The Active Network
ActiveWin Anonymous | Create a User | Reviews | News | Forums | Advertise | VBA in Excel | Users Online: 0  
 

neowin.net

Amazon.com

  *  

  Sneaky Microsoft plug-in puts Firefox users at risk
Time: 06:40 EST/11:40 GMT | News Source: ComputerWorld | Posted By: Kenneth van Surksum

An add-on that Microsoft silently slipped into Mozilla's Firefox last February leaves that browser open to attack, Microsoft's security engineers acknowledged earlier this week.

Read Only Comments
Return to News
  Displaying Comments 1 through 9 of 9
  This is an archived static copy of ActiveWin.com.
#1 By 15406 (216.191.227.68) at Friday, October 16, 2009 08:05:47 AM
<shrugs> Really, I expect no less from Microsoft. It takes a classy, upstanding, security-conscious company like MS to silently install an "own your box" attack vector into a competitor's browser. Sounds to me like it meets all of the criteria to be classified as malware.

#2 By 89249 (64.207.240.90) at Friday, October 16, 2009 09:09:58 AM
Yea that's a decent blackeye trying to provide WPF functionality into FireFox.

Doesn't really bother me that they installed it considering it is part of the .net framework but they should allow users to disable it through the normal methods. If anything that's about the only thing that would put it in the "malware" class of software. I'm still needing to validate the "can't use the disable or uninstall" buttons on an xp machine. I can use it on my Vista box just fine.

#3 By 16797 (65.93.25.7) at Friday, October 16, 2009 09:21:18 AM
Sun's Java does it too.. like 3 plugins installed there in Firefox, I don't remember being asked about any of them explicitly. Chrome installs that "GoogleUpdate" service and also silently adds itself to scheduled tasks (runs daily)..


It's probably covered somewhere in those agreements when you click I Agree.. ;-)

#4 By 89249 (64.207.240.90) at Friday, October 16, 2009 09:29:44 AM
#3 kinda how I'm looking at it.

#5 By 15406 (216.191.227.68) at Friday, October 16, 2009 09:35:14 AM
#2: The initial release of the .NET Framework Assistant did not let you uninstall or disable it, but after people yelled MS changed it to allow you to get rid of it.

#3: Which Java plugins do you have? I've got the Java Quick Starter 1.0 and that's it. Do you have the JDK installed?

Nobody should install anything on your system without your explicit permission, and there should not be any implied consent buried on page 12 of a EULA. It's all about respecting the user and letting the user determine what's best for their computer.


This post was edited by Latch on Friday, October 16, 2009 at 09:39.

#6 By 23275 (68.117.163.128) at Friday, October 16, 2009 10:03:35 AM
"Nobody should install anything on your system without your explicit permission, and there should not be any implied consent buried on page 12 of a EULA. It's all about respecting the user and letting the user determine what's best for their computer."

Agreed 100%

I'd like to see all companies apologize for this and then release a means to manage such things easily. I don't think any of them intend to do harm, but all of them need to step up and do what is right.

#7 By 23443 (169.200.80.16) at Friday, October 16, 2009 10:33:00 AM
After reading #5 and #6, I'm waiting for the impending appocalypse. :) latch and lketchum agree with each other on something.

TD

#8 By 23275 (68.117.163.128) at Friday, October 16, 2009 10:58:57 AM
When Latch is right about something, or his perspective is based upon substance, I will say so.

I do not recall the same consideration being offered in return - so I reason the world is safe and we needn't fear the Apocolypse just yet.

#9 By 15406 (216.191.227.68) at Friday, October 16, 2009 12:29:05 PM
#7: While Ketchum and I have differing political views, world views and opinions on Microsoft, I believe that we agree on a lot of larger computer issues.

#8: The reason I support you so infrequently is because the majority of your posts are either a) pro-MS opinion, or b) deep technical descriptions of MS technology I have no experience with. If you had posted what I said in #5 before me, I would have agreed with you.



 

  *  
  *   *
 
replica watches