Feeds

Firefox users flip out over sneak MS add-on

Silent, but deadly annoying

Intelligent flash storage arrays

Firefox fans are up in arms after a recent Microsoft software update silently installed a Firefox extension that is difficult to remove.

Users agreeing to install a service pack for the .NET Framework (NET Framework 3.5 Service Pack 1) through Windows update were also pushed a Firefox add-on that is potentially difficult to remove once applied. This add-on - Microsoft .NET Framework Assistant - enables .NET apps to be installed with one click.

Annoyances.org, a Windows gripes site, reports that the update slaps IE-style behaviour on Firefox users, specifically the "ability for Web sites to easily and quietly install software on your PC".

Many Mozilla users might take umbrage to that in principle, even though there's no evidence of attacks in practice; but simply uninstalling early versions of the unwanted extra via Firefox's handy Add-ons interface is not possible because the uninstall button is disabled. This is because the update installs itself for all users of a machine, while the Firefox GUI only manages add-ons for a single profile at a time.

Users have to open up the bonnet of their PC and change settings in RegEdit to remove the potentially unwanted add-on.

Microsoft updated the extension so that it worked on a per-user basis through an update to the Microsoft .NET Framework Assistant issued last month. This software tweak makes the add-on easier to remove.

The original update came out in February, but the behaviour passed the media by before it was picked up in stories by the Washington Post (here), Slashdot and elsewhere over the weekend.

That such tomfoolery could have lain largely unnoticed for so long raises question about whether other Microsoft updates of the past might also have fiddled around with Firefox settings. ®

Internet Security Threat Report 2014

More from The Register

next story
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
BlackEnergy crimeware coursing through US control systems
US CERT says three flavours of control kit are under attack
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
Simplify SSL certificate management across the enterprise
Simple steps to take control of SSL across the enterprise, and recommendations for a management platform for full visibility and single-point of control for these Certificates.