All extensions disabled due to expiration of intermediate signing cert

Show context

rmbryan ◴[04 May 19 10:27 UTC] No.19825581[source]▶

>>19823701 (OP) #

Update: We have rolled out a partial fix for this issue. We generated a new intermediate certificate with the same name/key but an updated validity window and pushed it out to users via Normandy (this should be most users). Users who have Normandy on should see their add-ons start working over the next few hours. We are continuing to work on packaging up the new certificate for users who have Normandy disabled.

replies(20): >>19825596 #>>19825603 #>>19825612 #>>19825623 #>>19825631 #>>19825665 #>>19825705 #>>19825721 #>>19825744 #>>19825813 #>>19825905 #>>19825998 #>>19826421 #>>19826769 #>>19826772 #>>19826878 #>>19827050 #>>19829585 #>>19831941 #>>19840386 #

inferiorhuman ◴[04 May 19 10:49 UTC] No.19825665[source]▶

>>19825581 #

pushed it out to users via Normandy (this should be most users)

Is the existence of a back door method of updating Firefox preferences something that will be disclosed to users? What about a UI knob to disable it?

replies(6): >>19825685 #>>19825686 #>>19825716 #>>19825995 #>>19826440 #>>19826786 #

daleharvey ◴[04 May 19 10:56 UTC] No.19825686[source]▶

>>19825665 #

> Is the existence of a back door method of updating Firefox preferences something that will be disclosed to users?

It will even be documented for them: https://wiki.mozilla.org/Firefox/Normandy/PreferenceRollout

> What about a UI knob to disable it?

app.normandy.enabled

replies(5): >>19825728 #>>19825732 #>>19825745 #>>19825755 #>>19825842 #

lawl ◴[04 May 19 11:11 UTC] No.19825745[source]▶

>>19825686 #

The UI knob is

    Options -> Privacy & Security > Allow Firefox to install and run studies

They're using the studies system to push this hotfix faster for those that have it enabled.

Edit: Source:

See: https://discourse.mozilla.org/t/certificate-issue-causing-ad...

> In order to be able to provide this fix on short notice, we are using the Studies system. You can check if you have studies enabled by going to Firefox Preferences -> Privacy & Security -> Allow Firefox to install and run studies.

Normandy seems to be the internal name for this system: https://github.com/mozilla/normandy

replies(5): >>19825762 #>>19825773 #>>19826186 #>>19826841 #>>19828213 #

nanis[dead post] ◴[04 May 19 11:16 UTC] No.19825773[source]▶

>>19825745 #

> The UI knob is

> Options -> Privacy & Security > Allow Firefox to install and run studies

That is not true. I've had that disabled forever Despite that, when I went into about:config, app.normandy.enabled was set to true, and app.normandy.user_id was defined.

So, overnight Firefox decides it won't let me use uBlock Origin any more and now I find out all my browsing history has been logged to Firefox servers.

All of this stinks.

gpm ◴[04 May 19 11:31 UTC] No.19825820[source]▶

>>19825773 #

I'm nearly certain Normandy does not log all of your browsing history for what it's worth.

I agree Mozilla approach to stuff like this is... less than ideal.

replies(1): >>19829184 #