Slashdot Mirror


Microsoft Hides Firefox Extension In Toolbar Update

Jan writes "As part of its regular Patch Tuesday, Microsoft released an update for its various toolbars, and this update came with more than just documented fixes. The update also installs an add-on for Internet Explorer and an extension for Mozilla Firefox, both without the user's permission."

16 of 285 comments (clear)

  1. Re:Wow! by Culture20 · · Score: 5, Insightful

    Old news is so exciting!

    Is it old news, or did MS decide that since only "Firefox geeks" complained about it last time that it's open season to add Firefox extensions without asking?

  2. Plugin uninstaller for Firefox? by Anonymous Coward · · Score: 5, Insightful

    Why the hell hasn't Mozilla made it easy to remove plugins from Firefox? You have to Google solutions to find out how to remove Microsoft (and in some cases old Java) shit.

    1. Re:Plugin uninstaller for Firefox? by gstoddart · · Score: 5, Insightful

      Why the hell hasn't Mozilla made it easy to remove plugins from Firefox? You have to Google solutions to find out how to remove Microsoft (and in some cases old Java) shit.

      Mozilla has -- there's supposed to be an Uninstall button next to them.

      Unfortunately, Microsoft didn't allow the Uninstall button to work, and you could only Disable. This is not a Mozilla problem in not providing a mechanism -- this is Microsoft and Sun making shitty add-ons.

      --
      Lost at C:>. Found at C.
    2. Re:Plugin uninstaller for Firefox? by mister_playboy · · Score: 4, Insightful

      The problem is these add-ons (they are not plugins) aren't installed with user privileges, but admin privileges. How would you have Mozilla fix this? By magically circumventing the permissions system in Windows?

      Perhaps MS hopes that people will place the blame on Mozilla as you have done.

      --
      Do what thou wilt shall be the whole of the Law ::: Love is the law, love under will
    3. Re:Plugin uninstaller for Firefox? by jack2000 · · Score: 5, Insightful

      No it's Mozilla's problem. They should make it impossible for anyone to install plugins/extensions without user interaction and further more they should make it impossible for the uninstall button to be disabled. Have a damn "delete plugin dlls" button if nothing else damn it!

    4. Re:Plugin uninstaller for Firefox? by Alpha830RulZ · · Score: 5, Insightful

      This is a really bad idea. Browsers shouldn't be able to elevate privileges. That's a key mechanism in preventing content from being able to hijack the system. The LAST thing I want in a browser is for it to operate as admin/root.

      --
      I was taught to respect my elders. The trouble is, it's getting harder and harder to find some.
    5. Re:Plugin uninstaller for Firefox? by protektor · · Score: 5, Insightful

      HP Web Printing does this and Move Media Player does this. Both are old plug-ins that are disabled because they don't work with the current version of Firefox that I have, and they won't update, and I can't uninstall them either. So there are many companies that are making Firefox add-ons/plug-ins that are not able to be installed. That should not be an option at all. If you can't uninstall it then it shouldn't be possible to install it all. This is something that Mozilla/Firefox people need to work on fixing.

      The Move Media Player is what you have to have to watch streaming TV from the CW network. HP Web Printing was installed when I installed the drivers and software for my printer. Now I am stuck with both of them that don't work and can't be removed and won't update either.

  3. Re:Again? by ashridah · · Score: 4, Insightful

    The difference being that that add-in was arguably useful. It enabled click-once in firefox, iirc, which is a fairly handy experience for running small apps over the web. If I recall, Java does the same thing. The problem then was that firefox had no way to distinguish between a version with a flaw, and a version without a flaw, so they had no choice but to temporarily blacklist it (and there was that issue with not being able to disable it due to permissions).

    Browser toolbars, however, never strike me as a nice addition to a product without asking.

  4. Re:Here we go again by Pojut · · Score: 5, Insightful

    Disclaimer: This is only my opinion, nothing more.

    It's the same problem I have with Apple keeping people locked into the Appstore. It's not that the action itself is a big deal, it's the fact that they are actually doing it that's the problem. The consequences of that action is irrelevant; the action itself is bad.

  5. Didn't Change My Firefox by Toad-san · · Score: 5, Insightful

    I don't have no steenking Bing searchbar in my Firefox browser (no searchbars at all, in fact). The new extension did NOT show up in my Firefox addons, although I received my Windows updates yesterday.

