Mozilla To Enable Click-To-Play For All Firefox Plugins By Default
An anonymous reader writes "Mozilla on Tuesday announced a massive change to the way it loads third-party plugins in Firefox. The company plans to enable Click to Play for all versions of all plugins, except the latest release of Flash. This essentially means Firefox will soon only load third-party plugins when users click to interact with the plugin. Currently, Firefox automatically loads any plugin requested by a website, unless Mozilla has blocked it for security reasons (such as for old versions of Java, Silverlight, and Flash)."
Hopefully this speeds up Firefox considerably. I stopped using it because it was so much slower than Chrome at some basic tasks. But considering Chrome is incredibly unstable on Windows 8, I'm willing to give Firefox another chance.
Occasionally living proof of the Ballmer peak.
Subject says it all... why enable flash by default? Even if it didn't have any security holes, it's still the great battery eater...
I apologize for the lack of a signature.
I found it Reading the Fucking Article:
Emphasis mine.
"Follow the money." That's a reason I can understand.
Makes me glad I usually run with Adblock and NoScript.
Welcome to the Panopticon. Used to be a prison, now it's your home.
My favourite browser in terms of usability/interface/features(even when i don't use most of them) has had this for quite a while, its wonderfull to avoid those annoying flash add's with sound. Also when combined with the option of blocking every pop-up window by default and display just a warning on the down right corner allowing the user to load/open it, is another basic, yet great advertising blocker for whom do not wish to use other complex tools.
this will prevent annoying music from automatically be played.
While we as technical users might enjoy a plugin-free experience with no extra clicking involved, the average Joe User is going to be pissed off.
I run with NoScript - does pretty much what Mozilla wants to do (plus script blocking), except without the big gray box. The average user is not interested in NoScript type functionality - they want a rich web experience out of the box, and if that includes Flash, PDF files, and audio, then that's what they want.
I suspect the reason Flash is turned on isn't because of ads - it's because there are a number of high profile corporate websites out there that become unusable if Flash isn't enabled.
Let us live so that when we come to die, even the undertaker will be sorry -- Mark Twain
What will I do with the excess memory if plugin-container.exe doesn't get out of hand anymore? Or perhaps we'll see a new big process: plugin-container-container
I used to enable it by default, however, since I have started using things like listening to clips on the Android Market (Music section), if its enabled, there is no actual object to "click to enable", so as long as they have a good whitelist system, I can see this as being a very good thing,
However, the Android Market music store area isn't the only area where no actual object(s) exist in order to "click to play", so I can see forum's and buglists being bombed with user complaints when they find a site they use isnt working properly and it is in IE or Chrome or whatever browser they use.
I love it, but it needs a control feature or some way to detect things like the Android Market music store area in order to fix issues like the ones I am listing here.
It's called NoScript. Everything is blacklisted by default and yet just a single click away.
Agreed, the really only reason to use the memory hog firefox is for the sweet plugin firebug.
Some people die at 25 and aren't buried until 75. -Benjamin Franklin
The features tacked onto HTML5 like <audio> and <script> aren't considered a plugin, thus writing your animation w/ sound in it would seem to bypass the new default click-to-play. Ah, but it doesn't matter anyway since they're not making Flash click-to-play. So either this will make annoying BS more difficult to block without breaking the site, or it stengthens Flash in opposition to HTML5. Now browsers will be even less usable without NoScript and AdBlock.
Either way you look at it HTML5 is dead to me; It's been 13 years (half the age of the Web) and we're still stuck on HTML 4.01... Time to give up folks, HTML6 won't arrive before the Singularity. The Web even tanks as a cross platform dev platform -- I can make pixel perfect feature rich cross-platform native application for Linux, Win, BSD, OSX, Android, iOS in 1/3rd the time it takes me to ensure the same "web app" works in all the browsers and OSs. It was a bad idea to begin with -- Hack together the most inefficient scripting language and a stateless static document display engine to create stateful internet enabled applications (Every damn site is a stateful application now). HTML is ugly, and pointless. Long live the Internet, but Fuck The Web.
[quote]Firefox will soon only load third-party plugins when users click to interact with the plugin[/quote]
So we'll have to click on ads, before Adblock can block them?
Flashblock is the one plugin running on every one of my browsers.
This will surely work.
It's not like there's ever been a vulnerability with Flash.
It'll be perfectly safe.
=/
In it's "only on demand" option, by site no less, for preferences via Tools menu, Preferences, Advanced tab in the popup window screen, Content tree item...
