What a nightmare! ---- ALL of my extensions have disappeared and have been disabled this weekend (with ZERO warning) ---- Trying to use my Roboform password program is a nightmare----
If the problem is not 100% solved by Monday (May 6), I plan to exterminate every trace of Firefox of every computer I own ---- Shame on Firefox for placing uses in such a nightmare situation with ZERO warning and ZERO solutions ----
All extensions disabled due to expiration of intermediate signing cert
881–890 of 955 posts
Re: All extensions disabled due to expiration of intermediate signing cert
#882Earlier quoted context omitted.
After using the .xpi file? Have you tried reinstalling the addons? I know it's less than ideal, but on one of my installs firefox had decided to uninstall the addons after disabling them (I think because it updated firefox version after disabling them). If it did that I don't think there is any way to get them back short of reinstalling.
Yes, I installed the .xpi file, firefox still says my extensions are unsupported/unverified. Reinstalling seems to work, but there are certain extensions that have data I do not want to lose. For example, if I reinstall ubock origin, I will lose all of my dynamic filtering rules.
Possibly you just need to force it to reverify again. If this is still the state of things try setting `app.update.lastUpdateTime.xpi-signature-verification` to 0 in about:config, and then restarting your browser.
But no guarantees. Do you have reason to believe the addons are still installed?
Re: All extensions disabled due to expiration of intermediate signing cert
#883Earlier quoted context omitted.
TypeError: Components.utils is undefined[Learn More] what did I do wrong? (It's all Greek to me)
What version of firefox are you running? Apparently beta and nightly need to change `Components.utils.import` to `ChromeUtils.import`. But anyways, don't use this now, use the semi-official fix of clicking on this link and letting it install: https://storage.googleapis.com/moz-fx-normandy-prod-addons/e... This is the fix Mozilla has published to be installed via shield studies, but skipping the shield studies part. Y…
Really. some dude posts a link hosted on a generic googlestorage page.
Without explaining what it does..
On Hackernews...
Be wary people. This is malware
Re: All extensions disabled due to expiration of intermediate signing cert
#884Earlier quoted context omitted.
I've been through all of Firefox `about:config` a few times in the past, fixing preferences to, e.g., try to disable umpteen different services that leak info or create potential vulnerabilities gratuitously, but this is the first I recall hearing of Normandy. Apparently I missed `app.normandy.enabled`, because I think I would've remembered a name with connotations of a bloody massive surprise attack. Incidentally, `…
I too use Debian's Firefox ESR. I noticed the "Allow Firefox to install and run studies" option in Privacy & Security Preferences a long time ago. It was unchecked and greyed out (i.e., unclickable), and a label below it says "Data reporting is disabled for this build configuration", so I gave it no further thought. This morning I woke up and launched Firefox, noticed this headline, and then noticed my extensions wer…
[deleted]
Re: All extensions disabled due to expiration of intermediate signing cert
#885Earlier quoted context omitted.
I rely on the Debian system to assist with that. Normandy bypasses that system, if it's enabled. (The jury is out whether it's actually enabled in Debian Firefox ESR.)
What do you think the median size of a Firefox release is, what do you think the resources (let’s call it US dollars FMV) are to audit that, and what do you think the resources Debian has to devote to it? Clearly more eyes are good, but... In between “Wild West WebExtensions” and “Mozilla backdoors my Firefox and it gets used for nefarious purposes” and “delays in browser updates increase exploitation windows”, I kno…
I agree an unpatched vuneribility is probably more risky. However this feature can change settings the user explicitly sets. The bigger issue is it does not give me any indication the settings have been changed.
Re: All extensions disabled due to expiration of intermediate signing cert
#886Earlier quoted context omitted.
Then don't use Firefox
Enlighten us with options, smarty boi. Chrome or Opera are not an options. Thanks.
Please read and follow the site guidelines when commenting here.
Re: All extensions disabled due to expiration of intermediate signing cert
#887Earlier quoted context omitted.
I've been through all of Firefox `about:config` a few times in the past, fixing preferences to, e.g., try to disable umpteen different services that leak info or create potential vulnerabilities gratuitously, but this is the first I recall hearing of Normandy. Apparently I missed `app.normandy.enabled`, because I think I would've remembered a name with connotations of a bloody massive surprise attack. Incidentally, `…
I too use Debian's Firefox ESR. I noticed the "Allow Firefox to install and run studies" option in Privacy & Security Preferences a long time ago. It was unchecked and greyed out (i.e., unclickable), and a label below it says "Data reporting is disabled for this build configuration", so I gave it no further thought. This morning I woke up and launched Firefox, noticed this headline, and then noticed my extensions wer…
Posting an update for posterity. It appears that even with app.normandy.enabled=default [true], as long as app.shield.optoutstudies.enabled=false, Normandy is disabled. app.shield.optoutstudies is the key controlled by the UI element "Allow Firefox to install and run studies".
I've closed the above bug report as it's not really a bug.
Re: All extensions disabled due to expiration of intermediate signing cert
#888Earlier quoted context omitted.
TypeError: Components.utils is undefined[Learn More] what did I do wrong? (It's all Greek to me)
What version of firefox are you running? Apparently beta and nightly need to change `Components.utils.import` to `ChromeUtils.import`. But anyways, don't use this now, use the semi-official fix of clicking on this link and letting it install: https://storage.googleapis.com/moz-fx-normandy-prod-addons/e... This is the fix Mozilla has published to be installed via shield studies, but skipping the shield studies part. Y…
This worked immediately on Firefox Quantum 66.0.3 (64-bit) Thank you.
Re: All extensions disabled due to expiration of intermediate signing cert
#889Waterfox works in Windows, no issues with extensions and supposed to have a greater compatibility with legacy extensions.
Fennec works in Android, no issues with extensions and has the third party trackers removed.
Re: All extensions disabled due to expiration of intermediate signing cert
#890Earlier quoted context omitted.
Oh, thank you for the pointer in the right direction! In the mean time, I was just glad to have any way to use my browser again!
In the mean time, installing the hotfix extension and running the script seems to help :)
I LOVE YOU SO MUCH. Firm 56.0.2 user here as well. Refuse to go with a newer version. I don't even care that we're basically putting it on life-support at this point. Anyway thanks for the help. Couldn't stand youtube or basically any other website without adblock.