Slashdot Mirror
Microsoft Explains Mystery Firefox Extension
Ricky writes with a followup to news we discussed a couple days ago that a Microsoft toolbar update was installing an IE add-on and a Firefox extension without the user's consent. Quoting Ars:
"Microsoft has fixed the distribution scope of a toolbar update that, without the user's knowledge, installed an add-on in Internet Explorer and an extension in Firefox called Search Helper Extension. Microsoft told us that the new update is actually the same as the old one; the only difference is the distribution settings. In other words, the update will no longer be distributed to toolbars that it shouldn't be added to. End users won't see the tweak, Microsoft told Ars, and also offered an explanation on what the mystery add-on actually does. 'The Search Enhancement Pack is a shared component used by the Windows Live Toolbar, MSN Toolbar, and Bing Bar. This component enables toolbar search functionality, like the toolbar search suggestions drop down. It is not the toolbar. It is a component used by the toolbars.'"
(looking perplexed)
I still don't understand why it was added to Firefox when I'm not using MSN, Bing, or any other crap
.
"I disapprove of what you say, but I will defend to the death your right to say it." - historian Evelyn Beatrice Hall
The Search Enhancement Pack is a shared component used by the Windows Live Toolbar, MSN Toolbar, and Bing Bar. This component enables toolbar search functionality, like the toolbar search suggestions drop down. It is not the toolbar. It is a component used by the toolbars.
And this explains why it was silently added to Firefox how? Wouldn't the reasonable way of accomplishing this be to download the pack with the extensions in question?
The truth may be out there, but lies are inside your head
It's a dubious answer. Why would this "shared component" of the MS toolbars be installed SEPARATELY from the toolbars themselves?
Do it have any effect on systems that don't have MS toolbars?
Is this update going to remove this "shared component" where the MS toolbars aren't present? In other words, is it going to fix what it broke, or
is it just not going to break any more systems?
This seems like one of those mistakes that work to their benefit since it's safe to assume that unless is removes itself or doesn't have any effect
it will work to their benefit -- most users it effects aren't going to know about it or do anything about it.
Why must constant vigilance be required? There need to be fines against companies who install software without consent. It doesn't matter who you are, it should be an illegal act.
------ The best brain training is now totally free : )
No excuse, no sir. And here i was foolishly thinking they would make a public apology.
I remember when this happened with some Silverlight thing in the past, but I can't remember what the reason was the Mozilla devs gave for allowing this type of silent local add on installation.
Found an old bugzilla debate/bug from 2009 (!) about when this happened previously. It seems some consider it a moot point because Firefox reports add-ons have been installed when it boots. Did this MS update get around that somehow?
Here's the link: https://bugzilla.mozilla.org/show_bug.cgi?id=476430
And the old story from the last time MS did this: http://voices.washingtonpost.com/securityfix/2009/06/microsoft_patch_to_fix_firefox.html
meep
That will happen when you vote for it, with your dollars.
MS will get the message when Windows sales drop because nobody buys their bullshit anymore... looks at MS sales figures... not yet it seems.
Customer: I demand you do what I say or else I will continue to buy your products like the sheep I am.
Company: Oh look, a talking sheep. Anyone want shiskebab? Dibs on the eyeballs.
MMO Quests are like orgasms:
You may solo them, I prefer them in a group.
I was only able to uninstall this unwelcome extension by thinking in Russian.
with its updates to its oses.
werent they recently bitchslapped by Eu for doing the very same thing, bundling and pushing their internet browser for decades to unsuspecting users ?
corporations never learn. apparently it will be up to Eu again to bitchslap them for the sake of justice.
Read radical news here
"This isn't the extension you're looking for."
Nothing was said about silently installing an extension to Firefox being completely wrong. No mention that it won't happen again. They've just about publicly admitting that they see nothing wrong with secretly installing changes to other companies software without need, notice, justification or a way to remove it.
Fuck Microsoft. Everybody who had this happened needs to file a complaint with the police under the hacking laws, installing unauthorized modifications to software of a competitor without permission is illegal, it doesn't matter if Microsoft does it, it's still illegal. Here in Kentucky, it's either a class A or B misdemeanor, depending on whether your time undoing it can be considered monetary damage.
Also, we only have Microsoft's word that it just affects search results in their toolbar. For all we know it's logging credit card numbers, recording your webcam, and copying your personal information and contents of your c:/porn folder for public display/blackmail later. They probably aren't, but then again, what have they done that's trustworthy lately?
"WGA thinks your copy of XP is unauthorized because you added memory and a graphics card. Your credit card has been charged $399.99 for a license."
This sentence no verb.
Didn't they do a similar thing with a .net addon?
Oh yes, they did.
If Microsoft wants to make an addon, update, toolbar, or any other damned thing for Firefox, they should submit it through proper channels. If it's alright for them to make updates to Firefox, then it's equally alright for Jumpin' Jack Haxor Flash to start distributing updates for Windows.
"Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
...why they keep saying this things weeks after the problem arose.
i mean, if you tell me something a day or two after the problem was found, i can take it as explaining/apology, but weeks after?
It still looks as an excuse even through it probably isn't.
Way to go MS. I guess you got jealous that Apple is hogging all the bad press, so you had to do something to prove you're still the original evil company.