* :)
APK
P.S.=> Just like with tabbed browsing, opera had it BEFORE FF did...
... apk
Type about:config in the Firefox address bar, search for plugins.click_to_play and double-click the entry to toggle it to true.
This should prevent all plugins from loading until clicked on.
(Read about Finfisher and Flashback trojan at Wikipedia, great shame on you Apple!)
This will make pr0n sites useless without the animated thumbnails.
But maybe that's a good thing.
I'll see your senator, and I'll raise you two judges.
Chrome is really fast. It does stand out when you use it, even if I prefer to use Firefox.
I use both daily and frankly can't really see any speed difference for anything I need to do. While there probably are some differences I'm usually more limited by the speed of my connection to the ISP than anything else.
http://developers.slashdot.org/comments.pl?sid=3417739&cid=42729485
* Been that way, for YEARS now too... & just like with tabbed browsing? Opera had it before FF, as usual!
APK
P.S.=> The "by site preferences" I noted there also help it function a LOT like NoScript (by setting a "GLOBAL POLICY" 1st, as the default, & ONLY activating scripts, plugins, cookies, frames/iframes (all potential avenues of attack & such), as needed & yes - on a "demand only" basis too))...
... apk
If Click-to-play was enabled on all browsers for all plugins there would be less tendency to use useless plugins to make a website pretty.
It's not like Flash is security-bug-free. You could also use a flash plugin to store a flash based cookie if the browsers privacy settings don't accept your traditional tracking cookie...
https://extensions.gnome.org/ is incompatible with Click-To-Play. It took me quite some time to figure that out. The error message was incredibly vague. Can we make an exception so that other Gnome / Firefox users won't have the same problem?
See https://bugzilla.gnome.org/show_bug.cgi?id=686038.
This isn't a really good idea for a company running multiple workstations... it interferes with normal everyday usage (and already has been), which is resulting in having to consider dropping Firefox from our approved program list. Alas.
It seriously ROCKS (especially since they got rid of the 12.12 memory leak & lag on scrolling + backspacing (was used to kill a security bug though, that I *believe* may still affect OTHER browsers too - they finally got that right & faster/smooth too!)).
http://my.opera.com/desktopteam/blog/
* Trust me, you'll love it too.... I do!
(Agreed, 110% with your sentiments too - Opera is, as I have called it here before? "The SUPERIOR WARRIOR" in the way of webbrowsers!)
APK
P.S.=> That RC though - Unbelievable quality, speed, security & more (from a RC too, surprising)...
... apk
I can make pixel perfect feature rich cross-platform native application for Linux, Win, BSD, OSX, Android, iOS in 1/3rd the time it takes me to ensure the same "web app" works in all the browsers and OSs.
I want whatever development tool chain you're using. Just dealing with the different installer mechanisms on those platforms makes my head spin. What's your secret?
is that Eolas won in the end? LOL
It doesn't mean much now, it's built for the future.
Those are usually JS-powered and don't require flash...they guzzle bandwidth like a data-hungry slut who needs money for college books though.
Will this allow me to whitelist a particular domain/site?
It sounds like a great feature (one I already have with existing addons), but only if you can whitelist domains that you trust and not otherwise have to click-to-allow every time.
With that in mind, a blacklist for evil domains (like doubleclick) would be nice too. Especially if one could import it from a master file.
And this is why I switched to SeaMonkey :-)
I had that turned on - but since click2play in firefox reqires (required?) the element to be visible, a few sites broke without any warning. For instance, the Garmin Communicator plugin I use to upload training sessions from my GPS running watch doesn't have any visible UI widgets.
Coffee-driven development.
n/t
So how long have you been typing up spam emails for a living?
about:config
plugins.click_to_play true
You meant the guy shilling AdBlock. It's clearly inferior to hosts! The post you replied to shows AdBlock is way inferior to custom hosts files on many levels -> http://developers.slashdot.org/comments.pl?sid=3417739&cid=42729733
He's using a program called Handwave
I don't see the difference in this and using noscript. Oh wait there is one good difference, noscript will also stop the Adobe flash player. So in this case noscript is much, much better. I hate the annoying play music, roam around my screen ads.
I can make pixel perfect feature rich cross-platform native application for Linux, Win, BSD, OSX, Android, iOS in 1/3rd the time
Dude, seriously, I NEED to know what you're using to accomplish this. Please -- can anyone tell me how to do this?
I wonder how much money they were offered to leave Flash as an auto-playing plugin? And by whom - ad networks, Adobe itself, or maybe a shady lobbying group that's a little from column A and a little from column B?
