Windows Update Installs Firefox Add-on

[RobMunfy]

http://voices.washingtonpost.com/securityfix/2009/05/microsoft_update_quietly_insta.html

Apparently, the .NET update automatically installs its own Firefox add-on that is difficult -- if not dangerous -- to remove, once installed.

I find it quite interesting that Microsoft would go and create an add-on for someone else's browser.

I assume they must have got permission from Mozilla?

Thoughts?

P.S: Sorry if its a repost/old news!

 

[Ucof]

I just read about this on the Register.

http://www.theregister.co.uk/2009/06/01/ms_firefox_extension_row/

 

[Happy]

I just clicked uninstall on Windows 7 and it uninstalled fine.

 

[Mayhem]

It does seem very strange. What does it actually do? Is it necessary for any webpages?

 

[Deathwish]

Why would MS need to get Mozillas permission? Surely all the other extension makers don't need to.

 

[RobMunfy]

Why would MS need to get Mozillas permission? Surely all the other extension makers don't need to.

Yeah I suppose, although it does seem a bit sneaky doing it automatically, behind our backs.

I just clicked uninstall on Windows 7 and it uninstalled fine.

The Uninstall button is greyed out for me on Vista x64

 

[Mattus]

I have version 1.0 of that extension and the uninstall button is grayed out. I've seen version 1.1, which seems to allow an uninstall.

 

[Qdos]

You need to update your .net framework to the latest version - that will give you the option to uninstall the addon. It's a bit sneaky really, they don't tell you when you download the .net framework that you're getting the addon as well.

The whole point of Firefox is that you distance your browser from web-side executable code - having this means you're more insecure (should a vulnerability be found, which is more than likely)

 

[eXor]

Lol Microsoft.

 

[Mattus]

I've deleted it. I didn't ask for it to be installed and I don't want it. Only I decide which extensions I run.

 

[eXor]

I've deleted it. I didn't ask for it to be installed and I don't want it. Only I decide which extensions I run.

Is your user agent string now clean?

Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.0.10) Gecko/2009042316 Firefox/3.0.10 (.NET CLR 3.5.30729)

 

[Mattus]

Is your user agent string now clean?

Yep, I followed the instructions in that link to reset it.

Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.1b4) Gecko/20090423 Firefox/3.5b4

 

[tolien]

It seems to not be interested in nightlies though.

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2a1pre) Gecko/20090601 Minefield/3.6a1pre ID:20090601041706

 

[Solaris]

You run minefield? Brave soul... I used to and it crashes constantly...

 

[Mattus]

Depends... nature of nightlies is that some of them are pretty stable and some of them crash every 10 seconds. Someone's gotta test them though!

 

[theheyes]

This is why you should only install software from trusted sourc.... oh wait.

 

[tolien]

You run minefield? Brave soul... I used to and it crashes constantly...

You either got a bad nightly (it happens, but not so often), or were doing something wrong.

 

[bledd]

the 'ms is trying to take over the world' spiel is getting tiresome now, I don't see many people moaning about iTunes? that adds all kinds of crap to your pc, and slows your machine down!

 

[miniyazz]

the 'ms is trying to take over the world' spiel is getting tiresome now, I don't see many people moaning about iTunes? that adds all kinds of crap to your pc, and slows your machine down!

I moan about iTunes all the time. First thing I did was disable all its 'helpful' features, and it still annoys me.

 

[tolien]

Besides, you don't need iTunes (much as bundling iTunes, notSoQuickTime and a bunch of libs together is a pain) in the same sense you need the .net Framework to run a whole host of apps.