Sneaky Microsoft plug-in puts Firefox users at risk


Recommended Posts

Sneaky Microsoft plug-in puts Firefox users at risk

An add-on that Microsoft silently slipped into Mozilla's Firefox last February leaves that browser open to attack, Microsoft's security engineers acknowledged earlier this week.

One of the 13 security bulletins Microsoft released Tuesday affects not only Internet Explorer (IE), but also Firefox, thanks to a Microsoft-made plug-in pushed to Firefox users eight months ago in an update delivered via Windows Update.

"While the vulnerability is in an IE component, there is an attack vector for Firefox users as well," admitted Microsoft engineers in a post to the company's Security Research & Defense blog on Tuesday. "The reason is that .NET Framework 3.5 SP1 installs a 'Windows Presentation Foundation' plug-in in Firefox."

For the rest of the article

http://news.idg.no/cw/art.cfm?id=5CF0A4A7-...45F5A54F2136086

Consider that add-on uninstalled from my system. Idiots.

I just got the notice from Firefox today. Said the Microsoft.NET Framework Assistant and Windows Presentation Foundation would cause instability and you know what, I have noticed some hanging the last day or so with Firefox open that I never noticed before. Could be related or maybe not. Will see if the issue pops up again.

How do you remove plugins from the blocklist?

EDIT: Fixed. I had to turn off extensions.blocklist.enabled in about:config and reinstall the framework assistant. (Mozilla removed it from their repository. I found it here: http://mirror.atlanticmetro.net/mozilla/addons/9449/)

Do NOT block things on my computer without permission or a way to re-enable them, Mozilla.

Edited by GreyWolfSC
Probably.

It was also a .NET Framework 3.5 plugin getting installed on firefox anyway.

pretty much,yes

How do you remove plugins from the blocklist?

EDIT: Fixed. I had to turn off extensions.blocklist.enabled in about:config and reinstall the framework assistant. (Mozilla removed it from their repository. I found it here: http://mirror.atlanticmetro.net/mozilla/addons/9449/)

Do NOT block things on my computer without permission or a way to re-enable them, Mozilla.

your link is broken , remove the ")" from the end of the link

:)

I just got the notice from Firefox today. Said the Microsoft.NET Framework Assistant and Windows Presentation Foundation would cause instability and you know what, I have noticed some hanging the last day or so with Firefox open that I never noticed before. Could be related or maybe not. Will see if the issue pops up again.

same here, and also noticed my Firefox hanging recently. I'd prefer no Firefox secret installations from Microsoft if they are reading this ...

same here, and also noticed my Firefox hanging recently. I'd prefer no Firefox secret installations from Microsoft if they are reading this ...

It's not a secret Firefox installation. The plug-in is installed as part of the .NET Framework and Firefox picks it up automatically. If anything, we should complain to Mozilla for the browser not asking if the "found" plugin should be added. Their methodology could easily activate a hidden malware plugin the same way.

Strangely this morning when I turned my monitor on (My PC is on constantly) I had a warning from Firefox that it had disabled the Windows Foundation plugin (when checking the plugins it just says "known to cause security issues") and it directed me to the webpage https://en-gb.www.mozilla.com/en-GB/blocklist/

I just got the notice from Firefox today. Said the Microsoft.NET Framework Assistant and Windows Presentation Foundation would cause instability and you know what, I have noticed some hanging the last day or so with Firefox open that I never noticed before. Could be related or maybe not. Will see if the issue pops up again.

I got the message yesterday as well, right before firefox crashed on me. :no:

Mozilla is in your browser, disabling your addons ;)

screw that sh*t

its been all over the net how to disable/remove this Microsoft addon long before they enabled the option

