Author Topic: Avast (Free) and Firefox 40  (Read 24155 times)

0 Members and 1 Guest are viewing this topic.

Offline Cluster-Lizard2014

  • Sr. Member
  • ****
  • Posts: 334
Re: Avast (Free) and Firefox 40
« Reply #15 on: August 12, 2015, 03:58:47 PM »
I hope so too.

Offline Tangy

  • Full Member
  • ***
  • Posts: 149
Re: Avast (Free) and Firefox 40
« Reply #16 on: August 12, 2015, 04:53:25 PM »
What I have noticed is that add ons that are frequently updated are not signed. The ones that are rarely or never updated are signed.
OS:Win xpsp3 pro, CPU:2.8 GHz, Ram:4 Gb HD:500 Gb,Avastfree18.8.22356,OSArmor,Basilisk+NewMoon(Roytam1),ublockorigin,Adguard, SystemExplorer, MCShield, MBAM on demand, FW:PC Tools Plus ,WinPat,Decentraleyes,privacy badger,minerblock.
OS : Windows 7 pro 64bits Avast free Malwarebytes antiexploit

Offline midnight

  • Massive Poster
  • ****
  • Posts: 2462
  • Never Be Rude
Re: Avast (Free) and Firefox 40
« Reply #17 on: August 12, 2015, 11:44:41 PM »
Hi guys, easy solution, use FF ESR. ;)

+1
.

Offline sabbatha

  • Jr. Member
  • **
  • Posts: 39
Re: Avast (Free) and Firefox 40
« Reply #18 on: August 13, 2015, 01:18:39 AM »
After reading this post i've check my add-ons and reads that avast is warned..that is so stupid..
If will be impossible for me to keep add ons like classic theme restorer and web mail ad blocker..said so..i will downgrade back again to 39 IF FF 41 will disable these add-ons, period.
I'm tired of FF that more and more is turning like a copy of Chrome..i've still blocked my java into mozilla FF which is insane cause every darn update, doesn't matter which it is,it is says that firefox doesn't recommend to use.

What is FF ESR?


Offline Gopher John

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2098
Re: Avast (Free) and Firefox 40
« Reply #19 on: August 13, 2015, 01:43:00 AM »
Firefox ESR
https://www.mozilla.org/en-US/firefox/organizations/all/

What Mozilla did was sign all up-to-date extensions that resided on AMO enmass.  If the extension was an old one that didn't pass muster for updating (the max version was outdated), it wasn't signed.  Also, if the signed extensions were later updated it lost the signing.  It seems that now extensions that reside on AMO are signed at the time of vetting and acceptance, either new extensions or updated extensions.

Those extensions that aren't on AMO require that the extension publisher request that Mozilla signs it, for each and every update.  I'm fairly sure that some won't bother, which means that come Firefox 42 it can't be installed.
AMD A6-5350M APU with Radeon HD Graphics, 8.0GB RAM, Win7 Pro SP1 64bit, IE11
i7-3610QM 2.3GHZ, 8.0GB Ram,  Nvidia GeForce GT 630M 2GB, Win7 Pro SP1 64bit, IE 11
Common to both: Avast Premium Security 19.7.2388, WinPatrol Plus, SpywareBlaster 5.5, Opera 12.18, Firefox 68.0.2, MBam Free, CCleaner

Offline sabbatha

  • Jr. Member
  • **
  • Posts: 39
Re: Avast (Free) and Firefox 40
« Reply #20 on: August 13, 2015, 01:57:02 AM »
I agree on everything you said BUT FF needs seriously to stop turning into a chrome clone, it's insane that i still got java disabled on FF while all is upgraded..
Same with avast: all was fine on 39 version..now i discover this..
Serioulsy why every software rushing to create update that causes merely trouble and issues to us?
Fed up.

Offline Gopher John

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2098
Re: Avast (Free) and Firefox 40
« Reply #21 on: August 13, 2015, 02:13:03 AM »
In a default install of new releases of Java, it is disabled in all browsers.  Oracle was under pressure to do that because of the ongoing security issues with Java.  Java can be enabled in the browsers by the Java Configuration utility that any Java installation has.  Of course, if the installed Java version is not current or has a known vulnerability, Firefox will disable it per it's blocklist.
https://addons.mozilla.org/en-US/firefox/blocked/
AMD A6-5350M APU with Radeon HD Graphics, 8.0GB RAM, Win7 Pro SP1 64bit, IE11
i7-3610QM 2.3GHZ, 8.0GB Ram,  Nvidia GeForce GT 630M 2GB, Win7 Pro SP1 64bit, IE 11
Common to both: Avast Premium Security 19.7.2388, WinPatrol Plus, SpywareBlaster 5.5, Opera 12.18, Firefox 68.0.2, MBam Free, CCleaner

Offline Tangy

  • Full Member
  • ***
  • Posts: 149
Re: Avast (Free) and Firefox 40
« Reply #22 on: August 13, 2015, 03:51:18 AM »
Just updated to FF40. Not even one add on is signed any more ! Currently using the following add ons :
Classic theme restorer ( was not signed before )
Cyscon security shield ( was not signed )
Flag fox ( was  signed )
Perfect Redirector ( was signed )
SSleuth ( was signed )
Traffic Light ( was signed )
ublock origin ( was not signed )
Yahoo mail hide Ad panel ( was signed )
You Tube flash player ( was signed )
OS:Win xpsp3 pro, CPU:2.8 GHz, Ram:4 Gb HD:500 Gb,Avastfree18.8.22356,OSArmor,Basilisk+NewMoon(Roytam1),ublockorigin,Adguard, SystemExplorer, MCShield, MBAM on demand, FW:PC Tools Plus ,WinPat,Decentraleyes,privacy badger,minerblock.
OS : Windows 7 pro 64bits Avast free Malwarebytes antiexploit

Offline Gopher John

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2098
Re: Avast (Free) and Firefox 40
« Reply #23 on: August 13, 2015, 04:50:38 AM »
Firefox 40 does not show -signed after the extension name in the Extensions Tab.  However, if you hover the cursor over the extension name -signed should show up in a tooltip.  However, very recently update extensions will lose the -signed added to their name but the extension won't be flagged as 'could not be verified' because it is signed.  An example is NoScript, which was just updated.

