Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Firefox 4.0.x Extensions

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
bjm__ Firefox 4.0.x Extensions
Member 4th Jun, 2011 21:45
Ranking: 64
Posts: 374
User Since: 9th Mar, 2009
System Score: 100%
Location: US
Last edited on 4th Jun, 2011 21:47

Hello Community
Forgive me if this has already been answered. I did search Firefox 4 Extensions.
May just be my imagination....but, since FF 4. PSI does not list FF Extensions.
Each time one of my FF Extensions updates. I loose the listing in Patched/Browser.
I'm sure PSI used to report Firefox Add-ons Extensions ~ Adblock Plus & NoScript.
Has PSI revised/stopped reporting FF Extensions ? Or,
Has FF 4 caused PSI to stop reporting Extensions.

Thanks

Maurice Joyce RE: Firefox 4.0.x Extensions
Handling Contributor 6th Jun, 2011 11:00
Score: 11569
Posts: 8,888
User Since: 4th Jan 2009
System Score: N/A
Location: UK
@bjm
This post is getting "lost" so I have brought it to the top (for now).

I do not use Firefox so cannot really help. Hopefully Anthony Wells will be back shortly who knows all about that browser.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
bjm__ RE: Firefox 4.0.x Extensions
Member 6th Jun, 2011 18:01
Score: 64
Posts: 374
User Since: 9th Mar 2009
System Score: 100%
Location: US
Last edited on 6th Jun, 2011 18:03
@Maurice
Thank you for your interest
secunia support has offered me the following
quote:
We have done some testing and it turns out that this issue exists with some versions of Windows (in this test Windows 7 64bit) but not others (in this test Windows Vista 32bit). Currently it seem that Noscript 2.x and Adblock Plus 1.x, when added to Mozilla Firefox 4.0.x, is not detected by the PSI. Aparently, no file from these programs contain any file version information, or at least we have so far been unable to locate such a file.
------------------------
At least it appears as per secunia support that PSI is not causal.
PSI reported/listed FF3 Extensions.
FF4 ~ FF4 Extensions... something is different (besides the rendering engine)?
Vista 32bit & FF 4.0.1
Thank you again for your interest.
Interesting, FF4 users have not posted re this anomaly.
Hopefully Anthony Wells will chime in
Regards
bjm__


Was this reply relevant?
+1
-0

simonly

RE: Firefox 4.0.x Extensions
[+]
This reply has been deleted
bjm__ RE: Firefox 4.0.x Extensions
Member 7th Jun, 2011 19:47
Score: 64
Posts: 374
User Since: 9th Mar 2009
System Score: 100%
Location: US
Last edited on 7th Jun, 2011 19:50
@ Topic et al
secunia support today via email
partial quote > When time allows we will do further troubleshooting to fix this issue.

Thank you
Was this reply relevant?
+1
-0
Anthony Wells RE: Firefox 4.0.x Extensions
Expert Contributor 7th Jun, 2011 20:31
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi bjm et al ,

Am a little busy elsewhere atm , but my info is :-

As my Ff 4.0.1 is set to auto update all my add-ons (extensions and plug-ins , plus themes) , as I never use IE and my Chrome Dev and Canary channels are not followed by the PSI , but they are also set to auto update/warn of insecurities , then the much loved "secure browsing" is only occasionally looked at to see which "secure" add-ons are actually unpatched :eg: the enduring VLC Player (bug:(( . Thus I have not noted a big change in what the PSI displays .

At each Ff platform change in the past (and including some major updates) I have seen some chaos in what the PSI displays concerning the all display modules ; non technically , I think that the necessary tweaks by the add-on developers may not be PSI proof - never mind Mozilla proof in one or two notorious cases . I spent some time getting all my extensions displayed in version(s) 3.6.x ; in some cases with no .exe file or .dll file the "install.rdf" file has done the trick .

Atm , I do not see Adblock Plus 1.3.8 and I could never find a file (neither could support) for NettiCat's Better Privacy ; the later has just updated to 1.51 so I may look again : incidentally it still allows individual removal of the Adobe Flash LSO's , better than the sweep of CCleaner and the latest Browser clean up which is "all" cookies or nothing (Thanks go the wr , the great silver one , wherever and whatever or did it come from you , bjm ?? :)))

It will likely help support "troubleshoot" if you were to use the "Are you missing a program" link to post your missing "links" , where you can spot an active file !!

Off again I'm afraid , keep us posted with your progress .

Take care

Anthony

PS : who is this guy Al who chimes in .

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+2
-0
bjm__ RE: Firefox 4.0.x Extensions
Member 7th Jun, 2011 21:28
Score: 64
Posts: 374
User Since: 9th Mar 2009
System Score: 100%
Location: US
Last edited on 7th Jun, 2011 21:36
on 7th Jun, 2011 20:31, Anthony Wells wrote:
Hi bjm et al ,
PS : who is this guy Al who chimes in .


et al.
abbr. Latin
et alii (and others)

Thanks for your always wise and welcomed input...I did try to find exe, dll, ? for my extensions to offer Secunia as missing. ;-(
Before they updated I was able to locate (an identifier) via Open Folder.
Now, since FF4...extensions not detected (as you know) so, "the fix"...
is best left to Secunia. (per their time/resources)
As they're aware. All is good.
I mentioned AdblockPlus and NoScript only as examples.
Better Privacy ...was never detected ? as I recall (now that you jogged my memory)
WOT & Dr.Web anti-virus link checker remain detected/listed as extension for Firefox as they have not updated. My other extensions have all since updated and gone away (not detected).
Thanks for chiming in as I note ur busy ;-)
Regards
P.S. 97 Total down to 94 Total while composing this post.
Be nice if PSI had an export to csv/text so I could keep track of PSI history.


Was this reply relevant?
+0
-0
gokkasten RE: Firefox 4.0.x Extensions
Member 9th Jun, 2011 13:09
Score: 2
Posts: 3
User Since: 9th Jun 2011
System Score: N/A
Location: NL
on 6th Jun, 2011 18:01, bjm__ wrote:
secunia support has offered me the following
quote:
We have done some testing and it turns out that this issue exists with some versions of Windows (in this test Windows 7 64bit) but not others (in this test Windows Vista 32bit). Currently it seem that Noscript 2.x and Adblock Plus 1.x, when added to Mozilla Firefox 4.0.x, is not detected by the PSI. Aparently, no file from these programs contain any file version information, or at least we have so far been unable to locate such a file.

Thanks for posting this... couldn't find anything on the net and totally didn't understand what was happening. (Ain't it weird that this problem isn't reported anywhere else?)

Guess we'll have to wait for the fix from the Secunia folks.


