You are here

<s>Firefox updating without consent!!!</s> Ffx now Malware!!!

11 posts / 0 new
Last post
sl23
Offline
Last seen: 4 months 1 day ago
Joined: 2009-03-30 05:56
<s>Firefox updating without consent!!!</s> Ffx now Malware!!!

Why is it my Ffx v56.02 keeps updating?
I have v56.02 installed and do NOT want to update to the completely useless newer versions that are unable to use plugins.
This version has been set as my default app and is 'installed' on an internal HDD.

It all started with the new v57 updating the app folder and resetting the toolbars.
Despite NEVER actually updating this version!!!

To explain... I have two PA.com menus, one on D: for most used apps and one on E: for all other apps, but including backups of the D: install.
When this started, I made a backup of FirefoxPortable folder to ensure future issues were easier to resolve.
I have since found out that somehow, my FirefoxPortable/App folder is actually being updated WITHOUT my consent!!!

Is this typical PA.com behaviour or Mozilla's?

Either way, how the hell is this folder being updated without warning and at completely random times?

I have moved and renamed the original Ffx folder in an attempt to stop this happening, I also scoured and cleaned the registry and system folders. Nothing seems to stop this involuntary update from occurring.

At one point this caused loss of saved passwords and bookmarks!!!

I want to know why this is happening.

Regards

John T. Haller
John T. Haller's picture
Online
Last seen: 7 min 25 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Mozilla

Mozilla has possibly switched it to a forced update since Firefox 56.0.2 has remote exploit vulnerabilities (aka any website can take over your computer and do whatever it wants). Check about:config and see what your app.update.enabled, app.update.auto, and app.update.mode are.

If you'd like to use legacy extensions, please use Firefox Portable ESR 52 which still gets security updates.

Sometimes, the impossible can become possible, if you're awesome!

sl23
Offline
Last seen: 4 months 1 day ago
Joined: 2009-03-30 05:56
Thank you

Thank you for your help John, I'll look into that Wink
I did forget to mention that Ffx auto updater is disabled.

Live for an ideal and leave no place in the mind for anything else.

John T. Haller
John T. Haller's picture
Online
Last seen: 7 min 25 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Hmmm

It shoudn't do more than prompt you unless Mozilla changed the way it works. I may have to play with this a bit to test it out.

Sometimes, the impossible can become possible, if you're awesome!

sl23
Offline
Last seen: 4 months 1 day ago
Joined: 2009-03-30 05:56
app.update.enabled;false

app.update.enabled;false
app.update.auto;false
app.update.mode - [does not exist in about:config]

What are these:
app.update.doorhanger;true
app.update.service.enabled;true

Live for an ideal and leave no place in the mind for anything else.

John T. Haller
John T. Haller's picture
Online
Last seen: 7 min 25 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Doorhanger, Service

Doorhanger is the unified messaging to allow it to show messages in the bar on Windows 10 if I recall correctly. The service denotes whether Firefox should use the Firefox updater service. If Firefox is not installed locally, this is unavailable.

Sometimes, the impossible can become possible, if you're awesome!

sl23
Offline
Last seen: 4 months 1 day ago
Joined: 2009-03-30 05:56
The trouble with ESR 52 is

The trouble with ESR 52 is that eventually this will be superceded by future ESR's and therefore will end up in the same predicament.
But as it features security updates, I may as well switch until it reaches v57.

Thanks for the advice.

Live for an ideal and leave no place in the mind for anything else.

John T. Haller
John T. Haller's picture
Online
Last seen: 7 min 25 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
For Now, through August

For now, 52.x ESR is your best option just to ensure you're running securely. The last thing we'd want is some random website to install malware. Firefox ESR 52.x will be maintained through August 28, 2018. At that point, the extension capability of Firefox stable will likely be higher as they have planned to add several more APIs to enable additional extension types. Additionally, we're exploring adding one of the Firefox variants that will continue supporting extensions to our lineup. We're just ensuring that it will also support accessibility, multiple languages, and 32+64-bit for complete coverage.

Sometimes, the impossible can become possible, if you're awesome!

sl23
Offline
Last seen: 4 months 1 day ago
Joined: 2009-03-30 05:56
That's all sounds great,

That's all sounds great, thanks! Smile

Live for an ideal and leave no place in the mind for anything else.

sl23
Offline
Last seen: 4 months 1 day ago
Joined: 2009-03-30 05:56
Ffx now considered Malware!!!

Why? because it is making decisions without asking for user input! Despite the updater being turned OFF and many update settings in about:config being disabled, Ffx auto updates to the latest version without my consent and is totally unwanted behaviour!

Only Malware does this! So imho Ffx is now exactly that! There is no other app out of thousands that I've used over the years that has this behaviour. Yet Mozilla thinks it can make this choice for us without our consent? Even though you purposely disable every setting to avoid this behaviour, updates are still installed without consent! This is NOT acceptable!!!

I may as well go and use Chrome or Opera if I can't have Ffx the way I want it,. The way I've had it setup for years and then forced to use an inferior version that doesn't support the thousands of addons people have become accustomed to!!!

Live for an ideal and leave no place in the mind for anything else.

John T. Haller
John T. Haller's picture
Online
Last seen: 7 min 25 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Publisher

You'll need to contact Mozilla. All support for older Firefox has been dropped and the extensions are being pulled from a.m.o. I think they set FF to auto-update no matter what in some cases, though I haven't seen it happen myself.

Sometimes, the impossible can become possible, if you're awesome!

Log in or register to post comments