Live data from Hacker News

All extensions disabled due to expiration of intermediate signing cert

bugzilla.mozilla.org

461–470 of 955 posts

Re: All extensions disabled due to expiration of intermediate signing cert

#461
post #394

What a spectacular failure... it's hours later, and still not working. The only thing firefox has going for itself stopped working. Already one family member and one friend switched to chrome.

Just switch for a day. You're making this out to be a much bigger issue than it has the capacity to be.

NoScript and uBlock Origin have stopped working. This opens up a LOT of attack surface for malicious hackers.

If this isn't a critical security issue, what is?

Re: All extensions disabled due to expiration of intermediate signing cert

#462

There have been major organizational problems at Mozilla for a long time that precipitated this. Many of us saw something like this coming, saw gaps and unclear responsibilities, reported these gaps and confusions up the chain, and were reprimanded and financially penalized for asking the tough questions. The questions were never answered, and we all quit, were fired, or lost motivation as a result. This is a tech pr…

How did executive/management at Mozilla become like this?

Was it slow rot or some event triggering it?

Re: All extensions disabled due to expiration of intermediate signing cert

#463

Earlier quoted context omitted.

You basically just described any sufficiently large organization. Complaining is not helping anyone in these situations, the only thing you can do to change things is to go ahead and try to change things. Reporting things up the chain hardly ever works because the chain is too busy with their own issues and politics. You have to make it worth their while.

>the only thing you can do to change things is to go ahead and try to change things how? Reporting up the chain is THE way to change things. When it doesn't work what are you supposed to do?

Take on the responsibility for the gap yourself. If you get assigned something from up the chain that gets in the way of that new found responsibility report up the chain that they need to assign it to someone else first.

Re: All extensions disabled due to expiration of intermediate signing cert

#464
post #394

What a spectacular failure... it's hours later, and still not working. The only thing firefox has going for itself stopped working. Already one family member and one friend switched to chrome.

Just switch for a day. You're making this out to be a much bigger issue than it has the capacity to be.

[deleted]

Re: All extensions disabled due to expiration of intermediate signing cert

#465
post #366

Earlier quoted context omitted.

Super useful, thanks. In my case ctrl+shift+j opens a dumb console that only shows messages and doesn't take any input. I had to go to about:addons, hit F12 for the Dev Tools and paste it in the console there. Worked well.

If you go to about:config and set "devtools.chrome.enabled" to true, the cmd-shift-j thing should work

I also have to do this to make it work on Win10 firefox console (F12)

Re: All extensions disabled due to expiration of intermediate signing cert

#466
post #409

If everyone's add-ons are disabled, I wonder why mine are not. My computer has been running over night (coincidentally, first time in years) and my add-ons are intact. Does it take a browser restart? Or might I have a setting that prevents this from happening? My system time is correct. Edit: am on Firefox 66, Linux (Debian Buster/testing), using Firefox from Mozilla directly (not through repositories), and my intern…

Same here. Both on Windows 10 and Kubuntu my Firefox 66.0.3 instances seem to have working add-ons (uBlock Origin) as of now. Both systems have been up for weeks.

Let's see what the day will bring...

Re: All extensions disabled due to expiration of intermediate signing cert

#467
post #394

What a spectacular failure... it's hours later, and still not working. The only thing firefox has going for itself stopped working. Already one family member and one friend switched to chrome.

Just switch for a day. You're making this out to be a much bigger issue than it has the capacity to be.

NoScript stopped working for Tor Browser users. I'd rather see the browser crash on startup than have that happen to me.

Re: All extensions disabled due to expiration of intermediate signing cert

#468
post #409

If everyone's add-ons are disabled, I wonder why mine are not. My computer has been running over night (coincidentally, first time in years) and my add-ons are intact. Does it take a browser restart? Or might I have a setting that prevents this from happening? My system time is correct. Edit: am on Firefox 66, Linux (Debian Buster/testing), using Firefox from Mozilla directly (not through repositories), and my intern…

Same here. Arch Linux, FF 66.0.3 (from Arch repos), had the PC in suspend during the night and all add-ons seem to be active.

Re: All extensions disabled due to expiration of intermediate signing cert

#469
post #2

Looks like all extensions have been disabled for all Firefox users. I think this fail-closed behavior is more of a security issue than the one it is trying to solve. All of my security add-ons - Privacy Badger, NoScript, Decentraleyes, and many more were disabled. Even worse, it happened without notice to the user. One moment I was browsing the internet (just barely) secured by these add-ons, and the next moment, all…

It's a great argument against centrally controlled walled gardens. Basically breaking or compromising a single certificate has a widespread impact. Even Tor browser is impacted. For most of us this is a temporary inconvenience but there are people whose personal security depends on some of the extensions that just stopped working.

On a positive note, it's been a while since I browsed without a lot of extensions. Ads are still annoying and I noticed some extensions apparently had more of a performance impact than you'd hope.

Re: All extensions disabled due to expiration of intermediate signing cert

#470
post #461

Earlier quoted context omitted.

Just switch for a day. You're making this out to be a much bigger issue than it has the capacity to be.

NoScript and uBlock Origin have stopped working. This opens up a LOT of attack surface for malicious hackers. If this isn't a critical security issue, what is?

The Container extension is no longer working. I'm logged out of mostly everything. There are few sites I don't want to open without container.
Post reply on HN