--
My site: http://www.gratisgokkastenonline.nl
Was this reply relevant?
+1
-0
bjm__ RE: Firefox 4.0.x Extensions
Member 9th Jun, 2011 17:42
Score: 64
Posts: 374
User Since: 9th Mar 2009
System Score: 100%
Location: US
on 9th Jun, 2011 13:09, gokkasten wrote:
Thanks for posting this... couldn't find anything on the net and totally didn't understand what was happening. (Ain't it weird that this problem isn't reported anywhere else?)

Guess we'll have to wait for the fix from the Secunia folks.


Thanks for posting/confirming similar problem...
Yes, it's weird that this issue has not drawn more attention.
Maybe Extensions have never been much of a vulnerability concern.
Truth be told, I hesitated posting Topic as I was unsure if perhaps FF4 was causal by moving Add-ons to a Tab. We know something changed? &
Agree with you that the folks at Secunia will fix.
My Plugins (Flash, Java, etc) are still reported.
Just my Extensions have gone wonky.
Regards
Thnx

Was this reply relevant?
+0
-0
Anthony Wells RE: Firefox 4.0.x Extensions
Expert Contributor 9th Jun, 2011 18:23
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi again ,

On my XP system , in "secure browsing" I have 6 of 14 "Extensions" displayed , but only 6 of 20 "plugins" . Some "plugins" are (historically and known to support) not displayed even though they are in the full "Scan Results" :eg: DivX and this now (new) seemingly applies to Google Earth . One or two are Betas , such as my Google Toolbar Extension and so appear nowhere - as in invisible to the PSI .

So , on closer inspection , there is seemingly a growing diversity of the "problem" and a definite reduction to my personally updated display of yesteryear .

Btw , if you open an "existing to PSI" extension folder within the PSI , you should/will see other "non-existing" extensions in the same location/folder and can look for rules indicator files thereby , should you wish to "suggest" to Secunia .

Mozilla provide thousands of "add-ons" so this is a major project for support .

As an aside , I notice that the PSI now displays my Chrome browser for me in "secure browsing" after the Stable and Beta versions moved to the 12.x platform at the same time . I am not complaining , merely alerted , as I use the Dev and Canary channel 13.x versions which the PSI does not monitor , so more investigations are warranted to locate the PSI's ID files (Google gears no longer exists since version 11.x is EOL) , should I ever find the time .

Looks like Secunia will need more staff to keep up with Firefox and Chrome :))

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+3
-0
gokkasten RE: Firefox 4.0.x Extensions
Member 9th Jun, 2011 20:34
Score: 2
Posts: 3
User Since: 9th Jun 2011
System Score: N/A
Location: NL
Last edited on 9th Jun, 2011 20:36
on 9th Jun, 2011 18:23, Anthony Wells wrote:
Looks like Secunia will need more staff to keep up with Firefox and Chrome :))

You raise an interesting point here: I'm curious to see how they're going to handle these issues. I personally feel all extentions and plugins should be noticed, but then again... does Secunia feel likewise?

(As an aside: the Nelson Mandela quote made me laugh out loud, because it reminded me of something a former manager always used to say, "nothing is impossible for those that don't have to do it themselves"... ;)


--
My site: http://www.gratisgokkastenonline.nl
Was this reply relevant?
+1
-0
Anthony Wells RE: Firefox 4.0.x Extensions
Expert Contributor 11th Jun, 2011 10:54
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi ,

Maybe support could get the former manager to stretch himself and manage the extensions and ask Nelson to do the impossible (again) and Mandela the plug-ins :)

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+1
-0
Enzian RE: Firefox 4.0.x Extensions
Member 12th Jun, 2011 06:36
Score: 1
Posts: 1
User Since: 12th Jun 2011
System Score: N/A
Location: US
Anthony - thanks for the post. I was having similar issues. Don't know how they can provide any adequate level of support moving forward - they just can't keep up.

--
http://www.honeymoonpixie.com
Was this reply relevant?
+1
-0

goodnutrition

RE: Firefox 4.0.x Extensions
[+]
This reply has been deleted
buildblog RE: Firefox 4.0.x Extensions
Member 12th Jun, 2011 18:24
Score: 1
Posts: 1
User Since: 8th Jun 2011
System Score: N/A
Location: UK
Last edited on 12th Jun, 2011 18:24
Thanks for the post Anthony.


Andrew
Was this reply relevant?
+1
-0
Anthony Wells RE: Firefox 4.0.x Extensions
Expert Contributor 12th Jun, 2011 18:38
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi ,

Much as I enjoy basking in your compliments , it is merely reflected glory .

bjm is the responsible OP and gets all the praise :)) and any blame :((

Whilst I'm here , I would add , that Secunia took a long time to get the Ff 4.0.x, recent Chrome versions and IE 9 into the "secure browsing" module of the PSI ; only guessing but the latest inclusion/development of such things as HTML 5 et alii may have something to do with it .

Secunia will either have to liaise with the add-on developers via Mozilla , Chrome and M$ to determine some detection criteria or ask faithful Forum members to upload the detection files , but only when they can make time and place to accept the data input .

Not easy whichever way is chosen , the data is likely just as important to Secunia's commercial clients as to us freeloaders !!

Long weekend to enjoy , so I'm off ; take care .

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+1
-0
seonj RE: Firefox 4.0.x Extensions
Member 12th Jun, 2011 19:56
Score: -25
Posts: 3
User Since: 12th Jun 2011
System Score: N/A
Location: US
on 6th Jun, 2011 18:01, bjm__ wrote:
@Maurice
Thank you for your interest
secunia support has offered me the following
quote:
We have done some testing and it turns out that this issue exists with some versions of Windows (in this test Windows 7 64bit) but not others (in this test Windows Vista 32bit). Currently it seem that Noscript 2.x and Adblock Plus 1.x, when added to Mozilla Firefox 4.0.x, is not detected by the PSI. Aparently, no file from these programs contain any file version information, or at least we have so far been unable to locate such a file.
------------------------
At least it appears as per secunia support that PSI is not causal.
PSI reported/listed FF3 Extensions.
FF4 ~ FF4 Extensions... something is different (besides the rendering engine)?
Vista 32bit & FF 4.0.1
Thank you again for your interest.
Interesting, FF4 users have not posted re this anomaly.
Hopefully Anthony Wells will chime in
Regards
bjm__


Thank you very much. I thought I was going crazy.

