Mozilla blocks auto-loading of plug-ins by Firefox
Apart from the latest Flash that is
Customer Success Testimonial: Recovery is Everything
Firefox users should experience faster, safer browsing thanks to Mozilla's decision to block browser plug-ins from automatically loading – albeit with one exception.
"Poorly designed third party plugins are the number one cause of crashes in Firefox and can severely degrade a user's experience on the Web," said Michael Coates, director of security assurance at Mozilla, in a blog post.
"This is often seen in pauses while plugins are loaded and unloaded, high memory usage while browsing, and many unexpected crashes. By only activating plugins that the user desires to load, we're helping eliminate pauses, crashes and other consequences of unwanted plugins."
The function, which Firefox calls Click to Play, will cover all plug-ins except the latest version of Flash, although you can rig it to autoload other plug-ins individually, as well. Users of older versions of Flash will have to upgrade in order to get automatic loading.
"Flash is deployed on a variety of websites users interact with on a regular basis. At this time we believe the best balance of control, ease of use and security is to encourage users to adopt the current version of Flash by only applying Click to Play to outdated versions," Coates told El Reg in an email.
The next step is to institute the scheme for other plug-ins, including Silverlight, Java, Acrobat Reader, and all others. Mozilla hasn't given a date yet on when this will be rolled-out to the general public – presumably there's a heavy test load to get out of the way first.
COMMENTS
Not evil, just a little too nose-y.
Firefox itself is not really that buggy in my experience. It's all the crap add-ons that so many people seem to install. Chrome has the same problem. Add a few badly coded plugins and the thing falls to pieces.
Come to think of it though, if there is ONE plug-in that causes FF to slow down and/or crash it seems to be bloody Flash! I've never had any problems with the other plugins I run.
Re: This noscript?
when did a third party plugin ever load without the user knowing it was going to load?
All the bloody time. Microsoft for one was a repeat offender when it came to Firefox plugin side loading.
This noscript?
I'm having a brain fart here due to I run at least NoScript and Ad Block Plus on all machines, but when did a third party plugin ever load without the user knowing it was going to load? The user installed it, don't they know and want it to load?


IT infrastructure monitoring strategies
Agentless Backup is Not a Myth
Top 10 SIEM implementer’s checklist
Steps to Take Before Choosing a Business Continuity Partner
Enabling efficient data center monitoring