i do not need Mozilla looking out for me

That's what I'm sayin'. I bet Mozilla wouldn't have liked it if Microsoft had uninstalled and blacklisted Firefox due to the crypto spoofing flaw.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • 1. Define "better". 2. It's still more expensive than equivalent PCs so... And there is not one Windows platform. This is the mistake ALL Apple oriented people make. Apple is one OEM. You could reasonably compare them to one PC OEM, say Dell or HP. But you can't compare them to ALL PC OEMs. Case in point, Apple has NO touch screen MacBooks. No tablet Macs. There are no rugged Macs. The variety of PC OEM design is insane. With Apple, you have... Apple. The problem is that you're starting with Apple as the definition of "good" then filtering out anything that isn't close to an existing Apple product, then trying to homogenise all of those left into a fictional product line and then ignore any innovations to create a minimal feature subset so you can say "See! Apple better!" PS: I was an Apple dev for 17 years and helped develop MacInTalk and disability solutions for Apple, and worked on Microsoft Office for MacOS - and I have several Macs and MacBooks - so tread very carefully.
    • Major Xbox layoffs may claim South of Midnight developer Compulsion entirely by Pulasthi Ariyasinghe Microsoft has been making major changes in its gaming wing Xbox for a few months now, including the appointment of a new CEO, a large number of leadership changes, and strategy shifts. However, the company is seemingly also looking at initiating a major layoffs wave at Xbox and perhaps even a studio closure. The new report lands from Kotaku, Xbox first-party developer Compulsion Games is being shuttered soon by Microsoft. For those unfamiliar with the studio, it's the team behind Contrast (2013), We Happy Few (2018), and South of Midnight (2025). Its latest game was quite well received, even winning a Peabody Award for its writing. It even received a 9/10 in Neowin's own review, highlighting its engaging storyline, gorgeous world, and curious characters. The studio joined Xbox Game Studios in 2018, just as Microsoft announced it is acquiring Playground Games, Undead Labs, and Ninja Theory. Despite recent listings for new staff roles, according to the new report, Compulsion Games is being closed entirely, with over 90 staff being let go. Kotaku also added that the studio's leadership is in negotiations with Microsoft about this decision, but no official details have been revealed yet. The report lands just as two senior managers of Xbox leave their posts at Microsoft Gaming. Head of Xbox Game Studios Craig Duncan and chief of staff Louise O'Connor originally began their journey in Rare and have been a part of Xbox for over two decades. Dunkan has been responsible for games like Kinect Sports and Sea of Thieves, while O'Connor was primarily working on Rare's Everwild project before its cancelation. If this report about the studio shutdown is accurate, this may just be the start of a major new layoffs wave at Xbox Game Studios. There are also rumors of Arkane Studios being heavily affected. As always, take all these reports with a grain of salt until something official materializes from Microsoft or the studios.
    • The flaw with this analysis is that this laptop has a cellphone CPU in it. In the Intel world, that would be an N150 and those are everywhere, even in low end laptops. You can get an N150 based NUC with 16GB RAM and 256GB-512GB SSD... NOT soldered in... for < $500 Canadian (around US$360). The problem is two fold: tech bloggers/writers on most tech site (like this one, ironically) overvalue Apple and apparently aren't in the same earnings class as most regular people. As a result, we get breathless articles about how everyone needs a folding phone when most people just cannot afford one... or really need one. And we get Apple used as the baseline metric regardless of whether that comparison makes any sense. If Dell or HP released a retail laptop with a cellphone motherboard, you'd be all over them for doing that - but Apple does it and it's genius. I see articles suggesting what Samsung - a company that basically started the foldable phone market and has built them for eight years - needs to do to compete with Apple's unreleased, unspecced and unseen folding phone. Sorry, no - if the Neo (really creative name there BTW - still, better than the Go, the other "creative" product name everyone's using) encourages PC makers to make cellphone laptops using lower end ARM processors, we all lose. It's a step backwards and a capitulation to the fact that semiconductor makers and computer OEMs (and tech bloggers) have totally lost the plot.
    • Everyone should install this extension and ignore games that use AI. https://chromewebstore.google....nnigaaeelfkeomjcngmnh?pli=1 https://addons.mozilla.org/en-US/firefox/addon/ai-warning-for-steam/
  • Recent Achievements

    • One Year In
      ThatGuyOnline earned a badge
      One Year In
    • Week One Done
      Jeroen Wilms earned a badge
      Week One Done
    • Week One Done
      rolfus earned a badge
      Week One Done
    • One Month Later
      Leroy Jethro Gibbs earned a badge
      One Month Later
    • Conversation Starter
      flexorcist earned a badge
      Conversation Starter
  • Popular Contributors

    1. 1
      +primortal
      505
    2. 2
      +Edouard
      198
    3. 3
      PsYcHoKiLLa
      127
    4. 4
      Steven P.
      82
    5. 5
      ATLien_0
      74
  • Tell a friend

    Love Neowin? Tell a friend!