--
NJ search engine optimization
affordable Small Business seo
Was this reply relevant?
+1
-0

walkerbrian

RE: Firefox 4.0.x Extensions
[+]
This reply has been deleted
jhonsimmer RE: Firefox 4.0.x Extensions
Member 18th Jun, 2011 00:11
Score: 1
Posts: 1
User Since: 17th Jun 2011
System Score: N/A
Location: CO
I was having the same situation but finally I could solve the problem thanks to you. I’m glad I finally could end that problem. I have to say that I was also losing my mind about it and I tried to do many things that didn’t work at all. But this saved my day:

We have done some testing and it turns out that this issue exists with some versions of Windows (in this test Windows 7 64bit) but not others (in this test Windows Vista 32bit). Currently it seem that Noscript 2.x and Adblock Plus 1.x, when added to Mozilla Firefox 4.0.x, is not detected by the PSI. Aparently, no file from these programs contain any file version information, or at least we have so far been unable to locate such a file. At least it appears as per secunia support that PSI is not causal.
PSI reported/listed FF3 Extensions.
FF4 ~ FF4 Extensions... something is different (besides the rendering engine)?
Vista 32bit & FF 4.0.1
Thank you again for your interest.
Interesting, FF4 users have not posted re this anomaly.



--
http://www.sistemasbiometricos.co/control-de-acces...
Was this reply relevant?
+1
-0
james19464 RE: Firefox 4.0.x Extensions
Member 18th Jun, 2011 06:46
Score: 1
Posts: 1
User Since: 18th Jun 2011
System Score: N/A
Location: US
I agree with goodnutrition. I don't think all the bugs are worked out of firefox 4.0 quite yet..

--
http://naturalgas-waterheaters.com/rinnai-r75lsi/r...
http://topratedboosterseats.com/britax-boulevard-7...
Was this reply relevant?
+1
-0

seonj

RE: Firefox 4.0.x Extensions
[+]
This reply has been deleted
Skeptia-9 RE: Firefox 4.0.x Extensions
Member 20th Jun, 2011 23:46
Score: 42
Posts: 23
User Since: 15th Mar 2010
System Score: N/A
Location: US
Hello, bjm:

Your thread regarding the disappearance of certain Firefox add-ons--for example, NoScript and Adblock Plus--from the PSI's table of Scan Results draws my interest, because I maintain a substantial investment in Firefox extensions on my PC.

For the sake of clarity in my limited vocabulary of computerese, the term "Firefox add-ons" is an umbrella that covers extensions, plug-ins, themes, personas, dictionaries, toolbars, search engines. My primary concern here is with extensions. Among the 42 extensions installed in Firefox 4.0.0.1 on my machine, the PSI recognizes only 9. Is this good? Bad? Important?

My answer is wishy-washy. I'm not sure ... It depends ... Perhaps I lack the expertise to voice a worthy opinion ...

From the point-of-view of a home user, wonderfully defined as a freeloader by Anthony Wells, et al., a detection metric of 21.4% for my Firefox extensions in the hiatus between FF 4.x and FF 5.x is no cause for alarm. The crooks, who spread their dirt on the web, are exploiting unpatched browser plug-ins such as the Java Runtime Environment and Adobe's Flash Player. Weaponizing Firefox extensions must not be very lucrative/attractive on the dark side.

While I agree with those, who would like to see FF extensions noticed by the PSI, I wonder if that is a realistic objective. How would one go about that task, and what sort of priority does Secunia assign to it without making what's perfect the enemy of what is possible?

A very nice list of extensions installed in Firefox 5 can be produced by following this trail:

FF Button > Help > Troubleshooting Information

Click "Copy all to clipboard" then Ctrl-V to paste into a Forum post. Make sure you delete all extraneous/sensitive information before you hit "Send".

Extensions

Name, Version, Enabled, ID

Adblock Plus
1.3.8
true
{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}

BetterPrivacy
1.51
true
{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}

Calculator
1.1.21
true
{AA052FD6-366A-4771-A591-0D8DC551585D}

CheckPlaces
2.6.0
true
checkplaces@andyhalford.com

Clippings
3.1.4
true
{91aa5abe-9de4-4347-b7b5-322c38dd9271}

Context Search
0.4.6
true
{902D2C4A-457A-4EF9-AD43-7014562929FF}

Copy Link Name
1.3.2
true
{103B2EA2-F063-4273-958D-6B46E5B6F98C}

Custom Buttons
0.0.5.4
true
custombuttons@xsms.org

Drag & DropZones
1.5.3
true
dendzones@captaincaveman.nl

EPUBReader
1.4.1.0
true
{5384767E-00D9-40E9-B72F-9CC39D655D6F}

Extension List Dumper
1.15.0
true
extensionlistdumper@sogame.cat

FabTabs
1.4
true
fabtab@captaincaveman.nl

Flagfox
4.1.4
true
{1018e4d6-728f-4b20-ad56-37578a4de76b}

Flashblock
1.5.14.2
true
{3d7eb24f-2740-49df-8937-200b1cc08f8a}

HTTPS-Everywhere
0.9.7
true
https-everywhere@eff.org

Java Console
6.0.26
true
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

Java Quick Starter
1.0
true
jqs@sun.com

Manage Folders
1.0.4
true
firefox-managefolders@googlecode.com

MeasureIt
0.4.8
true
{75CEEE46-9B64-46f8-94BF-54012DE155F0}

Menu Editor
1.2.7
true
{EDA7B1D7-F793-4e03-B074-E6F303317FB0}

Microsoft .NET Framework Assistant
0.0.0
true
{20a82645-c095-46ed-80e3-08825760534b}

MinimizeToTray revived (MinTrayR)
0.9.4
true
mintrayr@tn123.ath.cx

MyBookmarks
0.6.1
true
mybookmarks@ma2ten.catsyawn.net

Pixlr Grabber
2.1.1
true
{d47a9f51-8281-43fa-f450-f28ef8735e9a}

Qualys BrowserCheck
1.1.95.1
true
{7D2FB79E-E58C-4DB5-A36F-AC1C73967F4D}

QuickFox Notes
2.5B
true
amin.eft_bmnotes@gmail.com

Read It Later
2.1.1
true
isreaditlater@ideashower.com

ScrapBook
1.4.5
true
{53A03D43-5363-4669-8190-99061B2DEBA5}

Search Engine Security
1.2.0
true
{197573FA-9BF9-11DF-9D68-A441DFD72085}

Session Manager
0.7.5
true
{1280606b-2510-4fe0-97ef-9b5a22eafe30}

ShowIP
1.0
true
{3e9bb2a7-62ca-4efa-a4e6-f6f6168a652d}

Status-4-Evar
2011.04.06.18
true
status4evar@caligonstudios.com

Team Cymru's MHR
1.2
true
mhr@team.cymru

Toolbar Buttons
1.0
true
{03B08592-E5B4-45ff-A0BE-C1D975458688}

Uppity
1.5.7
true
{16cbd87c-eb99-4f5c-9825-83cf13ab7ff8}

Vertical Toolbar
0.2.2
true
verticaltoolbar@xuldev.org

View Dependencies
0.3.3.2
true
{8965bb4b-c2ca-2b84-6b49-7afb2760518c}

VTzilla
1.0
true
vtzilla@virustotal.com

WOT
20110323
true
{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}

Zotero
2.1.8
true
zotero@chnm.gmu.edu

Zotero OpenOffice.org Integration
3.5a1
true
zoteroOpenOfficeIntegration@zotero.org

Add-on Compatibility Reporter
0.8.5
false
compatibility@addons.mozilla.org

If someone knowledgeable would tell us freeloaders where to look for version numbers, we might be able to create a community project to collect Firefox extension data in one place for Secunia.

