On Sun, May 05, 2019 at 08:57:11AM +0100, Anthony Campbell wrote:
> On 04 May 2019, Juan Francisco Cantero Hurtado wrote:
> > On Sat, May 04, 2019 at 07:01:55PM +0100, Anthony Campbell wrote:
> > > After upgrading Firefox today to 66.0.3  in -current, all my add-ons
> > > were inactivated. A quick search showed that this is a widespread
> > > problem, apparently due to a bug in FF. I was able to fix it
> > > temporarily by means of a suggestion on ghacks.net to change
> > > 
> > > xpinstall.signatures.required
> > > 
> > > in about.config to "false".
> > > 
> > > Presumably it will be fixed soon upstream.
> > 
> > Disabling signature checks is almost always a bad idea.
> > 
> > Open this url with firefox and install the extension.
> > 
> > https://storage.googleapis.com/moz-fx-normandy-prod-addons/extensions/hotfix-update-xpi-intermediate%40mozilla.com-1.0.2-signed.xpi
> > 
> > 
> 
> Thanks; that certainly fixes the problem though I'm not clear how it
> does so or who is supplying the extension, which is a bit worrying.
> And it's not showing up in the list of extensions. Is any further
> information available?

That's the same extension installed by Firefox when you enable Studies.
The extension is signed by Mozilla. On Android, I can see the extension
in "Addons" with a button to uninstall it. The desktop version hides it
and doesn't have the option to uninstall.

We have Studies disabled on OpenBSD because Mozilla did a bad use of the
feature in the past. Search "firefox studies mrrobot". With Studies
enabled, they can change anything in your browser remotely without
notifying you.


-- 
Juan Francisco Cantero Hurtado http://juanfra.info

Reply via email to