Shame on you Mozilla Foundation.
Now that plugins will be click-to-play by default and I block scripted ads already using Adblock Plus.
As for scripting in general, I use an extension to control the Content Security Policy per site
Have you tried different profiles? Mind you I'm running an older version of Firefox, but I've setup several profiles (and even under different Linux usernames) for websites that need special settings. So regular browsing is the default profile with NoScript, FlashBlock, etc. A different profile for YouTube and Flash game sites, another one for websites that need Java, etc. You can setup a profile for just the Gamin Communicator plugin, and enable click2play on all other profiles.
I suggested it to SanityInAnarchy years ago here (& iirc, he's a chrome fan, if not dev for them too, iirc) -> http://it.slashdot.org/comments.pl?sid=2282088&cid=36680246
* Had to make that point is all, because just like with tabbed browsing? Opera's the "browser built for surfers BY websurfers"...
APK
P.S.=> Not "knocking" Chrome, it's VERY fast (or FF either, it's good stuff) - they're ALL good nowadays, + getting better too! Yes - & even IE10 (just not as good as Opera)...
... apk
You're STILL outnumbered (& outthought), by a 242++:1 ratio http://developers.slashdot.org/comments.pl?sid=3417739&cid=42729941
* :)
"Si vas pacem parabellum!"
(Sorry troll - you FAIL!)
APK
P.S.=> As the roman general said? "IF YOU WANT PEACE, PREPARE FOR WAR!" & me? I'm always prepared & ready for "troll assaults", lol!
Since that's what that list of mine is (thank you /.'ers for the upmods I guess) vs. comments like yours, troll - especially vs. profanity spewing off-topic trolls!
... apk
Finally...
But why is Flash allowed without a click?!?
Firefox with Adblock and Noscript. No Flash or java installed on the OS. Chrome (with its built-in flash) for Youtube and the handful of sites I visit that require flash. leave FF running for weeks, never uses more than 300 meg. With this approach I no longer have any stability issues. The only downside is my kids bitching about not being able to play Minecraft. Oh the pain!
Remember back when the EOLAS patent was being waved about and it was suggested that browser makers may have to implement "click to play" to avoid it.
Strange that a year after EOLAS gets their arse handed to them in a Texas court we get to a similar place for entirely different reasons.
Boffoonery - downloadable Comedy Benefit for Bletchley Park
Java .jar files with AWT, of course!
Hopefully there will be some way to enable silverlight automatically without clicking, otherwise Netflix on a PC is going to suck even worse...
Regards,
-Jeremy
Indeed. The web should have been low level virtual machine combined with low level (opengl) graphics.
Instead, they (w3c or whoever) decided that the web should be programmable by novices, so they made HTML and it sucked for real software engineers.
If Pandora's box is destined to be opened, *I* want to be the one to open it.
Someone's afraid of the post on hosts files here http://developers.slashdot.org/comments.pl?sid=3417739&cid=42729733 since all they had was a downmod to try to hide it from view. Good read. Very informative and shows how/when/where/why hosts files are superior to adblock on many levels including ability and benefits.
Hopefully this will mean a complete rewrite of their click-to-play setup, including fixing this incredibly annoying misfeature of Firefox 19:
http://forums.mozillazine.org/viewtopic.php?f=38&t=2644157
https://bugzilla.mozilla.org/show_bug.cgi?id=820678
As far as I can tell, this whole aspect of firefox was never designed properly. It grew into an unmaintainable mess, and now they're having a hard time finding their way out.
Find free books.
Is out, just relieased (speak of the devil, right?) -> http://www.start64.com/index.php?option=com_content&view=article&id=5788:opera-64-bit-version&catid=25:64bit-internet-software&Itemid=75
* BOTH the 32-bit & 64-bit versions are SMALLER than RC1 & RC2 (meaning they did their FINAL optimization & pulled the debug code I'd wager & that = YET MORE SPEED!)
I was ALREADY impressed by the Release Candidates (way, Way, WAY so vs. 12.12 which had the problem I noted... not anymore, & this means good news!) :)
(ENJOY!)
APK
P.S.=> Just thought I'd drop you a line here, & let you know is all, since we're both Opera 'fans' & "great minds think alike", lol...
... apk
The ability for websites to activate plug-ins has been a security issue for a long time.
You should be able to add that particular site the the click2play whitelist, then flash will be run automatically, just for that site (and any others you have added to the whitelist), bit of a pain, but you only have to do it once.
www.Buy-Proxy.com - A "buyer-driven" global marketplace.