Here is some related information, which might be useful:

The address for Mozilla's Add-on Compatibility Report page for Firefox 4.x is

https://addons.mozilla.org/en-US/firefox/compatibi...

Quoting from Mozilla's descriptive text:

The add-ons below make up 95% of add-on usage known to Mozilla and are ordered by their usage size.

You can climb the directory tree and find the Firefox 5.0 Add-on Compatibility Center here:

https://addons.mozilla.org/en-US/firefox/compatibi...

Mozilla offers guidance for the user of extensions in Firefox 5.0 on this page:

https://addons.mozilla.org/en-US/firefox/compatibi...

Quoting from Mozilla's "Information for Add-on Users":

--->While many add-ons can support the changes in Firefox 5.0 without any code modifications, others may require additional work by the authors to ensure a smooth upgrade. Please be patient during this time, as many add-on developers maintain their add-ons voluntarily as a hobby.

--->Mozilla discourages disabling the compatibility check setting, as this can lead to serious problems starting up Firefox and even data loss if an extension not compatible with a new version of Firefox is forced to be used.

--->If the extension you're trying to use is not compatible after Firefox 5.0 is launched, you may want to check its website or author's homepage for any news concerning the update.

--->You may also want to look for an add-on with similar functionality that does support Firefox 5.0 on the Firefox Add-ons website.

_______

So, what do you think of the idea of tackling Firefox extensions with freeloaders?

Best regards,

Skeptia-9
WinXP Home SP3, 32-bit



Was this reply relevant?
+4
-0

renoautobody

RE: Firefox 4.0.x Extensions
[+]
This reply has been deleted
Anthony Wells RE: Firefox 4.0.x Extensions
Expert Contributor 21st Jun, 2011 14:10
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi ,

If it helps your quest , the same troubleshooting report report is in Ff 4.0.1 . You will see (higher up) that there is also an "Open Containing Folder" link for the "Profiles Directory" which will lead you to the extensions with the {xxxxx} for ID in the Extensions table or you can put them in Explorer search .

The "Add-ons" which are missing on my XP SP3 system seem to be in .xpi files which I cannot seem to open ; these Zipped installer files that are used by Mozilla for extensions as per :-

http://filext.com/file-extension/XPI

They are new to me , so this may be causing the problem . Am busy atm , so if someone else has/can find time to check with support at Secunia and/or Mozilla , we might be able to see the cause of the problem .

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+2
-0
Websafe RE: Firefox 4.0.x Extensions
Member 21st Jun, 2011 19:42
Score: 79
Posts: 105
User Since: 24th May 2009
System Score: 100%
Location: NL
Last edited on 21st Jun, 2011 19:50
Hello Anthony Wells and other forum members,

Thanks Anthony for pointing towards these .xpi files.
My computer (Windows XP-SP3 32 bit) has 3 .xpi files in the “Profiles Directory”.
These .xpi files can be opened with 7-Zip (a compress/decompress file archiver).
In all these .xpi files I find a file: 'install.rdf'.
Renaming this file into install.txt or even better install.xml reveals some information about the extension.
For example: NoSquint; which is a text and/or image zooming extension.

<?xml version="1.0" ?>
- <RDF xmlns="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:em="http://www.mozilla.org/2004/em-rdf#">
- <Description about="urn:mozilla:install-manifest">
  <em:id>nosquint@urandom.ca</em:id>
  <em:name>NoSquint</em:name>
  <em:version>2.1.2</em:version>

  <em:description>Manage site-specific zoom levels and color settings</em:description>
  <em:creator>Jason Tackaberry</em:creator>
- <!--
optional items
  -->
  <em:homepageURL>http://urandom.ca/nosquint/</ em:homepageURL>
  <em:optionsURL>chrome://nosquint/content/dlg-globa l.xul</em:optionsURL>
  <em:type>2</em:type>
- <!--
type=extension
  -->
- <!--
Firefox
  -->
- <em:targetApplication>
- <Description>
  <em:id>{ec8030f7-c20a-464f-9b0e-13a3a9e97384}</em: id>
  <em:minVersion>3.0</em:minVersion>
  <em:maxVersion>5.*</em:maxVersion>
  </Description>
  </em:targetApplication>
  </Description>
  </RDF>

Perhaps Secunia can use the information from this install.rdf > install.xml file to add extensions to the Secure Browsing part.

Edit: Made accent in the XML part.

Websafe.
Was this reply relevant?
+2
-0
Anthony Wells RE: Firefox 4.0.x Extensions
Expert Contributor 21st Jun, 2011 20:28
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 21st Jun, 2011 20:33
Hi Websafe et al. ,

Thanks for your efforts ; I was maybe a bit slack in my choice of words in that I can open a zipped file but not simply by mousing over or right clicking ->properties can I get inside for version details . If each individual does/does not do that what , if anything , will the PSI be able to read , etc . I know support have used the install.rdf for detection in the past but not in a zipped foder AFAIK .

Glad you used NoSqint , as I have that loaded and will have a dig as and when I can to correlate with you ***.

I sent support a .dll I found for "IE Tab 2" extension which is not currently displayed on my system by the PSI ; cannot for the life of me remember if/when it was grrrr :((((( Emil Jeppesen has done the seemingly necessary but I get no display after two rescans . I will follow up tomorrow (after a cold start) as and when to see if we can get a display , even if there may be an actual discerpancy in version numbers .

Take care

Anthony

PS:*** My NoSuint updated to 2.1.2 on 13/06/2011 on my PC (set to auto update , but I may have provoked the update) , so that correlates .

