[deleted]
All extensions disabled due to expiration of intermediate signing cert
671–680 of 955 posts
Re: All extensions disabled due to expiration of intermediate signing cert
#672Update: We have rolled out a partial fix for this issue. We generated a new intermediate certificate with the same name/key but an updated validity window and pushed it out to users via Normandy (this should be most users). Users who have Normandy on should see their add-ons start working over the next few hours. We are continuing to work on packaging up the new certificate for users who have Normandy disabled.
I've been through all of Firefox `about:config` a few times in the past, fixing preferences to, e.g., try to disable umpteen different services that leak info or create potential vulnerabilities gratuitously, but this is the first I recall hearing of Normandy. Apparently I missed `app.normandy.enabled`, because I think I would've remembered a name with connotations of a bloody massive surprise attack. Incidentally, `…
ESR means extended support, not "never changes". As long as it is supported (and it is: the bug got fixed), it's appropriate for ESR.
Re: All extensions disabled due to expiration of intermediate signing cert
#673Re: All extensions disabled due to expiration of intermediate signing cert
#674To re-enable all disabled non-system addons you can do the following. I am not responsible if this fucks up your install: Open the browser console by hitting ctrl-shift-j Copy and paste the following code, hit enter. Until mozilla fixes the problem you will need to redo this once every 24 hours: // Re-enable *all* extensions async function set_addons_as_signed() { Components.utils.import("resource://gre/modules/addon…
If you're still not being hit, and if the browser console doesn't accept the input, is it enough to get from the WebConsole
Math.floor( (new Date()).getTime()/1000 )
Re: All extensions disabled due to expiration of intermediate signing cert
#675If everyone's add-ons are disabled, I wonder why mine are not. My computer has been running over night (coincidentally, first time in years) and my add-ons are intact. Does it take a browser restart? Or might I have a setting that prevents this from happening? My system time is correct. Edit: am on Firefox 66, Linux (Debian Buster/testing), using Firefox from Mozilla directly (not through repositories), and my intern…
Same here. Arch Linux, FF 66.0.3 (from Arch repos), had the PC in suspend during the night and all add-ons seem to be active.
Well, now (2 minutes ago) all of a sudden all add-ons were turned off. I have no idea why. I wasn't even doing anything as I was just reading some comments on this thread.
Re: All extensions disabled due to expiration of intermediate signing cert
#676Earlier quoted context omitted.
I've been through all of Firefox `about:config` a few times in the past, fixing preferences to, e.g., try to disable umpteen different services that leak info or create potential vulnerabilities gratuitously, but this is the first I recall hearing of Normandy. Apparently I missed `app.normandy.enabled`, because I think I would've remembered a name with connotations of a bloody massive surprise attack. Incidentally, `…
ESR means extended support, not "never changes". As long as it is supported (and it is: the bug got fixed), it's appropriate for ESR.
As I said elsewhere: There are already channels for bug fixes, and some of the friction on those channels is intentional, such as for visibility and oversight/approval.
Re: All extensions disabled due to expiration of intermediate signing cert
#677Earlier quoted context omitted.
Okay, so, youtube targets a small subset of users, and changes their experience capriciously, and to suit their own purposes. Firefox, it turns out, has a built-in telemetry system that defaults to enable exactly the same behavior: changing your system, to suit their desires. You’re words “ a big evil conspiracy to use this mechanism to uninstall Internet Explorer from peoples' computer ” are misleading. No one would…
> Firefox, it turns out, has a built-in telemetry system that defaults to enable exactly the same behavior: changing your system, to suit their desires. An example of the typical use of this system: say Mozilla wants to enable video hardware acceleration in Firefox but they don't know if bugs in video drivers or in Firefox will make crashing more frequent. So they enable hardware acceleration for 1% of users instead…
At some point in the next five-ten years we will see this "feature" abused. Maybe Mozilla will use it to "soften" commonly used ad blockers to enable "acceptable" ads for Firefox users. Maybe Mozilla will be hacked by some government that wants to enable MITM attacks against its citizens, and Normandy will make that happen. Or maybe Mozilla will just cooperate with the government trying to do so.
You say it is "typically" used for benevolent purposes, but why should we trust Mozilla? Mozilla does not have a stellar history with this sort of thing and in my experience they do not take security as seriously as they should if we are to trust them with such a feature.
Re: All extensions disabled due to expiration of intermediate signing cert
#678I guess there was no monitoring on cert expiry.
Re: All extensions disabled due to expiration of intermediate signing cert
#679I was able to temporarily work around this problem by going to "about:debugging" and using the "Load Temporary Add-On" button to load up the disabled add-ons inside of ~/.mozilla/firefox//extensions/
Re: All extensions disabled due to expiration of intermediate signing cert
#680Earlier quoted context omitted.
Just FYI, that's not really true. Adblocker use mostly all the same filter lists and those do regularly block ads that just are regular images, and even text notes. https://www.troyhunt.com/ad-blockers-are-part-of-the-problem... is an example, even if that specific one got resolved Adblock Plus has the ability to not block ads that conform to a certain standard, but in addition to conform to standards ad publishers n…
If the images are hosted on the site instead of a third party the list won't matter.
Not true, here is an example of easylist blocking OpenStreetMap advertising OpenStreetMap events on openstreetmap.org [0].