firefox security message!

[AledJ]

Using firefox 3.5.3 and a few minutes ago a message popped up from firefox saying both Windows Presentation Foundation and Microsoft .NET Framework Assistant had to be disabled. Anyone else had this ???

I can click on more info below each add-on and it says:

secure connection failed

en-gb.www.mozilla.com:443 uses an invalid security certificate

The certificate is only valid for *.mozilla.com

(Error code: ssl_error_bad_cert_domain)

Any idea what that is all about?

[Haiku32]

Yes happened to me last night. Don't have a clue what it was about.

[AledJ]

Yes happened to me last night. Don't have a clue what it was about.

Well at least it not just me!! Strange!

[Yosh]

Wondering if this has something to do with NET putting a hole in FF sometime ago, i am sure i read somewhere that Thursdays patching (think it was thursday) addressed an issue with NET in one of the updates.

[Agent]

http://www.computerworld.com/s/artic..._users_at_risk

[AledJ]

Got another home pc should I just disable the two add-ons??? The firefox thing has not come up yet. I was on my pc all morning and nothing showed till 2pm.

[TAKTAK]

just happened to me too

[Agent]

Yes, kill it. Follow the link I posted if it's not been auto disabled. That is unless you want your machine to get OMGWTFPWNED by some random spyware at some point.

[AledJ]

Yes, kill it. Follow the link I posted if it's not been auto disabled. That is unless you want your machine to get OMGWTFPWNED by some random spyware at some point.

Disabled both things on the other home pc! Will sort the laptop out later.

[watercooled]

Wondering if this has something to do with NET putting a hole in FF sometime ago, i am sure i read somewhere that Thursdays patching (think it was thursday) addressed an issue with NET in one of the updates.

Yeah I was thinking the same thing. I uninstalled both of these awful add-ons ages ago so no warning for me. If anyone is wondering what we mean they basically added a feature like ActiveX (amongst other things) to FF effectively reducing its security to that of IE... I was also very frustrated yet again at MS just doing basically whatever they want with your software - FF has nothing at all to do with them, how dare they install their own add on without so much as a warning and severely reduce your computer's overall security!!!
Even if you don't get this warning I would STRONGLY advise disabling them anyway (since MS makes it a pain to uninstall completely unless you dig deep into their website for instructions) since they offer no extra functionality whatsoever and like I said badly cripple the security of FF which is a huge reason many people use it over IE in the first place!!!

[AledJ]

Yeah I was thinking the same thing. I uninstalled both of these awful add-ons ages ago so no warning for me. If anyone is wondering what we mean they basically added a feature like ActiveX (amongst other things) to FF effectively reducing its security to that of IE... I was also very frustrated yet again at MS just doing basically whatever they want with your software - FF has nothing at all to do with them, how dare they install their own add on without so much as a warning and severely reduce your computer's overall security!!!
Even if you don't get this warning I would STRONGLY advise disabling them anyway (since MS makes it a pain to uninstall completely unless you dig deep into their website for instructions) since they offer no extra functionality whatsoever and like I said badly cripple the security of FF which is a huge reason many people use it over IE in the first place!!!

I did see the instruction to remove them but i'm not confident going through that list, so just disabled then for now. But I agree how the hell can Microsoft do this??? And secondly (fair play to FF they did alert people to it) but how could they let it happen int he first place?

[watercooled]

I don't think there was much Mozilla could have done really - MS just decided to insert their own add-on without any permission. I hate the way they think they can do whatever they like with your computer - no you bought it, you only want Windows as your OPERATING SYSTEM and leave applications to it!
To remove the .net one check this link: http://support.microsoft.com/?kbid=963707

[Barrichello]

Updated October 16, 2009 - updated blog post to clarify that Firefox users are protected from CVE-2009-2529 if they install the MS09-054 update.

I have the update (9734455) from MS09-054 but still disabled ms add-on anyway in FF.

[AledJ]

I don't think there was much Mozilla could have done really - MS just decided to insert their own add-on without any permission. I hate the way they think they can do whatever they like with your computer - no you bought it, you only want Windows as your OPERATING SYSTEM and leave applications to it!
To remove the .net one check this link: http://support.microsoft.com/?kbid=963707

Think i'll just leave it disabled for now lol Wonder if Microsoft will suffer for this?? i.e court action?

[Zak33]

i just got the pop up too.

[Output]

I got it earlier too, it disabled it but I ended up searching Google and removed the plugin completely (though it was a little fiddly) anyway.