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+1
-0
bjm__ Firefox 4.0.x / 5.0.x Add-ons
Member 21st Jun, 2011 23:14
Score: 64
Posts: 374
User Since: 9th Mar 2009
System Score: 100%
Location: US
Last edited on 21st Jun, 2011 23:27
Hello all,
Kinda funny not to have Firefox in Secure Browsing ...
Updated to FF 5 & (temporarily I hope) lost FF in Secure Browsing
Tried ~ Program missing? Suggest it here! & IDK it's not working.
Prompted to add https://psi.secuina.com to Trusted Zone in IE
Already have http://*.secunia.com & https://*.secunia.com in Trusted Zone sites ~ IDK
maybe tomorrow ;-)
Cheers
Was this reply relevant?
+0
-0
Anthony Wells RE: Firefox 4.0.x Extensions
Expert Contributor 22nd Jun, 2011 00:19
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 22nd Jun, 2011 01:03
Hi bjm ,

Ff 4.0.1 has just updated me to the full release with the Program Files folder showing the .exe as version # 5.0.0.4183 . This version is the security fix/patch for WebGL etc .

I posted here :-

http://secunia.com/community/forum/thread/show/990...

Maybe you were trying to upload the Beta or RC and not the full release !!

Take care

Anthony

EDIT : I have just sent the 5.0.0.4183 version .exe file to support using the missing program link . Re-Edited the version number


--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+2
-0
Skeptia-9 RE: Firefox 4.0.x Extensions
Member 22nd Jun, 2011 05:18
Score: 42
Posts: 23
User Since: 15th Mar 2010
System Score: N/A
Location: US
Hello Websafe, Anthony, bjm, et al.:

Thank you for your interest in writing about Firefox extensions. And thanks to bjm, who started this discussion. Below, you will find I have used your tips to add the installation path to 40 of the 42 Firefox extensions currently installed on my PC. More research by someone more knowledgeable than I is required for 2 of them--namely, the Java Quick Starter and the MS .NET Framework Assistant.

Special thanks to Websafe for confirming technical details of where to locate the version numbers. They are, indeed, in plain sight in the "install.rdf" files. Thank you for teaching me how to find them.

Firefox Extensions
Name, Version, Enabled, ID, Installation Path

Adblock Plus
1.3.8
true
{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

BetterPrivacy
1.51
true
{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi

Calculator
1.1.21
true
{AA052FD6-366A-4771-A591-0D8DC551585D}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{AA052FD6-366A-4771-A591-0D8DC551585D}.xpi

CheckPlaces
2.6.0
true
checkplaces@andyhalford.com
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\checkplaces@andyhalford.com.xpi

Clippings
3.1.4
true
{91aa5abe-9de4-4347-b7b5-322c38dd9271}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{91aa5abe-9de4-4347-b7b5-322c38dd9271}\ins tall.rdf

Context Search
0.4.6
true
{902D2C4A-457A-4EF9-AD43-7014562929FF}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{902D2C4A-457A-4EF9-AD43-7014562929FF}.xpi

Copy Link Name
1.3.2
true
{103B2EA2-F063-4273-958D-6B46E5B6F98C}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{103B2EA2-F063-4273-958D-6B46E5B6F98C}\ins tall.rdf

Custom Buttons
0.0.5.4
true
custombuttons@xsms.org
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\custombuttons@xsms.org\install.rdf

Drag & DropZones
1.5.3
true
dendzones@captaincaveman.nl
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\dendzones@captaincaveman.nl.xpi

EPUBReader
1.4.1.0
true
{5384767E-00D9-40E9-B72F-9CC39D655D6F}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F}\ins tall.rdf

Extension List Dumper
1.15.1
true
extensionlistdumper@sogame.cat
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\extensionlistdumper@sogame.cat.xpi

FabTabs
1.4
true
fabtab@captaincaveman.nl
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\fabtab@captaincaveman.nl.xpi

Flagfox
4.1.4
true
{1018e4d6-728f-4b20-ad56-37578a4de76b}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}\ins tall.rdf

Flashblock
1.5.14.2
true
{3d7eb24f-2740-49df-8937-200b1cc08f8a}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}\ins tall.rdf

HTTPS-Everywhere
0.9.7
true
https-everywhere@eff.org
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\https-everywhere@eff.org\install.rdf

Java Console
6.0.26
true
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEF FEDCBA}\install.rdf

I'm not sure about this one. Please check my work.
Java Quick Starter
1.0
true
jqs@sun.com
C:\Program Files\Java\jre6\lib\deploy\jqs\ff\install.rdf

Manage Folders
1.0.4
true
firefox-managefolders@googlecode.com
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\firefox-managefolders@googlecode.com.xpi

MeasureIt
0.4.8
true
{75CEEE46-9B64-46f8-94BF-54012DE155F0}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{75CEEE46-9B64-46f8-94BF-54012DE155F0}.xpi

Menu Editor
1.2.7
true
{EDA7B1D7-F793-4e03-B074-E6F303317FB0}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{EDA7B1D7-F793-4e03-B074-E6F303317FB0}.xpi

Expert help needed for
Microsoft .NET Framework Assistant
0.0.0
true
{20a82645-c095-46ed-80e3-08825760534b}
Unable to locate path. Needs research.

MinimizeToTray revived (MinTrayR)
0.9.4
true
mintrayr@tn123.ath.cx
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\mintrayr@tn123.ath.cx\install.rdf

MyBookmarks
0.6.1
true
mybookmarks@ma2ten.catsyawn.net
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\mybookmarks@ma2ten.catsyawn.net.xpi

Pixlr Grabber
2.1.1
true
{d47a9f51-8281-43fa-f450-f28ef8735e9a}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{d47a9f51-8281-43fa-f450-f28ef8735e9a}.xpi

Qualys BrowserCheck
1.1.95.1
true
{7D2FB79E-E58C-4DB5-A36F-AC1C73967F4D}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{7D2FB79E-E58C-4DB5-A36F-AC1C73967F4D}\ins tall.rdf

QuickFox Notes
2.5B
true
amin.eft_bmnotes@gmail.com
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\amin.eft_bmnotes@gmail.com\install.rdf

Read It Later
2.1.1
true
isreaditlater@ideashower.com
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\isreaditlater@ideashower.com\install.rdf

ScrapBook
1.4.5
true
{53A03D43-5363-4669-8190-99061B2DEBA5}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{53A03D43-5363-4669-8190-99061B2DEBA5}.xpi

Search Engine Security
1.2.0
true
{197573FA-9BF9-11DF-9D68-A441DFD72085}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{197573FA-9BF9-11DF-9D68-A441DFD72085}.xpi

Session Manager
0.7.5
true
{1280606b-2510-4fe0-97ef-9b5a22eafe30}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi

ShowIP
1.0
true
{3e9bb2a7-62ca-4efa-a4e6-f6f6168a652d}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{3e9bb2a7-62ca-4efa-a4e6-f6f6168a652d}.xpi

Status-4-Evar
2011.04.06.18
true
status4evar@caligonstudios.com
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\status4evar@caligonstudios.com.xpi

Team Cymru's MHR
1.2
true
mhr@team.cymru
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\mhr@team.cymru.xpi