    So I'm not affected directly. But, as many others have said, I do NOT appreciate Microsoft changing ANYTHING in my computer without my specific, informed permission. Okay, they can change their own OS if necessary (since they usually accept responsibility for disasters that occur). But leave MY programs the hell alone!

  6. Re:It is just an update to an existing toolbar by clang_jangle · · Score: 5, Insightful

    The more MS tries to force Bing down everyone's throats, the more determined I am to boycott Bing. It pissed me off so much the day I found that Verizon had signed a deal with MS to make Bing the exclusive (not merely default) search provider on my Blackberry. Of course, I countered by putting google at the top of my bookmarks, but really I shouldn't have to maneuver around microsoft's asshat shenanigans just to use my search provider of choice on my phone (and yes, I resent verizon for that as well).

    Plus obviously one has to wonder: "If Bing is so freaking great than why is MS paying to have it force-fed all over? Like all those pop-up ads so many sites have now that resolve to Bing -- and they count those as hits for their search engine, which probably at least quadruples their numbers.

    It's inconvenient to dislike MS, because they're everywhere. I'd rather be able to embrace them, I really would. But their behavior is just so objectionable in so many ways it's impossible.

    --
    Caveat Utilitor
  7. Re:Here we go again by gstoddart · · Score: 5, Insightful

    Not that I'm saying they should be allowed to push updates like that, but what's the harm in some ridiculous search extension being added?

    Well, the problem is, nobody knows exactly what it is and why it's there. Given Microsoft's lousy record with internet security, what's to say they haven't inadvertently created a security loophole?

    From the looks of it, they're installing toolbars into Firefox. Since they're for Bing and for Search helper, I'm sure they're directing people to their own search engine. Which means they're taking advantage of their control over the OS to meddle with my browser.

    And, most importantly, they didn't ask. Since this isn't Microsoft's software, WTF are they doing jamming in add-ons without notifying the user or making it possible to delete it?? When they installed the last .NET extension to my Firefox, I can't delete it -- only Disable it. It's not up to Microsoft to "enhance" my user experience in software that isn't theirs.

    Seriously, you have to ask why installing additions into other companies' software without asking the user or allowing them to delete it is just plain wrong? What next, deleting any software which competes with their own offerings?

    --
    Lost at C:>. Found at C.
  8. This shit has to stop by YA_Python_dev · · Score: 4, Insightful

    Dear Mozilla developers, please disable by default *all* extensions except:

    1. the ones that are manually installed by the user using the standard UI inside Firefox;
    2. the ones that are manually enabled by the user using a menu switch inside Firefox for EACH externally installed extension (do NOT show a confirmation dialog if a new extension appears out of nowhere: users always click "yes").

    The power to choose what to install in their browsers must reside only in the hands of the users.

    If a vendor actively tries to circumvent this new protection mechanism, permanently blacklist ALL its extensions, plugins and whatnot. Report them to antivirus vendors as malware.

    It's not the first time this happens and it actively damages users, with slower browsing experience, less screen space for actual content, huge undisclosed privacy and security breaches (you can BET they exists, even if they are not made public).

    This shit has to stop.

    P.S. to the users of Microsoft products: please any time you can, try to avoid this company, you're not their customer, you're their victim. There are other software vendors that respect you much more than that.

    --
    There's a hidden treasure in Python 3.x: __prepare__()
  9. Re:Here we go again by gstoddart · · Score: 4, Insightful

    What you can't do is disable it from inside Firefox. And why is that? Because that's how Firefox was designed.

    Really? I've got two add-ons with a nice shiny Uninstall button next to them that is enabled should I decide to push it. (Why I would uninstall noscript, I don't know, but it's there).

    I also have Java Add-ons and .NET add-ons which have the Uninstall button disabled.

    Methinks if Firefox was designed to prevent uninstalling add-ons, there would be no such button.

    And, really, unless you know exactly which files to delete and if you can do it safely, deleting the files from the disk isn't really an option.

    --
    Lost at C:>. Found at C.
  10. Re:Wow! by Amanieu · · Score: 5, Insightful

    I doubt he'll be running MS Update on Linux :P

  11. Re:Wow! by Blue+Stone · · Score: 4, Insightful

    >When you buy and/or install Windows, you explicitly (although in very small print) give Microsoft permission to do exactly this

    I don't think the word 'explicitly' means what you think it means. Even more so in very small print.

    --
    Corporation, n. An ingenious device for obtaining individual profit without individual responsibility. - Ambrose Bierce