Firefox 17 Launches With Click-to-Play Plugin Blocks
An anonymous reader writes "As expected, Mozilla on Tuesday officially launched Firefox 17 for Windows, Mac, and Linux. The biggest addition in this release is click-to-play plugins, announced back in October. In short, the addition means Mozilla will now prompt Firefox users on Windows with old versions of Adobe Reader, Adobe Flash, and Microsoft Silverlight (more will be added eventually)."
The release notes are available, as is a list of changes for devs. Firefox for Android got a new release as well (notes).
Apparently they have it in nightly builds now, but it hasn't trickled down to the main release channel quite yet. Bummer.
Warning: Contents May Be Flammable. Keep Out Of Reach Of Children.
I've ran the numbers through our compute cluster here at JPL and have determined that Firefox version numbers are on an exponential climb and will reach critical mass and achieve self awareness around the 20th or 21st of December THIS YEAR with the creation of a singularity on the entire planet's web browser population.
The Mayans knew... the Mayans knew...
Yay, now we have Firefox 20.0a1!
The answer: some bugs seem to be fixed TWICE:
.. in both versions. ( 3d randomly picked number from version 17.0 )
http://www.mozilla.org/en-US/firefox/17.0/releasenotes/buglist.html
http://www.mozilla.org/en-US/firefox/16.0/releasenotes/buglist.html
there as it at least one bug ( 786386 ) which has been fixed
As always, Opera did it first.
I believe the reason is that work actually starts on 17 around the time of 15. There's always three versions being developed in parallel, each one a few weeks ahead of each other. So a bug fix may get into all currently developed versions.
about time. this has always been a serious security issue
true, it may be just that, i uniq-ed them and it's only 206 duplicated fixes ( out of about ~2200 per version ) so that accounts to less than 10% ( per version )
When I read the headline, "Click-to-Play Plugin Blocks", I was thinking that plugin content would be blocked from doing anything unless the user clicks a play button. Just like FlashBlock, in other words. That would actually be a good thing. A good change, in a new version of Firefox: I might've fainted.
But no, what it actually means is this:
> Mozilla will now prompt Firefox users on Windows with old versions of Adobe Reader...
Oh, yes, please.
We need this because Adobe Reader doesn't already prompt every single user who has it installed to the effect that they need to upgrade it, a bare minimum of three per hour. We definitely need our web browser to bug us about this also, otherwise we might not know that three new versions of Adobe Reader were released during the time it took us to download and install the version we currently have. Well, I mean, okay, in theory we'd _know_, but without this extra reminder we might occasionally go up to fifteen minutes at a time without _thinking_ about it. Mozilla must protect us from that horrific fate.
Cut that out, or I will ship you to Norilsk in a box.
which should release in about 3... 2... 1...
Is it faster now? It's the only browser where you can feel a delay when you change tabs..
Be or ben't
ESR 17.0 is also available for download (as is ESR 10.0.11), but the autmatic update mechanism is not offering it as an option (at least not yet), only 10.0.11.
I guess they will let the Quality testing phase to be completed before offering it as an automatic update
*** Suerte a todos y Feliz dia!
Now That's Gangsta.
Yeah, that's stupid. When I saw "click to play" I was thinking something more about what you said, especially since Opera already has this integrated.
What I find more fascinating in TFA is that Firefox has added simple support for HTML5 Sandboxes. You can apparently specify whether the data inside the IFRAME is allowed to access outside domains, etc. (if I am reading it correctly; I am not actively involved in web design at the moment and so am a bit behind the curve; does anyone know how good this sandbox function is compared to other software/browsers?).
It means they can now kill off Flash and promote their one world domination via HTML5. HTML5 has always been the goal of Mozilla, they don't care about the users they only want their dream to come true.
And I WANT the older versions of Reader. The new Acrobat Reader version are complete crap.
Notice that Firefox 17 is also an Extended Support Release, so if you are a fan of a more conservative update cycle, now is a good time to hop on the wagon.
Mozilla Firefox ESR Overview
"In short, the addition means Mozilla will now prompt Firefox users on Windows with old versions of Adobe Reader, Adobe Flash, and Microsoft Silverlight (more will be added eventually)."
Prompt them for/to do what?
I thought from the description that this would require clicking *all* Flash, Java or other plug-in applets before they would run. That would be true security (until the dumb masses find and click one they shouldn't). I thought this would be a relief for when I'm using a fresh copy of Firefox; I could possibly go a bit longer before installing Adblock, NoScript and the rest. But no... it only blocks this crap from loading without a click when an "old" version of a plug-in is used. Yay. Talk about pointless. So, AdBlock and NoScript still do it better, and this is no temporary holdover until the real plug-in can be installed.
