Live data from Hacker News

All extensions disabled due to expiration of intermediate signing cert

bugzilla.mozilla.org

911–920 of 955 posts

Re: All extensions disabled due to expiration of intermediate signing cert

#911

Earlier quoted context omitted.

> Its a real pity they are the worst privacy-vioolating tools ever. What do you mean?

They read your entire page content, they have access to all your information.

But there are free software ad blockers like uBlock Origin.

Re: All extensions disabled due to expiration of intermediate signing cert

#912

Earlier quoted context omitted.

They read your entire page content, they have access to all your information.

But there are free software ad blockers like uBlock Origin.

if uBlock got compromised as an extension even for 1 day, the amount and value of data uBlock can collect will make anyone very very rich.

It's on the level of saving passwords as texts in terms of privacy.

Re: All extensions disabled due to expiration of intermediate signing cert

#914
post #728

Earlier quoted context omitted.

TypeError: Components.utils is undefined[Learn More] what did I do wrong? (It's all Greek to me)

What version of firefox are you running? Apparently beta and nightly need to change `Components.utils.import` to `ChromeUtils.import`. But anyways, don't use this now, use the semi-official fix of clicking on this link and letting it install: https://storage.googleapis.com/moz-fx-normandy-prod-addons/e... This is the fix Mozilla has published to be installed via shield studies, but skipping the shield studies part. Y…

No problems with Pale Moon, and the history is: FAGGOTS ousted the founder of mozilla FAGGOTS recently joined SOROS and GOOGLE in CONTROLLING WHAT YOU SEE and ACCESS ONLINE in short CENSORING YOU and STEALING YOUR PERSONAL INFO

The Founder has since developed Pale Moon from an older open source FIREFOX version and updated it, maintaining his desire that YOU have FULL CONTROL of ALL YOUR DATA and INFO...

This ISSUE IS NOT A BUG IT WAS PLANNED to force everyone to allow MORE OF THEIR MALICIOUS CODE ON YOUR SYSTEM to CONTROL WHAT YOU SEE

MOZILLA has BROKEN THROUGH the PRIVACY of TOR and to fix your TOR BROWSERS over this FAKE BUG you totally corrupt your TOR PRIVACY....

Get rid of FIREFAUX, and TOR, and all other MOZILLA PRODUCTS.

Use only PALE MOON, I have been testing about 5 browsers and now Im DUMPING FIREFAUX TODAY and down to 2, PALE MOON and BRAVE, but BRAVE is not so hot, Pale Moon is really improved a few days ago with the latest upgrade... It is clearly leading the pack.

CHROME IS THE WORSE for STEALING YOUR PRIVATE INFORMATION.

Say good bye to the FEMINIST FAGGOTS at MOZILLA... Look up ETHICAL TECH, FEMINIST AI in Mozilla's PRESS RELEASES...

It should wake you up as to the EVIL MINDS that run MOZILLA...

Stay safe, stay secure, stay PRIVATE, Say NO to GOOGLE and MOZILLA.

Re: All extensions disabled due to expiration of intermediate signing cert

#915
post #728

Earlier quoted context omitted.

TypeError: Components.utils is undefined[Learn More] what did I do wrong? (It's all Greek to me)

What version of firefox are you running? Apparently beta and nightly need to change `Components.utils.import` to `ChromeUtils.import`. But anyways, don't use this now, use the semi-official fix of clicking on this link and letting it install: https://storage.googleapis.com/moz-fx-normandy-prod-addons/e... This is the fix Mozilla has published to be installed via shield studies, but skipping the shield studies part. Y…

Not working in 56.0.2 :((((

Re: All extensions disabled due to expiration of intermediate signing cert

#916
post #728

Earlier quoted context omitted.

TypeError: Components.utils is undefined[Learn More] what did I do wrong? (It's all Greek to me)

What version of firefox are you running? Apparently beta and nightly need to change `Components.utils.import` to `ChromeUtils.import`. But anyways, don't use this now, use the semi-official fix of clicking on this link and letting it install: https://storage.googleapis.com/moz-fx-normandy-prod-addons/e... This is the fix Mozilla has published to be installed via shield studies, but skipping the shield studies part. Y…

Thanks I been going in circles for a while. Tell others to go here and no more problems so far.

Re: All extensions disabled due to expiration of intermediate signing cert

#917

Earlier quoted context omitted.

The level of paranoia throughout this thread is truly through the roof..... Mozilla has had several "PR nightmare" decisions that a vocal set of users didn't like, and sometimes were genuinely ill advised/bad/shitty. But as far as I can see they do not have a bad track record when it comes to security/privacy. Do you have any examples of actual serious security/privacy fuck ups by Mozilla/Firefox? I mean that stood u…

> But as far as I can see they do not have a bad track record when it comes to security/privacy. Do you have any examples of actual serious security/privacy fuck ups by Mozilla/Firefox? I mean, they are currently shipping real actual ads on the new tab page that aren't blocked by ad blockers - and possibly can't be (there are limits to what WebExtensions can modify on Firefox internal pages). Sure, maybe your parent…

Besides your claim not being true AFAIK tell [1](there are no ads on my new tab page, and as far as I can tell there was no incident of paid for content showing up on peoples new tab), how exactly would shipping ads be a privacy/security violation?

This is exactly the sensationalist misrepresentation I was talking about. You don't like what they are doing, fine. Misrepresenting it as something that it's not is not fine.

Besides: Mozilla is funded in large parts by having Google as the default search provider. This means they are funded by Google selling ads. Them starting up new revenue streams and getting away from that funding model would be a pro privacy step.

[1] If you are referring to something else that I missed, feel free to enlighten me.

Re: All extensions disabled due to expiration of intermediate signing cert

#918

Earlier quoted context omitted.

But there are free software ad blockers like uBlock Origin.

if uBlock got compromised as an extension even for 1 day, the amount and value of data uBlock can collect will make anyone very very rich. It's on the level of saving passwords as texts in terms of privacy.

How is it different from any other browser extension? They are all like that, aren't they?

Re: All extensions disabled due to expiration of intermediate signing cert

#919

Earlier quoted context omitted.

Thanks. This must be terribly stressful to you.

Meanwhile, having to browse the web without an adblocker has been nothing but relaxing for everybody else.

Firefox includes content blocking, so it's not that bad.

Re: All extensions disabled due to expiration of intermediate signing cert

#920

Newbie question: why can't they just renew the certificate, like in 5 minutes?

A new certificate can be generated if you have to in a couple of minutes, sure. Of course, you probably defined some procedures to do it properly and securely that require more time. Then the issue becomes: how to get the new certificate to a few hundreds million users? If it was a certificate on some server, just replace it there, done. Client software will just pick it up. But not here. A copy of the certificate is…

The root certificate is also part of the mozilla.rsa. Addons have it included, it can be extracted and then imported into the browser Certificates > Authorities and it will be used to validate addons, including those which are not updated.

A sample procedure doing exactly this, and a fix for Firefox https://www.velvetbug.com/benb/icfix/

The same procedure can be used on newer versions, but the syntax is a bit different (import cert, go to about:addons, open console):

  Components.utils.import("resource://gre/modules/addons/XPIDatabase.jsm");
  XPIDatabase.verifySignatures();
This only makes sense if you really need to fix it while the browser is running, otherwise you can simply restart it after the new certificate is imported.
Post reply on HN