Toolbar Buttons
1.0
true
{03B08592-E5B4-45ff-A0BE-C1D975458688}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{03B08592-E5B4-45ff-A0BE-C1D975458688}\ins tall.rdf

Uppity
1.5.7
true
{16cbd87c-eb99-4f5c-9825-83cf13ab7ff8}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{16cbd87c-eb99-4f5c-9825-83cf13ab7ff8}.xpi

Vertical Toolbar
0.2.2
true
verticaltoolbar@xuldev.org
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\verticaltoolbar@xuldev.org.xpi

View Dependencies
0.3.3.2
true
{8965bb4b-c2ca-2b84-6b49-7afb2760518c}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{8965bb4b-c2ca-2b84-6b49-7afb2760518c}.xpi

VTzilla
1.0
true
vtzilla@virustotal.com
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\vtzilla@virustotal.com.xpi

WOT
20110323
true
{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}.xpi

Zotero
2.1.8
true
zotero@chnm.gmu.edu
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\zotero@chnm.gmu.edu\install.rdf

Zotero OpenOffice.org Integration
3.5a2
true
zoteroOpenOfficeIntegration@zotero.org
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\zoteroOpenOfficeIntegration@zotero.org\ins tall.rdf

Add-on Compatibility Reporter
0.8.5
false
compatibility@addons.mozilla.org
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\compatibility@addons.mozilla.org.xpi
_______

The PSI is reporting 2 instances of Adblock Plus on my computer. They are

C:\Documents and Settings\Owner\Application Data\Thunderbird\Profiles\yyyyyyyy.default\extensi ons\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}\install .rdf, version 1.3.8

and

C:\Documents and Settings\Owner\Application Data\Mozilla\SeaMonkey\Profiles\zzzzzzzz.default\e xtensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}\i nstall.rdf, version 1.3.8

There is a third instance--namely, in Firefox. I assume it is not reported, because the PSI doesn't know where to look for it at the moment. Both instances of Adblock Plus, which appear in the Scan Results Table of the PSI, are labelled "extension for Firefox." I find that terribly confusing. If it simply is not possible for the PSI to discrimminate between a Firefox extension and a Sea Monkey extension, could the label be changed to read "Mozilla browser extension?" Then what's to be done with a Thunderbird extension? Could the label call it a "Mozilla application extension?"

Enough for one post. I believe we need to be patient and allow Mozilla's faithful extension developers plenty of time to upgrade their code to work in FF 5.x. Then, any modifications to the PSI's database made by Secunia will need to be done only once.

I hope those with expertise will find these data both interesting and helpful. Your idea to corral all those Firefox extensions by employing us freeloaders looks promising, pending evaluation of merit and priorities by Secunia.

And I tip my hat in appreciation to Mozilla's extension developers, because judicious deployment of Firefox extensions can destroy so many accessibility and usability barriers for a person like me.

Best regards to all,

Skeptia-9
WinXP Home SP3, 32-bit
PSI Tray Version 2.0.0.3003
Firefox Version 5.0.0.4183
Was this reply relevant?
+2
-0
Anthony Wells RE: Firefox 4.0.x Extensions
Expert Contributor 22nd Jun, 2011 12:03
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi ,

just to update that today's cold start and PSI scan give me Ff 5.0 in Scan Results and Secure browsing modules ; the latter continues with 10 add-ons as per 4.0.1 and no return (as yet) for IE Tab 2 .

@Skeptia 9 ,

How does what you see displayed by the PSI , in terms of add-ons , relate to whether you have the install.rdf file in the directory or the.xpi file , per your posted list above .

Some time ago , there was a concerted effort to call Ff extensions Mozilla extensions where relevant ; this happened around the same time as the notation NPAPI was introduced for Plug-ins . Again , this will likely require community input , especially as some overlap with their Chrome cousins .

A couple of other things :-

1)I have MS .NET Framework Assistant disabled as , some time ago , it was considered a security weakness . I do not know if this advice has since changed . The same thing applied/applies to the Windows Presentation Foundation plug-in ; perhaps someone with technical awareness might comment further .

2)You do not have the most important visual add-on ever developed : Coluorful Tabs - a bright spot to lighten any day :-

http://www.binaryturf.com/free-software/colorfulta...

Take care

Anthony


--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+2
-0
Skeptia-9 RE: Firefox 4.0.x Extensions
Member 22nd Jun, 2011 20:06
Score: 42
Posts: 23
User Since: 15th Mar 2010
System Score: N/A
Location: US
Hello Anthony, et al.:

Thank you for your thoughtful comments. As you are no doubt aware, the version numbers on Firefox extensions are in a high state of flux due to the many changes introduced in FF 5.x. With the exception of Netticat's Better Privacy, which I updated manually by going to the developer's website, I am letting my list of 42 update automatically. At the moment, 3 extensions are still displaying as "incompatible" with FF 5.x. That will change.

At the moment there are 9 instances (actual installations) of Firefox extensions correctly identified by the PSI in the table of Scan Results on my PC. They are

Clippings version 3.1.4
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{91aa5abe-9de4-4347-b7b5-322c38dd9271}\ins tall.rdf, version 3.1.4

Copy Link Name version 1.3.2
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{103B2EA2-F063-4273-958D-6B46E5B6F98C}\ins tall.rdf, version 1.3.2

Custom Buttons version 0.0.5.4
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\custombuttons@xsms.org\install.rdf, version 0.0.5.4

EPUBReader version 1.4.1.0
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F}\ins tall.rdf, version 1.4.1.0

Flagfox version 4.1.4
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}\ins tall.rdf, version 4.1.4

Flashblock version 1.5.14.2
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}\ins tall.rdf, version 1.5.14.2

Java Console version 6.0.26
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEF FEDCBA}\install.rdf, version 6.0.26

QuickFox Notes version 2.5B
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\amin.eft_bmnotes@gmail.com\install.rdf, version 2.5B

Read It Later version 2.1.1
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\isreaditlater@ideashower.com\install.rdf, version 2.1.1

As you can see, the path to each extension in this group of 9 terminates with an "install.rdf" file. This supports your observation that, at least for the moment, the PSI is looking for version numbers in "install.rdf" and may not know what to do with .xpi files.

My "Secure Browsing" overview table says Mozilla Firefox 5.x loads 19 programs/plug-ins. When you factor out the browser itself, AFP (NPAPI), Java Runtime Environment, and Windows Media Player, the remainder is 15. Subtract the 9 actual installations of Firefox extensions, which are reported correctly in the table of Scan Results, too. That leaves 6 entries reported under Mozilla Firefox 5.x in the Secure Browsing table on my PC, which actually belong to SeaMonkey--information that is tedious to display, because you must drill down through the "Secure Browsing" menus to see it. Realistically considered, from my perspective, the potential for confusion is quite high; and the maintenance costs for Secunia's developers may be prohibitive. Secunia has always assigned top priority to those unpatched browser plug-ins such as JRE and Flash, which the bad guys are exploiting with their increasingly sophisticated, automated crapware. That is as it should be.

