This is not really a problem with Tor, but within Firefox. One of the certificates which Firefox uses for signing of add-ons is expired. They write about it in their bugtracking system: https://bugzilla.mozilla.org/show_bug.cgi?id=1548973
Hopefully this will fixed within the next hours.
Tor also has the entry #30388 in their bug tracker.
So basically we ...
Since NoScript 10.2.2 you can check NoScript Options>Advanced>Override Tor Browser's Security Level preset.
Also Notice that in Tor Browser 9 NoScript's and HTTPS Everywere's toolbar buttons are hidden in order to further emphasize the Security Level UI: if you need to fine tune the underlying extensions you'll probably want to bring those buttons back from ...
I found if I do this then go to old.reddit.com it works much better. If you don't
change the about:config settings Tor won't let you connect to old.reddit.com
I cannot reproduce this. The old reddit layout (https://old.reddit.com/) works just fine for me without any tweaks whatsoever.
Is it okay to set the Security setting to Safest then change the about:...
This is a temporary change in the latest Tor Browser version (9.0.7) due to a Firefox vulnerability.
You can change the Tor Browser Security Settings Security Level to Safest, which only enables frame and other by default.
Unfortunately, as of Tor Browser 8.0.4, it looks like I can't save per-site permissions across sessions, even with the new extensions.torbutton.noscript_persist setting.
It seems to be a NoScript bug. When I disable 'Sanitize cross-site suspicious requests' in NoScript Options\Advanced\XSS then Facebook comments come back. So, it is the first solution to disable 'Sanitize...', but we are vulnerable to XSS attack if permanently disabled.
Second solution: tweak the NoScript Options|Advanced|XSS|Anti-XSS Protection Exceptions ...
You need to make sure No Script is set to block everything globally ("Forbid Scripts Globally").
Then whitelist specific sites and scripts as needed for the functionality you need per domain.
I wonder what OS you are using. I know that having a registry cleaner or guard active with Windows OS can restrict you registry from updating sometimes. Also I have had some issues between Zone Alarm and tor software which I fix by turning Zone Alarm off while downloading tor stuff so a non-native firewall (say - Zone Alarm as opposed to Windows Firewall) ...
Tor Browser has a default policy of blocking third party cookies. Cookies can only be set or retrieved by request of domain in the URL bar, regardless of resource fetches from third party websites.
"can news.com attach a cookie to my TBB session?"
Yes. Cookies are an extension of the HTTP protocol. They do not require active ...
Thanks for the suggestion, hawkeye. I tried all the options on the Appearance tab and none of them produced the desired result.
However, if I check the "Temporarily allow [...]" box on the Appearance tab AND ALSO uncheck "Cascade top document's permissions to 3rd party scripts" on the Advanced, Trusted tab, then NoScript starts listing all domains that ...
No, these scripts most likely will not enable the site to see your IP address, but they can figure out the following information about you:
You are using Tor network and your IP address is a Tor exit node.
You are a human and not a robot. Robots still do not have enough artificial intelligence to act as humans in these type of tests. (but in near future ...
The current version of Tor Browser Bundle has the NoScript icon on the top left of the page: