> And btw you shouldn't let your extensions auto-update on Firefox anyway, specially if you use Tor, as it's vulnerable to MITM as someone posted here a few day

> And btw you shouldn't let your extensions auto-update on Firefox anyway, specially if you use Tor, as it's vulnerable to MITM as someone posted here a few days ago. This was fixed in Tor Browser 6.0.5[1] and Firefox 49[2]. Worth noting that the attack required a publicly-trusted certificate for addons.mozilla.org, which makes this a bit harder than just a run-of-the-mill MitM attack, though certainly possible for nation-state actors and the likes. [1]: https://blog.torproject.org/blog/tor-browser-605-released https://blog.torproject.org/blog/tor-browser-605-released [2]: https://www.mozilla.org/en-US/security/advisories/mfsa2016-85/ https://www.mozilla.org/en-US/security/advisories/mfsa2016-8...