In most of my Firefox profiles, I have only one extension that is flagged as 'could not be verified'.  Extension List Dumper which I modified per instructions found on http://forums.mozillazine.org and bumped the MaxVersion is, of course, not signed.  It will be disabled in Firefox 42 unless Mozilla relents.  I have RefreshPolicy Continued in a couple of profiles, which is also not signed.
AMD A6-5350M APU with Radeon HD Graphics, 8.0GB RAM, Win7 Pro SP1 64bit, IE11
i7-3610QM 2.3GHZ, 8.0GB Ram,  Nvidia GeForce GT 630M 2GB, Win7 Pro SP1 64bit, IE 11
Common to both: Avast Premium Security 19.7.2388, WinPatrol Plus, SpywareBlaster 5.5, Opera 12.18, Firefox 68.0.2, MBam Free, CCleaner

Offline Tangy

  • Full Member
  • ***
  • Posts: 149
Re: Avast (Free) and Firefox 40
« Reply #24 on: August 13, 2015, 05:50:31 AM »
@ Gopher John
Thanks for the tip.
OS:Win xpsp3 pro, CPU:2.8 GHz, Ram:4 Gb HD:500 Gb,Avastfree18.8.22356,OSArmor,Basilisk+NewMoon(Roytam1),ublockorigin,Adguard, SystemExplorer, MCShield, MBAM on demand, FW:PC Tools Plus ,WinPat,Decentraleyes,privacy badger,minerblock.
OS : Windows 7 pro 64bits Avast free Malwarebytes antiexploit

Offline Gopher John

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2098
Re: Avast (Free) and Firefox 40
« Reply #25 on: August 13, 2015, 01:57:07 PM »
@ Gopher John
Thanks for the tip.

You are welcome.
AMD A6-5350M APU with Radeon HD Graphics, 8.0GB RAM, Win7 Pro SP1 64bit, IE11
i7-3610QM 2.3GHZ, 8.0GB Ram,  Nvidia GeForce GT 630M 2GB, Win7 Pro SP1 64bit, IE 11
Common to both: Avast Premium Security 19.7.2388, WinPatrol Plus, SpywareBlaster 5.5, Opera 12.18, Firefox 68.0.2, MBam Free, CCleaner

Offline lakrsrool

  • Advanced Poster
  • **
  • Posts: 712
  • Get the Picture !
Re: Avast (Free) and Firefox 40
« Reply #26 on: August 16, 2015, 06:42:12 PM »
<snip>
Firefox 40: Firefox warns about signatures but doesn't enforce them.

Firefox 41 (ETA Sept. 22) : Firefox will have a preference that allows signature enforcement to be disabled (xpinstall.signatures.required in about:config).   I take this to mean they will be disabled by default, but that this "feature" can be overridden.

Firefox 42 (ETA Nov. 3): Release and Beta versions of Firefox will not allow unsigned extensions to be installed, with no override.
<snip>

Looks like they have already done some preparation in the about:config settings, see image, which shows xpinstall.signatures.required is currently default set to false.

That is what is likely to change to true in FF 42.0 when it does, I really hope they aren't so blind/ridged  and the user can set that back to false.

Thanks DavidR for that last post with the attachment that as you say we hope will remain an option available to users to reset to "false" in version 42.

That said, what concerns me when looking at the plans that FF has regarding this quote:

Quote
As of Firefox 41 you will not get a warning and unsigned add-ons will be blocked. There will be a (hidden) preference that you can set to override for the time being.

As of Firefox 42, unsigned add-ons cannot be used in the standard release (and beta) builds of Firefox. Full stop.

More specifically what concerns me is that it would suggest that the RED part above would be the "the about:config setting" referenced as "a (hidden) preference" that can "override" the requirement "for the time being".  And that I'm afraid that there are possibly plans on removing this setting the way FF42 is described above.
« Last Edit: August 16, 2015, 06:47:37 PM by lakrsrool »
Processor: i3 2.53 GHz 4 GIG RAM, OS: WIN 7, Connection: High Speed, Virus/Malware Protection: Avast-2015, SpywareBlaster, Windows Firewall & Defender. Email: Outlook 2010 w/ POP Peeper Email Notifiers.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: Avast (Free) and Firefox 40
« Reply #27 on: August 16, 2015, 08:20:24 PM »
By the time FF 42.0 comes around, I have a suspicion that there are many people using old, no longer undeveloped add-ons who may well come up with ways round this rather than accept that they can no longer use these old, useful add-ons.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline MartinZ

  • Advanced Poster
  • **
  • Posts: 1057
  • Product Manager
Re: Avast (Free) and Firefox 40
« Reply #28 on: August 19, 2015, 10:10:09 AM »
Hi,

just to confirm, we are working on signing the addon via Mozilla, it should be live before the FF 41 is released.

Martin

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Avast (Free) and Firefox 40
« Reply #29 on: August 19, 2015, 10:14:48 AM »
Thanks Martin, good to know.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0