Slashdot Mirror
Microsoft Hides Firefox Extension In Toolbar Update
Jan writes "As part of its regular Patch Tuesday, Microsoft released an update for its various toolbars, and this update came with more than just documented fixes. The update also installs an add-on for Internet Explorer and an extension for Mozilla Firefox, both without the user's permission."
MS stop acting like spyware....
Old news is so exciting!
Is it old news, or did MS decide that since only "Firefox geeks" complained about it last time that it's open season to add Firefox extensions without asking?
Why the hell hasn't Mozilla made it easy to remove plugins from Firefox? You have to Google solutions to find out how to remove Microsoft (and in some cases old Java) shit.
The difference being that that add-in was arguably useful. It enabled click-once in firefox, iirc, which is a fairly handy experience for running small apps over the web. If I recall, Java does the same thing. The problem then was that firefox had no way to distinguish between a version with a flaw, and a version without a flaw, so they had no choice but to temporarily blacklist it (and there was that issue with not being able to disable it due to permissions).
Browser toolbars, however, never strike me as a nice addition to a product without asking.
Disclaimer: This is only my opinion, nothing more.
It's the same problem I have with Apple keeping people locked into the Appstore. It's not that the action itself is a big deal, it's the fact that they are actually doing it that's the problem. The consequences of that action is irrelevant; the action itself is bad.
Living With a Nerd
Yeah not really much of an issue in my book seeing as I don't have any type of search toolbar installed in any of my browsers (Iron, IE, FF.) Consequently I didn't get some "unwanted sekrit mystery update" when I installed updates Tuesday.
I don't have no steenking Bing searchbar in my Firefox browser (no searchbars at all, in fact). The new extension did NOT show up in my Firefox addons, although I received my Windows updates yesterday.
So I'm not affected directly. But, as many others have said, I do NOT appreciate Microsoft changing ANYTHING in my computer without my specific, informed permission. Okay, they can change their own OS if necessary (since they usually accept responsibility for disasters that occur). But leave MY programs the hell alone!
The more MS tries to force Bing down everyone's throats, the more determined I am to boycott Bing. It pissed me off so much the day I found that Verizon had signed a deal with MS to make Bing the exclusive (not merely default) search provider on my Blackberry. Of course, I countered by putting google at the top of my bookmarks, but really I shouldn't have to maneuver around microsoft's asshat shenanigans just to use my search provider of choice on my phone (and yes, I resent verizon for that as well).
Plus obviously one has to wonder: "If Bing is so freaking great than why is MS paying to have it force-fed all over? Like all those pop-up ads so many sites have now that resolve to Bing -- and they count those as hits for their search engine, which probably at least quadruples their numbers.
It's inconvenient to dislike MS, because they're everywhere. I'd rather be able to embrace them, I really would. But their behavior is just so objectionable in so many ways it's impossible.
Caveat Utilitor
Well, the problem is, nobody knows exactly what it is and why it's there. Given Microsoft's lousy record with internet security, what's to say they haven't inadvertently created a security loophole?
From the looks of it, they're installing toolbars into Firefox. Since they're for Bing and for Search helper, I'm sure they're directing people to their own search engine. Which means they're taking advantage of their control over the OS to meddle with my browser.
And, most importantly, they didn't ask. Since this isn't Microsoft's software, WTF are they doing jamming in add-ons without notifying the user or making it possible to delete it?? When they installed the last .NET extension to my Firefox, I can't delete it -- only Disable it. It's not up to Microsoft to "enhance" my user experience in software that isn't theirs.
Seriously, you have to ask why installing additions into other companies' software without asking the user or allowing them to delete it is just plain wrong? What next, deleting any software which competes with their own offerings?
Lost at C:>. Found at C.
My Ubuntu installation at work installed a Firefox extension by default. It also made numerous modifications to packages installed on my computer - from bash to Xorg to Gnome. Both legal and morally acceptable.
Same thing is with Microsoft, with the only difference being that there is no assumed connection between Windows and Firefox (Microsoft doesn't package Firefox)
Your OS will tamper with the rest of your machine. The question is: do you trust your operating system with your computer?
When you buy and/or install Windows, you explicitly (although in very small print) give Microsoft permission to do exactly this, as far as I recall; it should be in your EULA. I can't say that it worries me a lot - I use Linux.
Yeah, and if you do wind up buying another car from the other company, the roof installs itself as soon as you park it in the driveway.
The stories and info posted here are artistic works of fiction and falsehood.
Only fools would take it as fact.
"I like your products, Microsoft...but I still abhor your business practices."
Not enough to stop using their software, hence not enough to matter.
"This post is an artistic work of fiction and falsehood. Only a fool would take anything posted here as fact."
