Hacker News Reader

All that has to happen to fix this vulnerability is to remove support for legacy addons—which is what Firefox Quantum already did.

The old addon system made it far too easy to make catastrophic mistakes like this. Web Extensions, which are an API that was actually designed with security in mind, constitute a huge security improvement.

Firefox doesn't work without a JavaScript engine.

what about just toggling javascript.enabled ?

I can confirm that setting javascript.enabled to false would have prevented that bug in older versions.

I've always thought that the highest security setting would set it to false on its own, but apparently it does not.

> Especially since Tor is usually used to access hidden services instead of the clearnet.

My assumption is the opposite but I have no data to cite here, is it even possible to tell?

A tor browser that isn't usable means people don't use it.