Someone with technical expertise about Microsoft extensions for Firefox is needed to address your misgivings about the .NET Framework Assistant. I did not include WPF, because that's a plug-in for Mozilla browsers. I'm not qualified to discuss security implications of either add-on; however, I share your interest in learning from someone knowledgeable about them.

Thank you for recommending Colourful Tabs. I promise to take them for a test drive.

Best regards to all,

Skeptia-9
WinXP Home SP3, 32-bit
PSI Tray Version 2.0.0.3003
Firefox Version 5.0.0.4183
Was this reply relevant?
+1
-0
Anthony Wells RE: Firefox 4.0.x Extensions
Expert Contributor 22nd Jun, 2011 21:05
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 22nd Jun, 2011 21:14
Hi Skeptia-9 ,

Thanks for your update . As for my attempts with IE Tab 2 , support see the add-on on their system using the .dll file but no sighting on mine ; I sent them the install.rdf file but that would not work at all for them ?!!! So I'm gonna tell them to leave it there .

As you say , time to let things settle for now unless some technical genius can suggest a way forward . Plenty of more important things for us all to do ; personally I blame bjm !!

Thanks for the tip on Better Privacy ; I was waiting for the Ff to auto update , but have just been and got version 1.61 from Netticat and although there is no compatibility mentioned in the changelog , it is back up and running . Great :))

Take care and be colourful .

Anthony

PS: if you have time , you might want to check other "add-ons" have not in fact been superseded by a replacement version and so won't update .This has happened in one of my themes .

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+1
-0
bjm__ RE: Firefox 4.0.x Extensions
Member 23rd Jun, 2011 18:12
Score: 64
Posts: 374
User Since: 9th Mar 2009
System Score: 100%
Location: US
Last edited on 23rd Jun, 2011 18:18
on 22nd Jun, 2011 00:19, Anthony Wells wrote:
Hi bjm ,
FF 4.0.1 has just updated me to the full release with the Program Files folder showing the .exe as version # 5.0.0.4183 . This version is the security fix/patch for WebGL etc .
I posted here :-
http://secunia.com/community/forum/thread/show/990...
Maybe you were trying to upload the Beta or RC and not the full release !!
EDIT : I have just sent the 5.0.0.4183 version .exe file to support using the missing program link . Re-Edited the version number


Re: My problem w Program missing? Suggest it here!... not working.
I forgot on my GUI ~ Suggest it here!... works OK from 'Insecure / End-of-Life' & no workie from Patched / Secure Browsing. IDK ---as you wrote "Plenty of more important things for us all to do"
Re: u wrote > personally I blame bjm !!
So let it be written ~ So let it be done
Wishing now I called Topic Firefox 4.0/5.0 missing Add-ons
I trust as time and resources permit Secunia Support will resolve as required.
My Plug-ins (Adobe, Java, etc.) still report and those are the ones that usually get into trouble.
I don't recall an/my Extension(s) ever reported as vulnerable.
Regards to all
Peace be upon you
wondering, should I leave Topic open or ?
Was this reply relevant?
+0
-0
Anthony Wells RE: Firefox 4.0.x Extensions
Expert Contributor 23rd Jun, 2011 18:27
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi bjm ,

We seem to have been getting a load of spam tag-ons recently ; you could wait for a genie to appear and/or the thread auto-locks after 7 days of non-activity . I would say let the the quantity of spam in your box be your judge and jury .

I have referred to this thread in mailing support and you have your own contact there , so... pateince will definitely be a virtue :))

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+1
-0
bjm__ RE: Firefox 4.0.x Extensions
Member 24th Jun, 2011 16:49
Score: 64
Posts: 374
User Since: 9th Mar 2009
System Score: 100%
Location: US
Last edited on 24th Jun, 2011 16:50
on 23rd Jun, 2011 18:27, Anthony Wells wrote:
Hi bjm ,
We seem to have been getting a load of spam tag-ons recently ; you could wait for a genie to appear and/or the thread auto-locks after 7 days of non-activity . I would say let the the quantity of spam in your box be your judge and jury .


OK...was unaware (or I forgot) thread auto-locks after 7 days of non-activity.
Thanks
Cheers

Was this reply relevant?
+0
-0
Skeptia-9 RE: Firefox 4.0.x Extensions
Member 24th Jun, 2011 16:56
Score: 42
Posts: 23
User Since: 15th Mar 2010
System Score: N/A
Location: US
Hello Anthony, bjm, Websafe, et al.:

Anthony, please give your IETab2 a second chance before you toss it overboard. I just installed it successfully on my XP box. The path is

C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xxxxxxxx.default\ext ensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB}\plu gins\npietab2.dll

The PSI recognized it and displayed a balloon message with details about 2 minutes after I restarted Firefox. Well done, Secunia!

I see a version discrepancy, though, which could precipitate confusion. The PSI is displaying the version of "npietab2.dll" as 2.2.0.1, which is what I see when I right-click the DLL and look at "Properties." However, the version noted at this address

https://addons.mozilla.org/en-US/firefox/addon/ie-...

is version 3.5.9.1. The FF Add-ons Manager calls it version 3.5.9.1, too.

The "install.rdf" file you mentioned also claims to be version 3.5.9.1.

<RDF><Description about="urn:mozilla:install-manifest"><em:id>{1BC9B A34-1EED-42ca-A505-6D2F1A935BBB}</em:id><em:name>I E Tab 2 (FF 3.6+)</em:name><em:version>3.5.9.1</em:version><em :description>Enhanced version of the classic IE Tab that includes support for FireFox 3.6 and beyond.</em:description><em:creator>Hong Jen Yee (PCMan)</em:creator><em:developer>ietab.net</em:de veloper>Snip.

And for bjm: The title of the thread you started looks just fine to me. You cannot be held responsible for it being freighted with verbosity from the likes of Anthony and me. Your thread sparked considerable interest and thoughtful discussion. So you deserve a large share of praise, too!