I'm much more funny, interesting and insightful than the moderators think
SUCKS i tell ya its awful
im now using chrome
its that bad
No toolbars installed == no MS update. I don't even use Google's toolbar -- and I more-or-less trust them (at least more than M$, anyway).
Paleotechnologist and connoisseur of pretty shiny things.
What cruft! The number one reason why I am boycotting Microsoft and Apple is that they seem to think that they own my computing and communication devices and can install anything they want on them without my explicit permission. To heck with that! When are these pinheads going to get with the program, that doing so compromises the integrity and security of our systems and personal or proprietary information. I can accept auto-updates of already installed components, provided I opt-in to that, but if they are going to install ANY new components for whatever reason, I want to know what and why as well as what the possible side-effects of it may be to the operation and integrity of my system.
So, I have totally migrated to Linux on my workstations, laptops, and mobile devices. I run Windows XP SP2 in a virtual machine solely to run one stock/options trading application that isn't available for Linux and incapable of running with Wine. I don't update it except infrequently, and then only manually. In any event, there could conceivably be made a case that Microsoft has violated any number of laws related to installation or operation of unauthorized software on a system that you do not own (hacking). That is a criminal offense, and should be treated as such. Fines should be levied and penalties should apply... That's how angry I am about this sort of behavior.
Sometimes, real fast is almost as good as real-time.
Another reason to keep your automatic updates DISABLED.
Enable the "Uninstall" button on your POS plugin instead of you usual Imperial and intrusive Uncle Fester.
"the update will no longer be distributed "
The "oh we won't do that anymore" response is bullcrap. The fact that they _were_ doing it in the first place speaks volumes about how MS conducts business, and they never stop trying to pull these stunts. Do they honestly believe that people aren't watching them closely and that they won't get caught? I don't care _what_ the update is, there is no excuse for trying to sneak it past users. And somewhere in these comments, I will read some M$ defender's assertion that /. bashes M$ just for the sake of bashing M$. But given their track record --over the past 14 years that I've been paying close attention-- of these incessant games, how am I supposed to take them seriously? No company is perfect, but M$ is --and always was-- out of control with this type of garbage. I think I just answered my own question: they'll always be this way; I will never take them seriously [throws chair across the room in digust, realizes that this is how the dark side reacts. Doh!]
Bah! Not welcome! Why is the uninstall button broken for this extension Microsoft?
# ~: no sigs today
I just checked and there's about as many plugins labelled 'Google" as there are "Microsoft'. I don't recall installing any of them.
But still...this is a a Microsoft bashing board, right?
No sig today...
People are still foolish enough to add them? Wow, I thought they were all mal ware just like all pop ups. Who has time to check which ones aren't?
Professional Politicians are not the solution, they ARE the problem.
Microsoft has always been under the false impression that just because "Microsoft explains" a bad deed, that the deed suddenly becomes OK.
I guess they saw that it worked for Apple too push their new software as an update (Safari) and are hoping to take some market share for Bing that way
... Steve Jobs is very sad because his brand-new Safari was forgotten by Microsoft.
I love firefox, but for the love of everything , *WHY* not make easy from the program itself to disable *ANY* extension load, even if the extension itself remove way to uninstall itself ??? ?
M$ still thinks that they own every PC in the world. It doesn't matter if it even runs Windows or not. They've demonstrated this time and time again. Anyone remember the Suse linux controversy a couple years back? They still haven't gotten the idea through their corporate heads that the end user has a choice now on what to do with their system. Lets say you buy a computer with windows pre-installed. They pretty much say now that by even opening the box you agree to their EULA. Even if the first time you boot is solely to pop open the DVD drive to put in a Linux install CD. Last comp i bought didn't even have a initial "You officially sign your life and your computer over to us" dialog come up. And you know how they supposedly give refunds on the windows tax to ppl who never use it. Good luck on that one. M$ is still the same bully they always were, they just try to put a nice face on it from time to time.
If i ever get a chance to interview an M$ executive, I'm going to ask if they feel that they have any rights to a comp that was built by me from parts, and had slackware installed as the only OS from the beginning. I think their response would show everyone exactly how they feel. Hell, anything other than a straight "No" would show their true colors.
It's not "without consent." You consent to it by using Windows Update. Don't use Windows Update if you don't want Microsoft installing stuff on your computer.
"Oh but wate, whinge, whinge. Microsoft is making changes to other non-MS software. That's BAAAD."
Sure. That means Microsoft shouldn't deactivate viruses or malware either? Or other programs which inadvertently cause damage to the OS by accident? Microsoft should just do nothing about that and won't be blamed for sitting back and letting some other program hose your setup? Yes I know FF isn't malware but the point is that there isn't really a well-defined way to say "Microsoft should under no circumstances do X with an update, but should make sure to protect me from all harm."
I'll admit Microsoft made a mistake, because I'm not a raving fanboy. But as far as mistakes go, I think this was an honest one and not really of major consequence. It wasn't the end of the world, and it has been easily remedied. Lighten up, Linux/Apple worshippers.
They can't do that. The uninstall button being disabled is a design decision by Mozilla. Go bitch to them about it.
For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
Has anyone tried to remove this crap from Firefox? All I can do is disable it.