Because they use NoScript, higher security levels are currently broken for Tor Browser users,' they wrote on Saturday. 'Due to a mistake in Mozilla's signing infrastructure, NoScript and all other Firefox extensions signed by Mozilla have been disabled in Tor Browser. The Tor Project released their own statement explaining the issue to their users, even offering a way to get around the issue. 'NoScript is an important security addon that's officially trusted by Tor, as well as being installed by millions of other regular browser users.' We were online to look into a couple of untrusted sites, and we'd already started digging around when the warning popped up, which increased our sense of disquiet,' wrote Paul Ducklin of NakedSecurity. 'According to the Tor Browser program, one of our browser add-ons could no longer be trusted and had been turned off - the alert didn't say which one, just that some sort of cybersecurity concern had suddenly arisen. Specifically, Tor users lamented the loss of NoScript, a security add-on that was lost amid the larger add-on problems. Many people tried to find work arounds before Mozilla released their update, but security analysts cautioned against this, as it may have adversely affected the security of certain browsers.

'There are remaining issues that we are actively working to resolve, but we wanted to get this fix out before Monday to lessen the impact of disabled add-ons before the start of the week,' Mozilla's Kev Needham wrote on their blog, adding that 'This release repairs the certificate chain to re-enable web extensions, themes, search engines, and language packs that had been disabled.'

Firefox add ons