Firefox 8 Will Block Third Party Add-ons by Default

[nsane.forums]

Mozilla says Firefox 8 will automatically block browser add-ons from third parties unless approved by the user.

Starting with Firefox 8, Mozilla will automatically block browser add-ons installed by other software until users approve them, a company product manager announced yesterday.

Software-bundled add-ons have been a problem for Firefox users, who have sometimes been surprised to find browser extensions show up on their machines without their consent. An add-on included with Skype, for example, caused such a high number of browser crashes that Mozilla added it to a list of banned extensions last January. And in 2009, an add-on that Microsoft silently slipped into Firefox left browser users open to attack, a fact that Microsoft itself admitted.

"While some of these applications seek the user's permission beforehand, others install add-ons into Firefox without checking to make sure the user actually wants them," said Justin Scott, product manager for add-ons, on a Mozilla company blog .

Scott ticked off numerous issues with such add-ons, ranging from slowing down Firefox's startup and page loading times to not keeping up with Firefox's feature and security updates. "Most importantly, they take the user out of control of their add-ons," Scott said.

Changes slated for Firefox 8, which will hit Mozilla's "Aurora" preview channel next week and is scheduled to release in final form on November 8, will return control to users, argued Scott.

If Firefox 8 finds that another program has installed an add-on, the browser will automatically disable it until the user has agreed to its installation. "Users that want the functionality provided by a third-party-installed add-on can easily allow the installation, while users who don't can cancel or ignore the prompt," said Scott.

Previously-installed add-ons will also be tagged when users upgrade to Firefox 8, and won't be enabled until the user explicitly agrees.

Developers who follow Mozilla's rules -- asking users to opt-in -- will be affected as well as those who try to slip an add-on by users, something that immediately raised questions.

"We have an installer on Windows that installs an add-in to Firefox (via an .exe). Its only job is to install the add-on and the user is agreeing to install the add-on," said Michael Kaply, a former IBM developer who now consults with corporations on customizing Firefox for their workers or clients. "How do we keep this prompt from appearing in this case?" Kaply asked in a comment appended to Scott's blog.

Firefox 8 will detect add-ons installed by other software and require the user's permission before enabling the extension.

Mozilla didn't have an answer for Kaply.

"Firefox unfortunately doesn't have any way of knowing if the user was ever asked about installing the extension," acknowledged Alex Faaborg, a principal designer at Mozilla, in another comment. "So the only way to ensure user control is to ask them when Firefox launches."

Scott echoed that, saying that impact of bad add-ons outweighed the pain that will be felt by developers who abide by the rules. "Unfortunately, the extent of unwanted add-ons installed through these methods has caused us to take action, but we're confident that users who truly want such add-ons to be installed will opt in when Firefox prompts them," he said.

Users can try out the new add-on management features by downloading Firefox 8 after it lands on the Aurora channel next week.

View: Original Article

[DKT27]

Firefox 8 to tell aggressive add-ons to back off

A new feature in Firefox 8 will prevent third-party add-ons from activating.

Mozilla is taking steps to protect users from programs that install add-ons in Firefox without user permission, citing numerous reasons including security concerns and the desire to make sure that the person using Firefox has ultimate control of the add-ons installed.

Two new features will be making their debut in Firefox 8, currently on the Firefox nightly channel but planned to move to the Aurora developer's build early next week. The first feature automatically disables add-ons added to Firefox by other programs. When you start Firefox after the add-on has been installed, a notification window prompts users to either activate the add-on or ignore it.

The second feature kicks in the first time Firefox runs after upgrading to version 8. It goes through your add-ons and sorts them into two categories: ones you've installed, and add-ons from third-party programs. All active add-ons that you have installed will be kept active, while all third-party add-ons will be de-activated unless you choose to re-activate them. As an additional level of protection against unwanted de-activation, the feature will offer a confirmation list of the add-ons you want killed.

The second part of this aggressive new approach to third-party add-ons will allow you to go back in time and disable third-party add-ons that are currently installed.

Mozilla said in a blog post announcing the features that it sees 1.5 million add-ons downloaded daily, and noted that while add-ons create new features, they can also hamstring the browser's performance. Not unlike Microsoft taking steps to get users to upgrade beyond Internet Explorer 6, Mozilla appears to be interested in getting people to think about the add-ons they've installed and de-activating or uninstalling the unused ones.

Assuming development goes according to plan, Firefox 8 will reach the stable channel, the broadest base of Firefox users, on or around September 27.

View: Original Article

[HX1]

:lmao: Sorry.. Weasel Warrior... mah weazel would be proud... :rofl: ..and no, I do not have any idea what it is... but the name itself.. LOL

[DKT27]

LOL. Didn't even notice that. :lol:

[Marik]

:lmao: Sorry.. Weasel Warrior... mah weazel would be proud... :rofl: ..and no, I do not have any idea what it is... but the name itself.. LOL

same here...this is the first time I'm seeing that name as well :uhoh:

[RMD]

That kind of extensions menu is just a copycat of IE9 from what I can see. :D