Author Topic: Avast (Free) and Firefox 40  (Read 24156 times)

0 Members and 1 Guest are viewing this topic.

Offline aa.avast

  • Jr. Member
  • **
  • Posts: 85
Avast (Free) and Firefox 40
« on: August 11, 2015, 07:05:07 PM »
I downloaded Firefox 40 today and now in Firefox Add-Ons > Extensions I get the following message Avast Online Security could not be verified for use in Firefox

Same result in Windows XP and Windows 7 machines.

Offline ramram

  • Newbie
  • *
  • Posts: 1
Re: Avast (Free) and Firefox 40
« Reply #1 on: August 11, 2015, 07:08:49 PM »
In Avast free it says 39.0.3 is the latest. This is a bug since the latest version is 40.0.0
I guess it will be resolved in a few days.... But it still is a bug.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: Avast (Free) and Firefox 40
« Reply #2 on: August 11, 2015, 08:16:09 PM »
In Avast free it says 39.0.3 is the latest. This is a bug since the latest version is 40.0.0
I guess it will be resolved in a few days.... But it still is a bug.

It didn't in mine as the software updater reported a new firefox version/update available.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: Avast (Free) and Firefox 40
« Reply #3 on: August 11, 2015, 08:20:48 PM »
I downloaded Firefox 40 today and now in Firefox Add-Ons > Extensions I get the following message Avast Online Security could not be verified for use in Firefox

Same result in Windows XP and Windows 7 machines.

This is firefox, for some time now add-ons have been signed, but not all add-ons are signed, so those will be flagged for caution. If you know the add-on then there should be no real problem. I have lots of add-ons that aren't signed, but I have been using them for some considerable time.

I don't know how various add-ons are signed, so we will just have to wait to see if it gets signed and by whom.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline aa.avast

  • Jr. Member
  • **
  • Posts: 85
Re: Avast (Free) and Firefox 40
« Reply #4 on: August 11, 2015, 08:45:52 PM »
Thanks David / ramam   :)

Offline ky331

  • Sr. Member
  • ****
  • Posts: 303
Re: Avast (Free) and Firefox 40
« Reply #5 on: August 11, 2015, 09:19:52 PM »
EDIT:  See my reply #13 below for updated information...

I believe FF started "signing" extensions in late May.

Their announced plan [if they go through with it] is that UNsigned extensions will cease to work effective with the release of FF 41 ( 7 weeks from today).   Today's release starts WARNING users if they're using UNsigned extensions.

So unless the avast OS plug-in gets "signed" by Mozilla, it will be "voided" in FF's next [scheduled] release.
« Last Edit: August 12, 2015, 03:06:06 PM by ky331 »
Lenovo T530 laptop, Intel Core i5-3320M @ 2.60 GHz, 8GB RAM, Windows 7 Pro SP1 (64-bit), avast! 17 Free, MBAM3 Pro, Windows Firewall, MVPS HOSTS file, OpenDNS Family Shield, Zemana AntiLogger Free, SpywareBlaster, IE11 & Firefox [both using WOT (IE set to WARN, FF set to BLOCK)], WinPatrol PLUS, uBlock Origin, MBAE, MCShield, CryptoPrevent, SAS (on-demand scanner). 
[I believe computer-users who sandbox (Sandboxie) are acting prudently.]

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: Avast (Free) and Firefox 40
« Reply #6 on: August 11, 2015, 11:18:28 PM »
I believe FF started "signing" extensions in late May.

Their announced plan [if they go through with it] is that UNsigned extensions will cease to work effective with the release of FF 41 ( 7 weeks from today).   Today's release starts WARNING users if they're using UNsigned extensions.

So unless the avast OS plug-in gets "signed" by Mozilla, it will be "voided" in FF's next [scheduled] release.

The problem with FF 41.0 if it follows through on that there are many old/discontinued add-ons that will be hit. I currently have 6 unsigned add-ons, the user should be able to take responsibility for their own choices.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Cluster-Lizard2014

  • Sr. Member
  • ****
  • Posts: 334
Re: Avast (Free) and Firefox 40
« Reply #7 on: August 12, 2015, 12:38:55 AM »
If that is all true it is terrible news. I've just checked and I have three unsigned Extensions which include AdBlock Plus, WOT and Classic Theme Restorer. The latter, in particular, I would be gutted to lose.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: Avast (Free) and Firefox 40
« Reply #8 on: August 12, 2015, 01:17:01 AM »
What version of Classic Theme Restorer ?
I have Classic Theme Restorer 1.3.7 and that isn't flagged - previously firefox 39.x annotated signed at the end of the add-ons - now they don't do that and only flag those which aren't signed. WOT and AdBlockPlus are the same not flagged.

I suggest that you try updating firefox if you haven't got FF 40.0 and the add-ons.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Cluster-Lizard2014

  • Sr. Member
  • ****
  • Posts: 334
Re: Avast (Free) and Firefox 40
« Reply #9 on: August 12, 2015, 02:11:47 AM »
I haven't updated Firefox yet because the first I'd heard that FF40 had been released was when I read it here. I checked my Addons and saw that mysteriously their signed/unsigned status is now very prominent. I'm in two minds whether to update this this time and if FF41 is as described then I'll be sticking with the last version working with my Addons and hang on to it as long as possible. 