Actually, this is possibly even worse. Once people find out that they can "block" annoying moving Flash ads that have sound by simply keeping their plug-ins out of date, they'll probably never want to update again. I know I wouldn't. So then when they do click to run a bad applet, they really are screwed.
No, click-to-play does what you think it does. Like FlashBlock. The Acrobat Reader prompts are an additional feature.
No more of this Mac OS X version: https://blog.mozilla.org/futurereleases/2012/10/04/we-bid-you-adieu-spotted-cat/ ...
Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
It supports both, the behaviour is configurable.
New things are always on the horizon
There are OTHER pdf readers, most of then with plugin support ... no need to use a buggy and insecure acrobat reader
Higuita
There's no way that can be right!
Except that I think reader 7 & 8 have the best UI, for things like search, moving forward and back in history, etc. All others I have tried are clumsy. I use Preview on my Mac at work but am not at all happy with it.
The whole thing is stupid because no one ever should have added the possibility of malware in a read-only non-executable format! What next, RTF viruses? Well, I guess I thought the same way about HTML and didn't think anyone would be stupid enough to add features to it to make it dangerous.
Having used all major browser i agree.
for browsing 2-3 pages, chrome is good, startup fast, but start to load more tabs, demand more from it and you will see the cpu and specially the ram going up.
During the last year and half, firefox manage to rebuild its memory usage and today have the best long term memory usage of all.
Higuita
Estonian TXT viruses. That politely ask you to forward it to all your contacts and then delete your hard drive contents.
As a web developer, I would love to see FF support WebP. As an end user, I wish the UI was responsive and it took advantage of more than 1 of the cores in my multi-core CPU. Do they even make single-core CPUs anymore?
To enable click-to-play for all plugins go to about:config in the location bar and set “plugins.click_to_play” to true.
The feature is considered still under development which is why it's not enabled by default.
The Nightlies are now at Version 20, and since Firefox 4 with their much vaunted hardware acceleration that doesn't really exist, and frankly I am getting really annoyed at how horrible performance is compared to every other browser on my system, and about:support states it's not using any hardware acceleration, it
Every single browser on my system can render webpages over 30 times faster than firefox, it's just plain ridiculous; Opera, Konqueror(!), rekonq, luakit, chrome, you name it.
And if you think I'm being unreasonable, Go ask Doxygen to generate some interactive graphs, or go play with one in the "Network" tab of a random github project. They don't even update once a second in firefox yet everything else sports very smooth motion!
Acrobat (aka "reader") nags the shit out of me to the point where its in my better interest to just the fucker off, then nothing gets updated until the next reinstall, which is a good way to encourage updating
Hey, PDF Reader, you're fat! And you smell bad. There. That should make it a bit more insecure.
Considering that there is at least one exploitable vulnerability per month in Adobe plugins and the number of computers getting pwned through that vector, this is still a good thing... even if it is not as useful as something like flashblock or noscript. Can't have the user in control over their own experience now can we? External entities should be in control.
Noscript for the win.
"Someone needs to talk to the tree of liberty about its ghoulish drinking problem." by ohnocitizen
RTF viruses? Ummm, yes, I think? See: "A new Trojan variant, detected as Backdoor.Makadocs and spread via RTF and Microsoft Word document marked as Trojan.Dropper"
You know, I don't understand it.
Every company bitches to high heaven about updating constantly, every piece of software does daily update checks, sometimes with a background process, and you get a billion prompts a day to update. How is it possible to even run old software unless people go out of their way to disable the idiotic, intrusive update messag...
Never mind.
It's been out, at least since FF 16, not sure if before
Firefox 17 is unusable for me - the font rendering appear broken on non-ClearType enabled systems and my Bookmark Bar links no longer loads things when I click them?! (I have it placed on my Navigation Bar). Broken beyond use for me: I have just installed latest Pale Moon release instead and migrated my profile, apart from a bit of tweaking of the status bar everything works fine for me. The point that Pale Moon is allegedly faster than stock FF releases rendering wise is secondary to me but quite nice to know (ah, the joy of placebo).
My main objection to HTML5 is that it is a step back toward the bad old days of HTML4 when parsing the markup was a royal pain in the hind end. XHTML's concept of well-formedness is so immensely useful, I cannot imagine anyone who understands the implications ever wanting to go back to the horrible morass of SGML-based markup. XML-based markup is so much easier to manage, both for the content creator (e.g., web developers) and also for software developers (browsers, editors, server-side stuff, indexers, anything that works with markup).
I have no intrinsic objection to killing off Flash, although I also wouldn't mind having a nickel for every technology that has been promoted with the claim that it would do so. I could sort of understand how someone *might* think Silverlight would kill off Flash, if said someone did not understand about backward compatibility. (Hint: why didn't Itanium kill off 32-bit processors?) I do not, however, understand how anyone could suppose that HTML5 could kill off flash.
Cut that out, or I will ship you to Norilsk in a box.