Best regards to everyone,

Skeptia-9
WinXP Home SP3, 32-bit
Secunia PSI Tray Version 2.0.0.3003
Firefox 5.0.0.4183
Was this reply relevant?
+2
-0
GarretGood RE: Firefox 4.0.x Extensions
Member 24th Jun, 2011 17:43
Score: 0
Posts: 1
User Since: 24th Jun 2011
System Score: N/A
Location: US
The FF 4.0x has given me problems with most of my plugins and widgets do not transfer over. Does anyone know how often the add-ons update in order to be compatible with the FF 4.0?
Was this reply relevant?
+0
-0
Anthony Wells RE: Firefox 4.0.x Extensions
Expert Contributor 24th Jun, 2011 17:50
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hello again Skeptia-9 ,

Responding to your extra freight , the path you describe to the npietab2.dll is the one I loaded to support . It is a "plug-in" and can be found as such if you go in Ff to Tools->Add-ons->Plugins and is version 2.2.0.1 . This resolutely refuses to display in the PSI for me while support had an instant pick up as you did ; they cannot reproduce or offer any suggestions for me .

I also uploadeded the install.rdf to see if that would correct/alter anything to conform to what is displayed as version 3.5.9.1 in the Tools->Add-ons->Extensions ; support told me that they could not use/get anything from the file .

I have a the Chrome stablemate vareity of IE Tab (version 2.5.24.1) , from the same developer stable , loaded in Chrome . It is installed as a "plug-in" version 1.0.0.1 at the pathway :-

C:\DocumentsandSettings\ME\LocalSettings\Applicati onData\Google\Chrome\UserData\Default\Extensions\x xxxxxx\2.5.24.1_0\plugin/blackfishietab.dll

It also is found in "Eextensions" but have not located it's specific installation pathway , but would assume it is the same as in the "Extensions" module the version # is 2.5.24.1 .

Support said they had listed IE Tab 2 for both Ff and Chrome , but they are not exactly the same and install separately , even if they appear to follow similar installation file patterns .

As I run the Dev and Canary channels of Chrome I do not get a "secure browsing" display for Chrome (unless my Chrome Frame installation matches the Stable Browser version ) and as Chrome updates itself or stops an insecure "add-on" in principle , I have not suggested the IE Tab for Chrome .

I still use both of the "Add-ons" but have given up on getting the correct display for Ff .

Thank you for your continued interest .

Keep on (freight) trucking bjm and kick those tyres !!

Take care y'all .

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+2
-0
Anthony Wells RE: Firefox 4.0.x Extensions
Expert Contributor 24th Jun, 2011 17:57
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 24th Jun, 2011 17:58
Hello GarretGood ,

Firefox 4.0.x is insecure and you need to patch the vulnerability . The security solution is to upgrade to version 5.0 or downgrade to 3.6.18 . If you need help to do this post back .

The answer to your question is that it depends entirely on the developer and only that person is able to answer your question ; so either set 5.0 to auto-update your "Add-ons" or visit the developers' website(s) .

Whatever , do something about changing from 4.0 . from being insecure .

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+2
-0
Skeptia-9 RE: Firefox 4.0.x Extensions
Member 24th Jun, 2011 19:46
Score: 42
Posts: 23
User Since: 15th Mar 2010
System Score: N/A
Location: US
Hello again, Anthony:

Many thanks for your verbose description of your experience with IETab2. I originally decided to install the extension out of curiosity to see if I could reproduce what happened to you. Since I could see it in the FF Add-on Manager under Extensions, looking under Plug-ins never occurred to me. I thought all was well. Instead, I created a situation that is outside my previous experience with Mozilla browser add-ons. IETab2 installed both as an extension and a plug-in! That's correct; I've got both. (But Google's Chrome is not installed on my PC.) Firefox recognizes the extension as version 3.5.9.1 and the plug-in as version 2.2.0.1! The PSI reports the plug-in, not the extension, in both the table of Scan Results and the Secure Browsing table.

WOW! Did I ever overlook details!

Since I will never use IETab2, I am going to uninstall. When I need to go surfing with IE8, I am accustomed to doing so with a "Drop My Rights" version of IE8; and the Microsoft Update icon lives happily on my Start Menu.

I hope GarretGood has followed your advice and is now secure with Firefox 5.0.0.4183.

Good luck to all,

Skeptia-9
WinXP Home SP3, 32-bit
Secunia PSI Tray Version 2.0.0.3003
Firefox 5.0.0.4183
Was this reply relevant?
+1
-0
Anthony Wells RE: Firefox 4.0.x Extensions
Expert Contributor 25th Jun, 2011 17:41
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi ,

@GarretGood ,

How are you getting along ??

@Skeptia-9 ,

Thanks for trying to help . Past experience has taught that cryptic posts with or without shortcuts lead to confusion and so I post as if talking to myself :ie: a reasonably intelligent computer use with limited technical ability . I do have an excellent memory and have been taught good computer habits ; so if I have the time available , I am happy to pass on my experiences , but you make of them what you will :))

In my "last post" to you , what I explained took far longer to read and be written than the mouse clicks used to accomplish my dialogue with support . The same goes for updating my software , after a warning from the PSI or an OSI email that there are security patches available , a few mouse clicks and using the programme's internal updater or the "official" installer direct from the website or (very occasionally) via the PSI link , I can see what I am installing (in real time) and it is invariably quicker and with less hassle than other ways ; that is not because I'm a geek , but is just good practice .

Busy this wonderfully hot and sunny weekend and as the sun won't go down behind the yardarm for some hours , I am about to adopt one of the many well thought out (French) customs to start mon apéritif .

Slainte et Bonne soirée .

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
tomjamesdc RE: Firefox 4.0.x Extensions
Member 28th Jun, 2011 18:08
Score: 0
Posts: 1
User Since: 28th Jun 2011
System Score: N/A
Location: US
on 24th Jun, 2011 17:43, GarretGood wrote:
The FF 4.0x has given me problems with most of my plugins and widgets do not transfer over. Does anyone know how often the add-ons update in order to be compatible with the FF 4.0?


I have had the same problem, and decided to go back to the 3 series until they get it worked out.
Was this reply relevant?
+0
-0
taffy078 RE: Firefox 4.0.x Extensions
Contributor 28th Jun, 2011 19:28
Score: 408
Posts: 1,314
User Since: 26th Feb 2009
System Score: 100%
Location: UK
Last edited on 28th Jun, 2011 19:29
I hate to venture into what clearly is a very technical thread but does this article shed any light on the problems with Firefox v.4?

http://news.softpedia.com/news/Firefox-4-Will-No-L...

(I posted this link in http://secunia.com/community/forum/thread/show/995...)

If it's not relevant, please be gentle with me! :0)

--
taffy078, West Yorkshire, UK

Desktop: Compaq Presario (OEM) 32 bit / AMD Athlon / 2 GB RAM
XP Home - SP3/ IE8/ Norton IS - Secunia PSI v2.0.0.3003

Laptop: Win 7 / IE11 / PSI v2.0.0.3003
Was this reply relevant?
+2
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability