Slashdot Mirror
Microsoft Hides Firefox Extension In Toolbar Update
Jan writes "As part of its regular Patch Tuesday, Microsoft released an update for its various toolbars, and this update came with more than just documented fixes. The update also installs an add-on for Internet Explorer and an extension for Mozilla Firefox, both without the user's permission."
Old news is so exciting!
Is it old news, or did MS decide that since only "Firefox geeks" complained about it last time that it's open season to add Firefox extensions without asking?
Microsoft hides extension in awkward zipper malfunction.
(Sorry, it's one of those mornings)
Why the hell hasn't Mozilla made it easy to remove plugins from Firefox? You have to Google solutions to find out how to remove Microsoft (and in some cases old Java) shit.
The difference being that that add-in was arguably useful. It enabled click-once in firefox, iirc, which is a fairly handy experience for running small apps over the web. If I recall, Java does the same thing. The problem then was that firefox had no way to distinguish between a version with a flaw, and a version without a flaw, so they had no choice but to temporarily blacklist it (and there was that issue with not being able to disable it due to permissions).
Browser toolbars, however, never strike me as a nice addition to a product without asking.
Disclaimer: This is only my opinion, nothing more.
It's the same problem I have with Apple keeping people locked into the Appstore. It's not that the action itself is a big deal, it's the fact that they are actually doing it that's the problem. The consequences of that action is irrelevant; the action itself is bad.
Living With a Nerd
No. From TFA:
On one of our Windows systems, we had the Windows Live Toolbar installed for Internet Explorer but not for Firefox. Nevertheless, installing this update added the add-on/extension to both browsers without telling us that it would do so. On our second system, we had the Bing Bar installed for Internet Explorer, but it was disabled. Firefox was not installed. This system already had the update in question, so we decided to install Firefox. Not only was the Bing Bar extension present upon Firefox's first launch, but so was the Search Helper Extension.
The stories and info posted here are artistic works of fiction and falsehood.
Only fools would take it as fact.
The difference being that that add-in was arguably useful. It enabled click-once in firefox, iirc, which is a fairly handy experience for running small apps over the web. If I recall, Java does the same thing. The problem then was that firefox had no way to distinguish between a version with a flaw, and a version without a flaw, so they had no choice but to temporarily blacklist it (and there was that issue with not being able to disable it due to permissions).
Browser toolbars, however, never strike me as a nice addition to a product without asking.
The update doesn't install a browser toolbar, it updates the browser toolbar for users that already have it installed. Users who haven't installed it won't see this update.
For once the Slashdot summary actually got this correct, and from the original article: "Additional testing determined that the update is only being offered to those with one of the Microsoft toolbars installed,"
Except even if the toolbar is disabled it still installs and enables the toolbar in Firefox. It also auto-enables the toolbar upon a new installation of Firefox if Firefox was not previously installed.
Additional testing determined that the update is only being offered to those with one of the Microsoft toolbars installed
Yes, but irrespective of whether it's installed for IE or Firefox. Just because I have the Live Search Toolbar installed for IE doesn't mean I want it turning up in Firefox unannounced.
no evil? how about deliberatly holding back on the browser hooks and infrastructure to allow for comprehensive robust adblock/scriptblock/etc ad-ons, due to such things being completely against their business model that is based on supplying advertisements?
I suppose that's not "evil", bit it is a pretty damn big roadblock to me adopting chrome over FF.
My friend and I played a drinking game to /. once. One person clicks on a story involving Microsoft or Apple or Linux or polotics and the other person has to take a drink for every bullsh*t post about "M$" or Apple's App Store or Android FTW and everything else completely unrelated to what the actual post is about. Let me just say, don't attempt this in the morning...
:)
ps. Slashdot community, I love you all but some days you make me pull my hair out.
I don't have no steenking Bing searchbar in my Firefox browser (no searchbars at all, in fact). The new extension did NOT show up in my Firefox addons, although I received my Windows updates yesterday.
So I'm not affected directly. But, as many others have said, I do NOT appreciate Microsoft changing ANYTHING in my computer without my specific, informed permission. Okay, they can change their own OS if necessary (since they usually accept responsibility for disasters that occur). But leave MY programs the hell alone!
Additional testing determined that the update is only being offered to those with one of the Microsoft toolbars installed
Yes, but irrespective of whether it's installed for IE or Firefox. Just because my OEM put the Live Search Toolbar on IE doesn't mean I want it turning up in Firefox unannounced.
fix'd
The stories and info posted here are artistic works of fiction and falsehood.
Only fools would take it as fact.
The more MS tries to force Bing down everyone's throats, the more determined I am to boycott Bing. It pissed me off so much the day I found that Verizon had signed a deal with MS to make Bing the exclusive (not merely default) search provider on my Blackberry. Of course, I countered by putting google at the top of my bookmarks, but really I shouldn't have to maneuver around microsoft's asshat shenanigans just to use my search provider of choice on my phone (and yes, I resent verizon for that as well).
Plus obviously one has to wonder: "If Bing is so freaking great than why is MS paying to have it force-fed all over? Like all those pop-up ads so many sites have now that resolve to Bing -- and they count those as hits for their search engine, which probably at least quadruples their numbers.
It's inconvenient to dislike MS, because they're everywhere. I'd rather be able to embrace them, I really would. But their behavior is just so objectionable in so many ways it's impossible.
Caveat Utilitor
Well, the problem is, nobody knows exactly what it is and why it's there. Given Microsoft's lousy record with internet security, what's to say they haven't inadvertently created a security loophole?
From the looks of it, they're installing toolbars into Firefox. Since they're for Bing and for Search helper, I'm sure they're directing people to their own search engine. Which means they're taking advantage of their control over the OS to meddle with my browser.
And, most importantly, they didn't ask. Since this isn't Microsoft's software, WTF are they doing jamming in add-ons without notifying the user or making it possible to delete it?? When they installed the last .NET extension to my Firefox, I can't delete it -- only Disable it. It's not up to Microsoft to "enhance" my user experience in software that isn't theirs.
Seriously, you have to ask why installing additions into other companies' software without asking the user or allowing them to delete it is just plain wrong? What next, deleting any software which competes with their own offerings?
Lost at C:>. Found at C.
So, to use a car analogy, it's like Microsoft is installing a new rooftop on their own car, and if you don't own a car from the other company they just install a new rooftop that just floats in mid-air next to your Microsoft car?
Neat!
Removing the .NET plugin:
del /q "%SystemRoot%\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll" /v {20a82645-c095-46ed-80e3-08825760534b} /f > Nul /q %SystemRoot%\System32\dllcache\*.*
reg DELETE HKLM\SOFTWARE\Mozilla\Firefox\Extensions
del
I also remove the Media player DRM plugin: /q "%ProgramFiles%\Windows Media Player\npdrmv2.dll" /q "%ProgramFiles%\Windows Media Player\npwmsdrm.dll"
del
del
Every time I start to have faith in humanity, I ruin it by driving to work between 7 and 8 am.
Dear Mozilla developers, please disable by default *all* extensions except:
The power to choose what to install in their browsers must reside only in the hands of the users.
If a vendor actively tries to circumvent this new protection mechanism, permanently blacklist ALL its extensions, plugins and whatnot. Report them to antivirus vendors as malware.
It's not the first time this happens and it actively damages users, with slower browsing experience, less screen space for actual content, huge undisclosed privacy and security breaches (you can BET they exists, even if they are not made public).
This shit has to stop.
P.S. to the users of Microsoft products: please any time you can, try to avoid this company, you're not their customer, you're their victim. There are other software vendors that respect you much more than that.
There's a hidden treasure in Python 3.x: __prepare__()
Really? I've got two add-ons with a nice shiny Uninstall button next to them that is enabled should I decide to push it. (Why I would uninstall noscript, I don't know, but it's there).
I also have Java Add-ons and .NET add-ons which have the Uninstall button disabled.
Methinks if Firefox was designed to prevent uninstalling add-ons, there would be no such button.
And, really, unless you know exactly which files to delete and if you can do it safely, deleting the files from the disk isn't really an option.
Lost at C:>. Found at C.
I doubt he'll be running MS Update on Linux :P
Because you installed the 'ubufox' package (probably by default), by chance? The package even says something about "remove this to have a vanilla firefox."
Slashdot Patriotism: We Support our Dupes!
It's more like them installing a public bathroom on the roof of your car where the plumbing consists of an open pipe directly over the driver's head.
At least that's how I view toolbars.
compare adblock in chrome to adblock in FF.
NOT the same thing. at all. chrome makes the ads not displayed (usually, sometimes it even fails at that), but they're still there in all their cpu abusing, bandwidth hogging, spyware laden goodness. hell sometimes you can still accidently click on them.
FF keeps them from loading entirely. I know that websites prefer the latter to the former, but I certainly do not.
>When you buy and/or install Windows, you explicitly (although in very small print) give Microsoft permission to do exactly this
I don't think the word 'explicitly' means what you think it means. Even more so in very small print.
Corporation, n. An ingenious device for obtaining individual profit without individual responsibility. - Ambrose Bierce
This isn't old news. This happened for me with the most recent Windows 7 update set. I was notified of the updates this week. I saw this "search enhancement" update and it appeared to only affect IE so I accepted it. Now I'm stuck with this search add-on in Firefox. I disabled it but it's not possible to uninstall it from the FF add-on GUI. Probably if I delete some folders somewhere it will disappear but googling didn't turn up much when I searched -- mostly referring to older updates that sound similar -- possibly what you're referring to as well.
So, to use a car analogy, it's like Microsoft is installing a new rooftop on their own car, and if you don't own a car from the other company they just install a new rooftop that just floats in mid-air next to your Microsoft car?
Neat!
No, not on their car, on your car that they manufactured and sold to you.
So it's more like they disconnected the brakes and replaced the pedal with a super-rocket-booster-hyper-activator overnight - without telling you. You will be pleasantly surprised at the next crossroads.
No EULA may violate the law. We already have laws expressly concerning unauthorized access of computer resources.
Their EULA is null and void in this instance. EA tried this same BS with me when I sued the crap out of them for Spore and the SecuROM DRM. That argument HELD NO WATER.
Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.