I've had prompts and updated FF twice recently, the previous time only last weekend to FF39.0.3. It really annoys me when they do that. Now we get this looming threat that some thing aren't going to work or, from the sound of it aren't going to be allowed to be used unless signed, with FF41.

It goes against the whole spirit of FF being able to control and customise it how you want.

Edit
I've checked on the Mozilla web site and I think a mistake has been made here. The threat to disallow unsigned addons will be from FF42 onwards. That's due for release in November. Until then unsigned addons will only be disabled by default. Users will still have the option to enable the Addons that are unsigned.

Updated FF39.0.3 to FF40 literally a minute ago and as far as I tell no problems with AVAST or anything else ie. no warning messages and all addons enabled and functioning right from the restart.   
« Last Edit: August 12, 2015, 02:23:21 AM by Cluster-Lizard2014 »

Offline Gopher John

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2098
Re: Avast (Free) and Firefox 40
« Reply #10 on: August 12, 2015, 02:33:36 AM »
Only extensions are checked for signing, and those that aren't signed are flagged but not disabled at this time.

https://support.mozilla.org/en-US/kb/add-on-signing-in-firefox?redirectlocale=en-US&redirectslug=add-ons-signing-firefox
AMD A6-5350M APU with Radeon HD Graphics, 8.0GB RAM, Win7 Pro SP1 64bit, IE11
i7-3610QM 2.3GHZ, 8.0GB Ram,  Nvidia GeForce GT 630M 2GB, Win7 Pro SP1 64bit, IE 11
Common to both: Avast Premium Security 19.7.2388, WinPatrol Plus, SpywareBlaster 5.5, Opera 12.18, Firefox 68.0.2, MBam Free, CCleaner

Offline Cluster-Lizard2014

  • Sr. Member
  • ****
  • Posts: 334
Re: Avast (Free) and Firefox 40
« Reply #11 on: August 12, 2015, 02:11:27 PM »
At this time, yes, but the threat to them comes with FF42 in November.

It is getting a bit weird now.  Prior to the upadate to FF40 all the signed or unsigned Addon > Extensions were clearly shown but having updated that information is now absent. 

Also, as the OP stated I too am getting the warning message: "AVAST Online Security could not be verified for use with FF. Proceed with caution".  The inference is presumably that AVAST, because it is unsigned, is therefore a potential security threat just highlights how bloody stupid and useless the signing process is at IFF.  :)   
« Last Edit: August 12, 2015, 03:54:39 PM by Cluster-Lizard2014 »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Avast (Free) and Firefox 40
« Reply #12 on: August 12, 2015, 02:15:13 PM »
Hi guys, easy solution, use FF ESR. ;)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline ky331

  • Sr. Member
  • ****
  • Posts: 303
Re: Avast (Free) and Firefox 40
« Reply #13 on: August 12, 2015, 03:05:20 PM »
The information I posted earlier has indeed been revised...

Updated information about FF's plans for banning unsigned extensions:

Firefox 40: Firefox warns about signatures but doesn't enforce them.

Firefox 41 (ETA Sept. 22) : Firefox will have a preference that allows signature enforcement to be disabled (xpinstall.signatures.required in about:config).   I take this to mean they will be disabled by default, but that this "feature" can be overridden.

Firefox 42 (ETA Nov. 3): Release and Beta versions of Firefox will not allow unsigned extensions to be installed, with no override.

See TIMELINE at https://wiki.mozilla.org/Addons/Extension_Signing
« Last Edit: August 12, 2015, 03:15:33 PM by ky331 »
Lenovo T530 laptop, Intel Core i5-3320M @ 2.60 GHz, 8GB RAM, Windows 7 Pro SP1 (64-bit), avast! 17 Free, MBAM3 Pro, Windows Firewall, MVPS HOSTS file, OpenDNS Family Shield, Zemana AntiLogger Free, SpywareBlaster, IE11 & Firefox [both using WOT (IE set to WARN, FF set to BLOCK)], WinPatrol PLUS, uBlock Origin, MBAE, MCShield, CryptoPrevent, SAS (on-demand scanner). 
[I believe computer-users who sandbox (Sandboxie) are acting prudently.]

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: Avast (Free) and Firefox 40
« Reply #14 on: August 12, 2015, 03:46:21 PM »
<snip>
Firefox 40: Firefox warns about signatures but doesn't enforce them.

Firefox 41 (ETA Sept. 22) : Firefox will have a preference that allows signature enforcement to be disabled (xpinstall.signatures.required in about:config).   I take this to mean they will be disabled by default, but that this "feature" can be overridden.

Firefox 42 (ETA Nov. 3): Release and Beta versions of Firefox will not allow unsigned extensions to be installed, with no override.
<snip>

Looks like they have already done some preparation in the about:config settings, see image, which shows xpinstall.signatures.required is currently default set to false.

That is what is likely to change to true in FF 42.0 when it does, I really hope they aren't so blind/ridged  and the user can set that back to false.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security