers. I don't work on browsers. I test my code in Firefox. Etc etc.) Sadly, I have to agree that this feels like a big blow to user trust. User trust is not really just about respect or values; it definitely also includes things like performance and reliability. The average user, right now feeling powerless, might even feel anger towards Mo…

> this feels like a big blow to user trust.

And yet every other major browser vendor has punched their users with far worse catastrophes of privacy, security, ripping away features, breaking features, and general shitheaddedness.

Switching browsers because of this incident is like ordering a burger at your favourite restaurant and one time it comes out without the meat patty, so in protest you switch to a crappy alternative restaurant that has had a long history of health code violations.

Re: All extensions disabled due to expiration of intermediate signing cert

#265

Post by daveFNbuck »

hnaccy wrote: post #251
mrep wrote: post #225

Earlier quoted context omitted.

> Also, wow, the web has a ton of ads. I've been running uBlock origin so long I forgot how bad it had gotten :( Try turning it off. I got rid of ublock after arstechnica complained about a lot of their users blocking ads years ago and it honestly isn't that bad. Every once in a while I do back out of a page for maxing out one of my cpu cores but otherwise, nothing ever bad happens. With ads: either it takes me half…

>nothing ever bad happens. With ads: either it takes me half a second to tell I'm not interested in an ad, or I actually am interested and i follow the ad because I am interested and I want to support the website. You just described something bad.

What's bad about supporting a site you like while learning about something that interests you? If this were really all ads were I wouldn't block them.

Re: All extensions disabled due to expiration of intermediate signing cert

#267

Post by drewmol »

jchw wrote: post #250
unreal37 wrote: post #102

Earlier quoted context omitted.

Seems like an over-reaction. "Destroy user trust in Mozilla?" Really? Because your extensions got disabled for a day?

(Big fat disclaimer: I work for Google. These are my opinions and not my employers. I don't work on browsers. I test my code in Firefox. Etc etc.) Sadly, I have to agree that this feels like a big blow to user trust. User trust is not really just about respect or values; it definitely also includes things like performance and reliability. The average user, right now feeling powerless, might even feel anger towards Mo…

I know the typical user my have struggles but FWIW, I installed nightly, toggled xpinstall.signatures.required to False installed ublock umatrix and will live with my pw manager's native application for a day or two and it took about 5 minutes.

Re: All extensions disabled due to expiration of intermediate signing cert

#268

Post by drewmol »

vatueil wrote: post #204
MrEldritch wrote: post #41

Earlier quoted context omitted.

That's what I meant, yes. (I didn't even know that KeePass could be integrated with the browser, I've just been manually copy-pasting)

They don't have an official add-on, but they do list a few unofficial browser extensions on their download page: https://keepass.info/download.html Example: https://subdavis.com/Tusk/

One you have targets mapped correctly keepass2android is great and I now that I've gotten used to it, I prefer the system ui password filling for everything including the browser. Also installing the keyboard extension is great and makes for an easy way to quickly access logins.

Re: All extensions disabled due to expiration of intermediate signing cert

#269

Post by jchw »

drewmol wrote: post #267
jchw wrote: post #250

Earlier quoted context omitted.

(Big fat disclaimer: I work for Google. These are my opinions and not my employers. I don't work on browsers. I test my code in Firefox. Etc etc.) Sadly, I have to agree that this feels like a big blow to user trust. User trust is not really just about respect or values; it definitely also includes things like performance and reliability. The average user, right now feeling powerless, might even feel anger towards Mo…

I know the typical user my have struggles but FWIW, I installed nightly, toggled xpinstall.signatures.required to False installed ublock umatrix and will live with my pw manager's native application for a day or two and it took about 5 minutes.

In fairness: I don't really want to disable signature checking. I value these security features and I'm hoping that by tomorrow morning Mozilla has a better solution.

Re: All extensions disabled due to expiration of intermediate signing cert

#270

Post by nilkn »

mrep wrote: post #225
Chirael wrote: post #143

Just discovered the same message in the Tor browser, and it seems that NoScript got disabled. So people running Tor are a lot more vulnerable right now. Also, wow, the web has a ton of ads. I've been running uBlock origin so long I forgot how bad it had gotten :(

> Also, wow, the web has a ton of ads. I've been running uBlock origin so long I forgot how bad it had gotten :( Try turning it off. I got rid of ublock after arstechnica complained about a lot of their users blocking ads years ago and it honestly isn't that bad. Every once in a while I do back out of a page for maxing out one of my cpu cores but otherwise, nothing ever bad happens. With ads: either it takes me half…

It’s the sheer number of trackers online that really pushes me to use lots of security extensions. I really can’t support that kind of malicious behavior.
Post reply on HN