Mozilla service detects insecure Firefox plugins
Slated for browser embedding
Customer Success Testimonial: Recovery is Everything
Mozilla has introduced a service that checks Firefox browser plugins to make sure they don't have known security vulnerabilities or incompatibilities.
The service debuted on Tuesday with this page, which checks 15 plugins to make sure they're the most recent versions. Over time, Mozilla developers plan to scan additional addons, and they also plan to embed a feature into version 3.6 of the open-source browser that will automatically indicate which plugins used on a current page are out of date.
The offering builds on a feature Mozilla rolled out last month that warned Firefox users when they had an out-of-date version of Adobe's Flash media player installed. In its first week, Mozilla statistics showed more than half of those who installed the latest Firefox release were running an insecure version of the frequently attacked plugin.
Not that the service has necessarily gotten off to as good a start as one might hope. Our tests failed to detect the use of Adobe Reader, another application widely abused by criminals. And other plugins, such as Google Picasa and the iTunes Application Detector were also left out in the cold.
But as Mozilla makes clear here, the page is only the beginning. Eventually, the organization plans to "create a self-service panel for vendors to update their plugin info as new releases come out."
It's initiatives such as these that demonstrate Mozilla's dedication to the security of its users, and for that it deserves props. When legions of end users keep internet-facing software updated, we all win. ®
COMMENTS
Too bad that Firefox had to raise the bar, but at least they did it.
How many times has Adobe's Flash and Reader plug-in had exploitable vulnerabilities, and yet there are no auto-update features? Actually, Adobe Acrobat has an update that works if you buy the full version (not the free reader).
Check out another useful tool: Secunia PSI (works for more than just plug-ins, and finds all third-party software on your PC that is at risk and needing updates).
Perhaps I am missing something...
Doesn't firefox already provide this functionality for ALL extensions within the addon manager (the 'Find updates' button), and does it not also check for updates to extensions on startup?
IT infrastructure monitoring strategies
What you need to know about cloud backup
Agentless Backup is Not a Myth
Top 10 SIEM implementer’s checklist
Customer Success Testimonial: Recovery is Everything
