3

This is not really a problem with Tor, but within Firefox. One of the certificates which Firefox uses for signing of add-ons is expired. They write about it in their bugtracking system: https://bugzilla.mozilla.org/show_bug.cgi?id=1548973 Hopefully this will fixed within the next hours. Tor also has the entry #30388 in their bug tracker. So basically we ...


3

This is a known issue: https://trac.torproject.org/projects/tor/ticket/27175 Looks like the fix will be released very soon with the next update.


2

Click on 'Options' (in NoScript), then click on the 'Appearance' tab: check off the options you want see. The upper right part contains the most important ones.


1

73a6fe31-595d-460b-a920-fcc0f8843232.xpi is the NoScript addon


1

Since NoScript 10.2.2 you can check NoScript Options>Advanced>Override Tor Browser's Security Level preset. Also Notice that in Tor Browser 9 NoScript's and HTTPS Everywere's toolbar buttons are hidden in order to further emphasize the Security Level UI: if you need to fine tune the underlying extensions you'll probably want to bring those buttons back from ...


1

You can change the Tor Browser Security Settings Security Level to Safest, which only enables frame and other by default. Unfortunately, as of Tor Browser 8.0.4, it looks like I can't save per-site permissions across sessions, even with the new extensions.torbutton.noscript_persist setting.


1

It seems to be a NoScript bug. When I disable 'Sanitize cross-site suspicious requests' in NoScript Options\Advanced\XSS then Facebook comments come back. So, it is the first solution to disable 'Sanitize...', but we are vulnerable to XSS attack if permanently disabled. Second solution: tweak the NoScript Options|Advanced|XSS|Anti-XSS Protection Exceptions ...


1

Google Maps in the browser does not use Java but Javascript. No Script is great at blocking Javascript from loading and running at all. You need to make sure No Script is set to block everything globally ("Forbid Scripts Globally"). Then whitelist specific sites and scripts as needed for the functionality you need per domain.


1

I wonder what OS you are using. I know that having a registry cleaner or guard active with Windows OS can restrict you registry from updating sometimes. Also I have had some issues between Zone Alarm and tor software which I fix by turning Zone Alarm off while downloading tor stuff so a non-native firewall (say - Zone Alarm as opposed to Windows Firewall) ...


1

With or without Javascript Tor Browser has a default policy of blocking third party cookies. Cookies can only be set or retrieved by request of domain in the URL bar, regardless of resource fetches from third party websites. "can news.com attach a cookie to my TBB session?" Yes. Cookies are an extension of the HTTP protocol. They do not require active ...


1

Thanks for the suggestion, hawkeye. I tried all the options on the Appearance tab and none of them produced the desired result. However, if I check the "Temporarily allow [...]" box on the Appearance tab AND ALSO uncheck "Cascade top document's permissions to 3rd party scripts" on the Advanced, Trusted tab, then NoScript starts listing all domains that ...


1

No, these scripts most likely will not enable the site to see your IP address, but they can figure out the following information about you: You are using Tor network and your IP address is a Tor exit node. You are a human and not a robot. Robots still do not have enough artificial intelligence to act as humans in these type of tests. (but in near future ...


1

The current version of Tor Browser Bundle has the NoScript icon on the top left of the page: Just click on the S and the menu of NoScript will open. Here you can disable JavaScript or make other changes.


1

This was removed with Tor Browser 4.0.4. It was there accidentally.


Only top voted, non community-wiki answers of a minimum length are eligible