Feeds

Mozilla to auto-block unwanted Firefox add-ons

Revenge of the force-fed browser users

Seven Steps to Software Security

Mozilla's Firefox will soon start blocking browser add-ons installed by other programs until users explicitly approve them, a move that's designed to give people more control over their web surfing experience.

The feature will debut next week in the Firefox Aurora prebeta, Justin Scott a Mozilla product manager for add-ons said Thursday. It will be activated each time the browser is started. If it detects a new add-on that's been installed by another program, it will disable it and present the user with a dialog box. The add-on will be unblocked only after the user approves the add-on.

"Third-party applications frequently install bundled add-ons into Firefox as part of their own installation process," Scott wrote. "While some of these applications seek the user’s permission beforehand, others install add-ons into Firefox without checking to make sure the user actually wants them."

The new Firefox version will also present users with a one-time dialog box the first time it's run that prompts the user to approve previously installed add-ons. By default, all those installed by another application will be disabled unless approved by the user.

The move comes after Mozilla has blocked several individual add-ons deemed to degrade browser stability and user security. In January, it was a Skype toolbar add-on that Mozilla said caused 40,000 crashes in one week and last year it was a Java plugin with security flaw.

Many Firefox users have also protested add-ons Microsoft silently installed in the open-source browser on at least two separate occasions.

"Unfortunately, the extent of unwanted add-ons installed through these methods has caused us to take action, but we're confident that users who truly want such add-ons to be installed with opt in when Firefox prompts them," Scott wrote. ®

Mobile application security vulnerability report

More from The Register

next story
Yorkshire cops fail to grasp principle behind BT Fon Wi-Fi network
'Prevent people that are passing by to hook up to your network', pleads plod
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
Mozilla fixes CRITICAL security holes in Firefox, urges v31 upgrade
Misc memory hazards 'could be exploited' - and guess what, one's a Javascript vuln
BMW's ConnectedDrive falls over, bosses blame upgrade snafu
Traffic flows up 20% as motorway middle lanes miraculously unclog
LibreSSL RNG bug fix: What's all the forking fuss about, ask devs
Blow to bit-spitter 'tis but a flesh wound, claim team
Manic malware Mayhem spreads through Linux, FreeBSD web servers
And how Google could cripple infection rate in a second
Don't look, Snowden: Security biz chases Tails with zero-day flaws alert
Exodus vows not to sell secrets of whistleblower's favorite OS
Researcher sat on critical IE bugs for THREE YEARS
VUPEN waited for Pwn2Own cash while IE's sandbox leaked
prev story

Whitepapers

Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Reducing security risks from open source software
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.