But its not benign in any sense of reality. Think of it this way, for every 1000 lines of code there is an average of 1-1.5 defects even in highly scrutinized Government sponsored "secure" programs. If Microsoft wrote 10k lines of code (conservative I think) that is, given Microsoft's current defect track record, about 12 real defects in that hypothetical extension (I don't know the actual size of the code base). If even one of those defects provides a security vulnerability your system gets hacked. How secure are you? You don't even know its vulnerable, and if you did, you may not even be able to remove it entirely because Microsoft doesn't provide that capability on purpose. Even if you find a way to deactivate it there is still code on your system that might be abused without clicking on the GUI taskbar. Removing these Microsoft 'add-ons' generally requires a knowledgeable person to essentially hack you Firefox/OS installation just to remove it. The real twist to the reality is that they even want Firefox to be unstable and cause you problems, so what is their incentive to make it defect free? They are not going to put much effort into ensuring that a competitors product continues to beat them in the open market. Microsoft likes to win. History itself tells the truth about their true motivations. I won't even go there.
Dear Mozilla developers, please disable by default *all* extensions except:
The power to choose what to install in their browsers must reside only in the hands of the users.
If a vendor actively tries to circumvent this new protection mechanism, permanently blacklist ALL its extensions, plugins and whatnot. Report them to antivirus vendors as malware.
It's not the first time this happens and it actively damages users, with slower browsing experience, less screen space for actual content, huge undisclosed privacy and security breaches (you can BET they exists, even if they are not made public).
This shit has to stop.
P.S. to the users of Microsoft products: please any time you can, try to avoid this company, you're not their customer, you're their victim. There are other software vendors that respect you much more than that.
There's a hidden treasure in Python 3.x: __prepare__()
Really? I've got two add-ons with a nice shiny Uninstall button next to them that is enabled should I decide to push it. (Why I would uninstall noscript, I don't know, but it's there).
I also have Java Add-ons and .NET add-ons which have the Uninstall button disabled.
Methinks if Firefox was designed to prevent uninstalling add-ons, there would be no such button.
And, really, unless you know exactly which files to delete and if you can do it safely, deleting the files from the disk isn't really an option.
Lost at C:>. Found at C.
I doubt he'll be running MS Update on Linux :P
As small and simple as this may be this is a monopoly desktop OS vendor using its position to push out things to support its internet and marketing activities. Using one position as monopoly to prop up or support another activity in another market place. That pretty much defines what they have been getting in trouble for over the past 20 years in multiple jurisdictions.
They show no signs or intention of change. They need to be broken up.
>When you buy and/or install Windows, you explicitly (although in very small print) give Microsoft permission to do exactly this
I don't think the word 'explicitly' means what you think it means. Even more so in very small print.
Corporation, n. An ingenious device for obtaining individual profit without individual responsibility. - Ambrose Bierce
Why does an OEM have to put in the Live Search Toolbar? Couldn't the user have installed it him/herself?
It's possible. It is also possible that the user could deliberately stab themselves in the eye with a rusty nail, exfoliate with a belt sander, or give themselves dozens of tiny paper cuts on their genitalia. Many things are possible, and some of those things indicate mental illness of some sort.
- None can love freedom heartily, but good men; the rest love not freedom, but license. -- John Milton
You missed an important circle on your Venn diagram.
The subset of "Firefox Geeks" with "Windows Live Toolbar" is probably quite small and I can't imagine any of them will mind too much (I mean, they actually installed Windows Live toolbar so how much of a "Firefox Geek" can they be...?)
Still, this is Slashdot so I'll let everybody get back to their Microsoft bashing.
No sig today...
Of course you can delete it. It's just files on a disk. You can't delete files on a disk?
What you can't do is disable it from inside Firefox. And why is that? Because that's how Firefox was designed.
It’s bloody wrong and I want it fixed.
Yes, it’s installed as a system-wide extension and can’t be uninstalled by a user-level program. That is what UAC is for: to elevate privileges out of the user level so I can perform admin actions (such as uninstalling system-wide extensions).
I want a button with the little UAC access-control icon (the shield) next to “Uninstall”, so that I know I can’t uninstall it unless I’m an administrator. Maybe put a little warning message “uninstalling this extension will affect all users on this computer... you must be an administrator to perform this action...”
I want to click the button, be presented with a UAC prompt, type the administrator password, and have the damn extension uninstalled.
That is how things are supposed to work.
In the meantime, how do I uninstall it? I hate having greyed-out disabled extensions cluttering up my list of extensions. (Same goes for plugins, actually.)
Alexander Peter Kristopeit bought his basement from his mommy for one dollar.
I'm amused by how many of your slashdot posts are recommending that people sue people the way YOU "sued the crap" out of EA for Spore. America... america, fuck yeah!
Sue *, its always the answer.
Ogre Wedding Planners llc.