All extensions disabled due to expiration of intermediate signing cert

Post by conanbatt » Mon, May 06, 2019, 2:47 PM UTC

kzrdude wrote: post #918

conanbatt wrote: post #912

Earlier quoted context omitted.

if uBlock got compromised as an extension even for 1 day, the amount and value of data uBlock can collect will make anyone very very rich. It's on the level of saving passwords as texts in terms of privacy.

How is it different from any other browser extension? They are all like that, aren't they?

Post by hanif184 » Mon, May 06, 2019, 3:39 PM UTC

rmbryan wrote: post #520

Update: We have rolled out a partial fix for this issue. We generated a new intermediate certificate with the same name/key but an updated validity window and pushed it out to users via Normandy (this should be most users). Users who have Normandy on should see their add-ons start working over the next few hours. We are continuing to work on packaging up the new certificate for users who have Normandy disabled.

Post by hanif184 » Mon, May 06, 2019, 3:42 PM UTC

neilv wrote: post #604

rmbryan wrote: post #520

Update: We have rolled out a partial fix for this issue. We generated a new intermediate certificate with the same name/key but an updated validity window and pushed it out to users via Normandy (this should be most users). Users who have Normandy on should see their add-ons start working over the next few hours. We are continuing to work on packaging up the new certificate for users who have Normandy disabled.

I've been through all of Firefox `about:config` a few times in the past, fixing preferences to, e.g., try to disable umpteen different services that leak info or create potential vulnerabilities gratuitously, but this is the first I recall hearing of Normandy. Apparently I missed `app.normandy.enabled`, because I think I would've remembered a name with connotations of a bloody massive surprise attack. Incidentally, `…

Post by ApolloFortyNine » Mon, May 06, 2019, 7:02 PM UTC

antt wrote: post #649

ApolloFortyNine wrote: post #613

Earlier quoted context omitted.

The more people who use adblocker, the more ads websites need to make the same amount of money. It's been brought up that many twitch streamers don't receive ad revenue from more than half their viewers. I can only find a source right now for YouTube, but they're out there for twitch too. [1] https://www.vg247.com/2015/10/30/around-40-of-pewdiepies-aud...

And? If ads were ads and not malware trackers I wouldn't care. Calling these franken-programs ads stretches the word past its breaking point. No one can stop actual ads - this comment was brought to you by Pepsi, Pepsi for the love of it. See? Everyone had to read the last sentence even if they had adblock on.

Post by ajoy39 » Mon, May 06, 2019, 11:04 PM UTC

luckylion wrote: post #344

gugagore wrote: post #312

Earlier quoted context omitted.

That doesn't sound right. What about all the other websites with ads, like recipe sites, guitar chords, porn, diy, etc.? or apps on the Google play store with ads?

I run sites that don't have ads. I don't make any money off of them. I still run them. Seems like a lot of people in software development think similarly.