Firefox deactivates NoScript...and calls it Legacy

Post a reply

Smilies
:D :) ;) :( :o :shock: :? 8-) :lol: :x :P :oops: :cry: :evil: :twisted: :roll: :!: :?: :idea: :arrow: :| :mrgreen: :geek: :ugeek:

BBCode is ON
[img] is ON
[url] is ON
Smilies are ON

Topic review
   

Expand view Topic review: Firefox deactivates NoScript...and calls it Legacy

Re: Firefox deactivates NoScript...and calls it Legacy

by redriver97 » Wed May 15, 2019 6:11 pm

barbaz wrote: Wed May 15, 2019 3:24 pm
redriver97 wrote: Wed May 15, 2019 3:02 pm from what i've read the option to keep xpinstall.signatures.required to false is not recommended right, due to security issues?
No, you're not opening yourself up to security issues.

The original rationale for requiring signing was something about reducing "greyware/crapware". But if you're careful what you install - as you should be anyway - then you won't have crapware addons anyway, and thus you don't need the required signing.

EDIT I should be clear that "careful what you install" not only applies to Firefox addons, but also system programs. Some installers try to side-load various "optional offers" (read: bundled crapware) that you have to explicitly opt out of. In theory such side-loaded crapware could include Firefox extensions.
Thanks for the feedback.

Well,i have only ever used 5 add-ons for years - for IDM,JDownloader,NoScript,UBlock Origin and Zenmate,all legit and used by millions i'm sure.I don't need any more stuff.The less,the better is my mantra.The same goes for any apps,i use basic stuff - an anti-virus (Avira), IDM/utorrent/jDownloader for downloads, VLC for multimedia...basic apps. ;)

I guess i was worried about security issues,mostly malicious stuff being downloaded in background without my knowledge if i used the 'false' value, but i might go with the 'false' value now that you've clarified the issue.

Re: Firefox deactivates NoScript...and calls it Legacy

by barbaz » Wed May 15, 2019 3:24 pm

redriver97 wrote: Wed May 15, 2019 3:02 pm from what i've read the option to keep xpinstall.signatures.required to false is not recommended right, due to security issues?
No, you're not opening yourself up to security issues.

The original rationale for requiring signing was something about reducing "greyware/crapware". But if you're careful what you install - as you should be anyway - then you won't have crapware addons anyway, and thus you don't need the required signing.

EDIT I should be clear that "careful what you install" not only applies to Firefox addons, but also system programs. Some installers try to side-load various "optional offers" (read: bundled crapware) that you have to explicitly opt out of. In theory such side-loaded crapware could include Firefox extensions.

Re: Firefox deactivates NoScript...and calls it Legacy

by redriver97 » Wed May 15, 2019 3:02 pm

barbaz wrote: Wed May 15, 2019 2:55 pm Probably you were using an outdated NoScript version, from before Mozilla stopped signing legacy extensions.
Ah, damn.Right, so what choice/choices do i have? I mean ,from what i've read the option to keep xpinstall.signatures.required to false is not recommended right, due to security issues?

Re: Firefox deactivates NoScript...and calls it Legacy

by barbaz » Wed May 15, 2019 2:55 pm

Probably you were using an outdated NoScript version, from before Mozilla stopped signing legacy extensions.

Re: Firefox deactivates NoScript...and calls it Legacy

by redriver97 » Wed May 15, 2019 2:53 pm

From - viewtopic.php?f=7&t=25557
barbaz wrote: Wed May 15, 2019 2:33 pm
redriver97 wrote: Wed May 15, 2019 2:30 pm I should clarify that i had to install via the about:config > xpinstall.signatures.required to false
NoScript Classic is not signed. This setting is required.
I'm a noob,so how did this work before? I mean before the add-ons got broken, my xpinstall.signatures.required was always set to 'true' and NoScript 5.1.9 was working.

Re: Firefox deactivates NoScript...and calls it Legacy

by barbaz » Wed May 15, 2019 2:52 pm

therube wrote: Wed May 15, 2019 2:47 pm Just to note, that extensions are [now] (three separate) "fixes" up on AMO for this for FF versions 47-65.
47-56
57-60
&
61-65
Links can be found here, https://www.jeffersonscher.com/ffu/armagadd-on_2_0.html.
Thanks, already noted ;) see the posts above yours (and my last post on the previous page)

Re: Firefox deactivates NoScript...and calls it Legacy

by therube » Wed May 15, 2019 2:47 pm

Just to note, that extensions are [now] (three separate) "fixes" up on AMO for this for FF versions 47-65.
47-56
57-60
&
61-65
Links can be found here, https://www.jeffersonscher.com/ffu/armagadd-on_2_0.html.

Re: Firefox deactivates NoScript...and calls it Legacy

by barbaz » Wed May 15, 2019 2:38 pm

For those who are interested in more details of what the various fixes do - https://hacks.mozilla.org/2019/05/techn ... on-outage/

Re: Firefox deactivates NoScript...and calls it Legacy

by barbaz » Tue May 14, 2019 10:04 pm

barbaz wrote: Mon May 13, 2019 10:54 pm They are also going to do one for Firefox 61-65.
https://addons.mozilla.org/firefox/addo ... fix-61-65/

Re: Firefox deactivates NoScript...and calls it Legacy

by barbaz » Mon May 13, 2019 10:54 pm

For users of Firefox 52-56, Mozilla has published an add-on that should fix this issue - https://addons.mozilla.org/firefox/addo ... fix-52-56/

They are also going to do one for Firefox 61-65.

Re: Firefox deactivates NoScript...and calls it Legacy

by barbaz » Sat May 11, 2019 8:20 pm

Broke again

by user101 » Fri May 10, 2019 1:03 am

BTW, 66.0.5 broke the extensions again. I turned on studies, restarted the browser, and the extensions came back. I then turned off studies and all seems ok now.

Broke again

by user101 » Fri May 10, 2019 12:56 am

Quantum 66.0.5 (64-bit) on Windows - just downloaded 66.0.5 and it broke all the extensions again

Re: Firefox deactivates NoScript...and calls it Legacy

by barbaz » Fri May 10, 2019 12:48 am

Good news for Firefox 52 ESR users? - https://www.ghacks.net/2019/05/09/mozil ... -versions/

Re: Firefox deactivates NoScript...and calls it Legacy

by 4td8s » Tue May 07, 2019 7:02 pm

before I updated FF60 ESR from 60.6.1 to 60.6.2 I delete the cert9.db file from my Firefox user profile folder, then manually download & install FF 60.6.2 and then load FF 60 ESR, which will create a new cert9.db file. Noscript along with uBlock origin started to work properly again.

Top