Microsoft Infiltrates Firefox

"This is a very serious
breach
of user trust. Not only is this package delivered without explicit
approval, it's also made difficult to remove. Moreover, its use is not
clear. Lastly, the change affects third-party software, not
one of Microsoft products, so the question is, what the hell did
Microsoft want to achieve with this nebulous, spyware-like update?"That question was posed by the author of Dedoimedo, a website specialising in step-by-step tutorials, when he found that the latest update to Microsoft .NET Framework 3.5 SP1 (KB951847) secretly added a strange new component to Firefox ...

"I was not asked to approve or even confirm this installation. There is no mention that this thing was going to be installed, neither on the Microsoft pages or during the installation itself. And now, it seems, it cannot be removed."
Fortunately he did find a way and details the removal process here.
So what is Microsoft up to, quietly adding components to Firefox? Even if this addition is perfectly benign, are there any guarantees it will always remain so, especially given the corporation's dubious history? Imagine if the Firefox team snuck in an addition to Internet Explorer. I bet the lawsuits would already be flying!



Comments
"Imagine if the Firefox team snuck in an addition to Internet Explorer. I bet the lawsuits would already be flying"
Sorry, this is complete rubbish. People produce extensions for IE all the time, the difference is that Microsoft users don't rant on like this, they are much more mature.
Posted by: Swampy | July 25, 2009 1:04 AM
People! Read the add-on screenshot above carefully. I think the problem is that it is poor naming. This is an add-on from Click-Once called "Microsoft .Net Framework Assistant 1.0" that allows Click-Once to remotely detect the local .Net framework version via Firefox. That's all. Nothing to blame M$ for... The add-on & installation behaviour are all down to Click-Once.
But it just goes to show, you can never really be sure what you're PC is actually running...esp. when browsing the web.
Posted by: Marcus | February 11, 2009 10:49 PM
To Ron Anon: My point here is two fold. First Click Once is hardly malicious software, and it will have no impact on Firefox's performance or behavior other than enabling Click Once for the user. Second the Author should have done his own research and reported on what Click Once actually is; instead of jumping to the wild conclusions that he came up with. Unfortunately his laziness appears to be infectious. Most of the people on this post are jumping to conclusions without doing any proper research. It's clear that most of these comments are motivated by an uninformed hatred of Microsoft. Someone even posted that this akin to what Microsoft did to the JVM, but it isn't anything like that. Microsoft is merely using Firefox's plug in capabilities to support their .Net platform. It's not like this is Microsoft's attempt to re-implement Firefox and undermine its capabilities (we can look at IE for something more akin to that). Don't get me wrong Microsoft can be downright dirty sometimes, and we should call them on it when they are, but we should do so in an informed fashion. This post isn't informative, and it wouldn't have taken much effort on the writer's part to make this post informative for its readers. As for Click Once being silently installed, I'm going to say that's a tough one, as it doesn't adversely affect the user experience. In fact Click Once is necessary for Microsoft to cultivate development on its .Net platform, which is the recommended platform for windows based applications. Clearly Microsoft ought to support application development on its own platform, and clearly the user is ok with running windows applications on their Windows machines, or they would be running a different OS. It should be noted that Click Once applications do not run in the browser, they are installed and run locally on the user's machine. In that sense this is more akin to the silent updates Microsoft does with their .Net framework. That being said there's definitely a legitimate argument to be made against the silent install. Of course if you're worried about silent updates then just check what's coming down in your automatic updates first.
Posted by: Edgar Harris | February 10, 2009 5:41 PM
Microsoft didn't install this into my Firefox. And I have a fully updated Windows XP with every .NET Framework imaginable.
Posted by: Kakkoii | February 10, 2009 4:30 PM
Quite amazing to me how quickly you blind lemmings can go from 0-60 when a chance for you to whine about anything Microsoft come to light. Nothing has been proven or discovered about this code yet the witch hunters are out doing what they do best. Hunting prey that they know nothing about.
Posted by: Stranger | February 10, 2009 4:13 PM
To Edgar Harris:
o Then why be sneaky about it?
o Why not say so on your download page?
o Why not ask for permission or inform the users when it's installed?
o Why not make it easy to uninstall?
o WHY DO I HAVE TO SEARCH GOOGLE TO FIND OUT WHAT MICRO$OFT ARE INSTALLING ON MY PC???
Posted by: Ron Anon | February 10, 2009 9:13 AM
Talk about making a mountain out of a mole hill. A quick google search would tell you that Click Once is a mechanism that allows you to easily install thick desktop applications with auto update capabilities from the Web. It makes sense that a browser plug-in is required for this feature; since you install a Click Once application through a link on the vendors site and then run through the install process.
Posted by: Edgar Harris | February 10, 2009 6:30 AM
... Why is sasa k talking about the PlayStation 3, Firefox browser is for PC/Mac/Linux, not XMB...
And why the hell you would you even try to install a .NET framework on Ubuntu... Bruce
Some people should of stay on Windows, as for my FF is to slow to use as it is so slowing it down more doesn't affect me.
Posted by: MastricX | February 10, 2009 4:51 AM
I use Safari now, i prefer it's simplicity.
Only thing is, if I wanna visit www.microsoft.com, I need to use Explorer instead, and the same thing goes if I wanna play the games at www.zone.com (another MS site)
I've installed Firefox at least 3 times, and as much as I try to like it, I ususally remove it within 10 minutes of installation.
Posted by: Jack | February 10, 2009 2:44 AM
Anyone remember Java? Here we go again. Another example of how a M$ Monopoly kills innovation and keeps us all down. Enough already. Do all you can to promote non M$ software and solutions like the rest of us. That is the only way to weaken these greedy lost causes.
Posted by: antiM$ | February 10, 2009 2:23 AM
I wouldn't be surprised if Microsoft add more and more components into it, to eventually screw FireFox up. Im guessing there view on EVERYTHING is DESTROY THE COMPETITION. There is no such thing as a Virus. But if you think there is, what is actually the virus? The program, or the Operating system that executes it....
Posted by: Craig | February 9, 2009 10:30 PM
Have a look at your Plug-ins sometime. Office 2007 adds a plugin, but these "sneak installations" aren't limited to Microsoft.
Posted by: Alex | February 9, 2009 7:53 PM
Isn't Firefox open source software? I thought it was ok for people to add to it however they wish.
Posted by: Cam | February 9, 2009 6:36 PM
now that they got cought, microsoft will claim they did not know anything about it and was done by someone else. some kid said he found out some inside info that their main focus was to slow down/destroy the ps3 through its web browser. i hope this is true, microsoft needs to burn. garbage company fueled by greed and money.
Posted by: sasa k | February 9, 2009 4:51 PM
Will M$ be trying to do this to my Ubuntu O/S ?
It would not be surprising if they did.
Posted by: Bruce | February 9, 2009 1:46 PM
Will M$ be trying to do this to my Ubuntu O/S ?
It would not be surprising if they did.
Posted by: Bruce | February 9, 2009 1:41 PM