On a fresh, new installation of Tor Browser v11.0.9, I noticed that even though Show alerts about passwords for breached websites in Tor Browser Preferences > Privacy & Security is disabled by default:

Screenshot of Tor Browser Preferences

Tor Browser still tries to connect to firefox.settings.services.mozilla.com on startup:

Screenshot Tor Browser Firewall Alert

According to Firefox own Help Docs How to stop Firefox from making automatic connections and Turn off website breach alerts, this shouldn't be happening.

This bug seems to persist in Tor Browser 12.0.4 too, and now it also seems to phone Securedrop.org on startup:

Tor Browser 12.0.4 Phoning Mozilla and Securedrop

Bug still persists in Tor Browser 12.0.6:

Screenshot Tor Browser 12.0.6 Firewall Alert

  • 2
    This might be the same as gitlab.torproject.org/tpo/applications/tor-browser/-/issues/….
    – Steve
    Apr 7, 2022 at 23:51
  • @Steve Yes, you may be right - it does seem to be an old regression that hasn't been fixed. I wonder why?
    – sfxedit
    Apr 14, 2022 at 14:13
  • @Steve Issue persists with Tor Browser v11.0.11 too ...
    – sfxedit
    May 15, 2022 at 22:05
  • 1
    @Steve Could you post your comment as an answer with some more detail? It seems this is related to the question and as far as I see it the bug is closed and the bugfix will be shipped with the next alpha release.
    – Jens Kubieziel
    Apr 4, 2023 at 20:23
  • @JensKubieziel Do you have more details when the bugfix will be shipped? The latest version (12.0.6) still has this bug and still tries to call Mozilla and Securedrop.
    – sfxedit
    Jun 2, 2023 at 23:01


You must log in to answer this question.

Browse other questions tagged .