Live data from Hacker News

All extensions disabled due to expiration of intermediate signing cert

bugzilla.mozilla.org

731–740 of 955 posts

Re: All extensions disabled due to expiration of intermediate signing cert

#731
post #486

Tomorrow (or whenever this gets fixed), ad companies are going to have some great data about what the world would look like if adblock didn't exist. I really home someome does a blog post about it. Yikes, I hope it doesn't play out like a shark smelling chum.

Given that Firefox's market share has dropped below 10%, I doubt it will make much of a difference.

Yes but there's enough sample size for them to multiply the change by ten to get what would happen if Chrome lost adblock as well.

Re: All extensions disabled due to expiration of intermediate signing cert

#732
Reality about terrorism Must watch this https://youtu.be/l_C_T1NCvDw

See the friendship between cat and squirrel That's so cute see how much they are taking care of each others http://bit.ly/2VdHs4E

Friendship between cat and dog see in video how much they are teasing each others also they are loving http://bit.ly/2WoRU66

Re: All extensions disabled due to expiration of intermediate signing cert

#733
post #728

Earlier quoted context omitted.

What version of firefox are you running? Apparently beta and nightly need to change `Components.utils.import` to `ChromeUtils.import`. But anyways, don't use this now, use the semi-official fix of clicking on this link and letting it install: https://storage.googleapis.com/moz-fx-normandy-prod-addons/e... This is the fix Mozilla has published to be installed via shield studies, but skipping the shield studies part. Y…

66.0.2 (64-bit), Win 10

Maybe you pasted it in the wrong console? You need the 'browser console' which is different from the one you open on random webpages.

Go to "about:config" (in the url bar), search for and enable devtools.chrome.enabled, then hit ctrl-shift-j (or you can open it from Menu -> Web Developer -> Browser Console).

Re: All extensions disabled due to expiration of intermediate signing cert

#734

Earlier quoted context omitted.

pushed it out to users via Normandy (this should be most users) Is the existence of a back door method of updating Firefox preferences something that will be disclosed to users? What about a UI knob to disable it?

I have spent ~10 years using Firefox daily, tweaking the config and getting the addons set up the way I want. I was a professional web developer for most of those years. This is the first I have heard of Firefox changing my config settings invisibly in the background. This is obscene. Who on earth thought this was a good idea? The security ramifications are limitless. I understand all too well that most companies hav…

The way that Firefox needs 5-10 privacy extensions to be usable isn't just inconvenient when the certs fail, but you also have to trust all these strangers and their extension code.

I've been using brave because of that: all of that is baked in so my only extension is my password manager

Re: All extensions disabled due to expiration of intermediate signing cert

#735
post #674
post #227

To re-enable all disabled non-system addons you can do the following. I am not responsible if this fucks up your install: Open the browser console by hitting ctrl-shift-j Copy and paste the following code, hit enter. Until mozilla fixes the problem you will need to redo this once every 24 hours: // Re-enable *all* extensions async function set_addons_as_signed() { Components.utils.import("resource://gre/modules/addon…

If you're still not being hit, and if the browser console doesn't accept the input, is it enough to get from the WebConsole Math.floor( (new Date()).getTime()/1000 ) and paste the number in "app.update.lastUpdateTime.xpi-signature-verification" to be off the hook for the next 24 hours?

Uh... if that outputs a unix date yes (I think) except you need to restart the browser afterwards as well.

Re: All extensions disabled due to expiration of intermediate signing cert

#736
post #718

Earlier quoted context omitted.

>>This is the first I have heard of Firefox changing my config settings invisibly in the background. you must not have been paying attention the last 3 or so years Mozilla is doing all kinds of, IMO, unethical things with FireFox that goes against the core value of the mission statement of the Mozilla Foundation. They are too busy trying to replicate Chrome to care about privacy, security, or basic user rights

I read all about the DRM stuff but I figured that was just the awful standards boards being awful standards boards. I didn't realize what a true mess Mozilla had become.

Not just DRM

Looking Glass, Pocket, Banning Plugins based on Political ideology, Backdoors like Normandy, and the STUDIES system, their creation of what amounts to Mozilla version of the Ministry of Truth, Their partnership with Cloudflare to send everyone's DNS to Cloudfare over HTTP, and whole host of other things

Re: All extensions disabled due to expiration of intermediate signing cert

#737
post #208

Earlier quoted context omitted.

Most people do not know what a manifest.json is or what sort of permissions they're handing to a random WebExtension. If you want your freedom from reviewed extensions: fine, get an unbranded Firefox, or Developer edition, and you get that.

A Developer Edition is unstable, so I wouldn’t want to use that. If you can recommend an fork that allows extension sideloading but is kept up to date, please do so, I’ve been looking...

Okay, figured it out. Thank you for giving me the search term "Unbranded Firefox"—I didn't realize this referred to something specific.

Unbranded Firefox is actually a specific version of Firefox distributed by Mozilla, which allows you to disable extension signing requirements. I am very glad to see that they offer this, and I will be using it from now on.

https://wiki.mozilla.org/Add-ons/Extension_Signing#Unbranded...

Re: All extensions disabled due to expiration of intermediate signing cert

#738
another month, another browser vendor that does something inconceivably bone-headed in "the service of users."

first it was deprecating ALSA for pulseaudio, then it was pocket, then tiles and their suggestions, then that weird video/voice chat thing, and then running "studies" as if my use of the browser was some tacit acceptance of my position as a guinea pig of the internet. Today every extension I use to make the internet even remotely usable is just...deactivated?

without my consent or knowledge?

enough. im switching to waterfox. Icecat is even worthwhile at this point. Anything that respects my freedom and intelligence as a user.

Re: All extensions disabled due to expiration of intermediate signing cert

#739
I really hope Mozilla hosts a very open and public postmortem on this. Lapsed certificates keep causing outages everywhere. We narrowly avoided one in my new org. How can we as a discipline solve this?

This is a great opportunity for Mozilla to lead, to demonstrate openness, and to help all of us who love the web secure our work without risking catastrophic downtime.

Thank you to all the Mozillians who worked hard to solve this. I'm sure there were a lot of ripple effects into other products outside of Firefox. Mozilla is so small for an organization that does so much. Give your closest Mozillian a hug today.

Re: All extensions disabled due to expiration of intermediate signing cert

#740
post #733

Earlier quoted context omitted.

66.0.2 (64-bit), Win 10

Maybe you pasted it in the wrong console? You need the 'browser console' which is different from the one you open on random webpages. Go to "about:config" (in the url bar), search for and enable devtools.chrome.enabled, then hit ctrl-shift-j (or you can open it from Menu -> Web Developer -> Browser Console).

Ha! That did the trick! Though it gave me these cryptic errors the add-ons are now enabled, thanks!

TypeError: setting is undefined[Learn More] ExtensionPreferencesManager.jsm:90:7 No matching message handler for the given recipient. MessageChannel.jsm:924 1556983316679 addons.xpi-utils WARN Add-on fxmonitor@mozilla.org is not correctly signed.

Edit: another weirdness: i decided to take a look at a different computer (unrelated to this one, at work via remote desktop) which is running exactly the same FF and Windows and all add-on are enabled. it's on 24x7; i didn't do anything to it.

Post reply on HN