Potential threat to Firefox? Should we be worried?

[Pindle]

I'm not the most tech savvy guy around, but I saw this posted on another forum and thought it prudent to post here.

Sneaky Microsoft plug-in puts Firefox users at risk

I searched the forum and didn't see anything about this, as the article's only 1 day old. I did see a Microsoft .NET Framework Assistant 1.1 in the add-on list, though.

[Baelorn]

You can just uninstall it. I know the article says the uninstall option is disabled but it's not. Tested on Windows Vista and XP.

[Chrian]

thanks for putting the info up.

[Pikarya]

I knew this would happen sooner or later. Good thing I removed it months ago when it first popped up. Hope Microsoft gets hard smack for it too.

[Baelorn]

As an update Firefox is now blocking both plug-ins known to cause security issues. Anyone who has them installed should get a notice that they are being blocked and will be asked to restart FF to block them completely.

[TheMysteriousX]

No, you don't need to be worried, unless you don't install security updates.

In which case, you deserve to get your shit jacked.

[Mistress Stowastiq]

As an update Firefox is now blocking both plug-ins known to cause security issues. Anyone who has them installed should get a notice that they are being blocked and will be asked to restart FF to block them completely.

My browser popped up the add on window and it freaked me the hell out because it only had those plug ins inside of it and I have not been warned by FF before to block a plug in like that. It is good they are doing it like this though.

[Destinye]

Yep, FF detected them, said they're security risks then blocked them.

[Khajit]

This could explain how so many got hacked with firefox and noscript lately?

[Destinye]

This could explain how so many got hacked with firefox and noscript lately?

Based on this article I read it says despite having those plugins it just requires a FF user to browse a rigged site and get owned basically.

http://news.idg.no/cw/art.cfm?id=5CF...5F5A54F2136086

[Yugl]

I don't see the windows add-on in my Firefox add-ons. Does this mean I don't have it?

[Destinye]

I don't see the windows add-on in my Firefox add-ons. Does this mean I don't have it?

Depends on if you got your latest updates (Windows Update that adds it) and Firefox updates (That disables/blocks it which removes it from your list).

[Yugl]

I think I'm updated on Firefox, but I did the Windows pdate yesterday.

[Swatt]

i use chrome.

[Ashira]

You can just uninstall it. I know the article says the uninstall option is disabled but it's not. Tested on Windows Vista and XP.

No, they said it used to be. Which it was, the buttons were grayed out, as I recall many times seeing it on there. The newest update from Microsoft now allows it to be disabled/uninstalled.

[Wolfknight]

I don't see the windows add-on in my Firefox add-ons. Does this mean I don't have it?

Depends on if you got your latest updates (Windows Update that adds it) and Firefox updates (That disables/blocks it which removes it from your list).

I keep my firefox updated but can't recall anything about it blocking something, any clue on what the plugin is named inside the firefox plugin folder?

[Kipling]

Hm, got this when I came back from Breakfast.. Scary.

[The_OG_Nelta]

Hm.. Just uninstalled 1.1, scary.

Said it was disabled for my safety haha.

[Clash Perez]

So with regular Firefox updates, this isn't a concern? My add-ons list shows Microsoft .NET Framework Assistant 1.1 installed. Is it not needed/desired?

I'm pretty clueless about this sort of stuff, but fairly paranoid still.

[Pindle]

So with regular Firefox updates, this isn't a concern? My add-ons list shows Microsoft .NET Framework Assistant 1.1 installed. Is it not needed/desired?

I'm pretty clueless about this sort of stuff, but fairly paranoid still.

If you haven't upgraded to the newest Firefox (3.5, I believe), you should go ahead and do that. I saw and deleted the .NET Framework 1.1 last night but didn't see the other one on the add-on page. This morning, however, there was a window when I woke up stating that both plug-ins were potential risks and needed to be disabled. So, I would recommend fully updating both Windows and Firefox.