Delivery-Date: Thu, 11 Aug 2016 10:31:18 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
	T_RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [138.201.14.202])
	(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 664431E04CC;
	Thu, 11 Aug 2016 10:31:16 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id E5BEBE06F3;
	Thu, 11 Aug 2016 14:31:03 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 725E7E078C
 for <tor-talk@lists.torproject.org>; Thu, 11 Aug 2016 14:30:59 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id s-m_IU_zfZfB for <tor-talk@lists.torproject.org>;
 Thu, 11 Aug 2016 14:30:59 +0000 (UTC)
Received: from avatar.getfoxyproxy.org (avatar.getfoxyproxy.org
 [45.79.173.108])
 by eugeni.torproject.org (Postfix) with ESMTP id 183F8E06D9
 for <tor-talk@lists.torproject.org>; Thu, 11 Aug 2016 14:30:58 +0000 (UTC)
Received: from [127.0.0.1] (tor-exit.talyn.se [51.255.33.0])
 (Authenticated sender: georg@getfoxyproxy.org)
 by avatar.getfoxyproxy.org (Postfix) with ESMTPSA id A1DAA41BB
 for <tor-talk@lists.torproject.org>; Thu, 11 Aug 2016 14:30:55 +0000 (UTC)
To: tor-talk@lists.torproject.org
References: <1470924209.2085316.692493841.5EF7BB83@webmail.messagingengine.com>
From: Georg Koppen <gk@torproject.org>
Message-ID: <4089170c-2819-2440-b62e-3ff99684eab5@torproject.org>
Date: Thu, 11 Aug 2016 14:30:00 +0000
MIME-Version: 1.0
In-Reply-To: <1470924209.2085316.692493841.5EF7BB83@webmail.messagingengine.com>
X-Content-Filtered-By: Mailman/MimeDel 2.1.18
Subject: Re: [tor-talk] "Your Firefox is out of date"
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Reply-To: tor-talk@lists.torproject.org
Content-Type: multipart/mixed; boundary="===============6071854678841697637=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============6071854678841697637==
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="K66xJcUJOLkm7E1v7omlNSHNbEqpI2hJW"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--K66xJcUJOLkm7E1v7omlNSHNbEqpI2hJW
From: Georg Koppen <gk@torproject.org>
To: tor-talk@lists.torproject.org
Message-ID: <4089170c-2819-2440-b62e-3ff99684eab5@torproject.org>
Subject: Re: [tor-talk] "Your Firefox is out of date"
References: <1470924209.2085316.692493841.5EF7BB83@webmail.messagingengine.com>
In-Reply-To: <1470924209.2085316.692493841.5EF7BB83@webmail.messagingengine.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Random User:
> Hi,=20
>=20
> When opening Tor Browser 6.0.3 (GNU/Linux) just now, I was alarmed to
> get the following message:
>=20
> "Your Firefox is out of date. Please download a fresh copy.", along wit=
h
> a button labeled, "Get Firefox". I did not click the button and will
> wait before doing anything to hear from others about this.
>=20
> I have been using Tor Browser for years now and do not recall ever
> getting such a message before. It is clearly different from the normal
> update messages. =20
>=20

Yes, this is bug 19890 and it should be fixed on Mozilla's side right
now (I tested it a while ago): having a clean Tor Browser you won't get
that warning anymore. To quote from the blog post update:

"""
Update (August 11, 10:04 UTC): Starting from a couple of hours ago Tor
Browser users might see a notification box in their browser claiming
that Firefox is too old providing a button to get a newer one. This is
both due to a server-side code change on Mozilla's side and an oversight
by us during the ESR45 transition. Clicking on the "Get Firefox" button
is save and leads the user to our Tor Browser download page. Needless to
say, this whole behavior is highly confusing and we are apologizing for
it. We are working on a fix as past as possible and hope to get Mozilla
to exempt Tor Browser users from this feature while we are working on a
new release. For technical details see our bug tracker.
"""

We plan to release a new Tor Browser version shortly to address the
issue from our side. As a workaround one can either install a new Tor
Browser 6.0.3 version from our website or set
`extensions.systemAddon.update.url` to `""` which should get rid of the
out-of-date-extension the next time an extension update check gets
performed. Again, we are sorry for the inconvenience.

Georg


--K66xJcUJOLkm7E1v7omlNSHNbEqpI2hJW
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=IOZg
-----END PGP SIGNATURE-----

--K66xJcUJOLkm7E1v7omlNSHNbEqpI2hJW--

--===============6071854678841697637==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

LS0gCnRvci10YWxrIG1haWxpbmcgbGlzdCAtIHRvci10YWxrQGxpc3RzLnRvcnByb2plY3Qub3Jn
ClRvIHVuc3Vic2NyaWJlIG9yIGNoYW5nZSBvdGhlciBzZXR0aW5ncyBnbyB0bwpodHRwczovL2xp
c3RzLnRvcnByb2plY3Qub3JnL2NnaS1iaW4vbWFpbG1hbi9saXN0aW5mby90b3ItdGFsawo=

--===============6071854678841697637==--

