Day-to-day web browsing in Firefox is about to get a little different. According to a blog post by Michael Coates, Mozilla's Director of Security Assurance, Firefox will soon require users to click to play content from all third-party plug-ins—except for the latest version of Flash.
In other words, Silverlight videos or Java applets will no longer appear automatically. The way Firefox's Click to Play feature works right now, users are presented with a grayed-out box and a "click here to activate" link, like so:
Folks running Firefox should start seeing a lot of those boxes soon—but hopefully not too many. Coates says it'll be possible to set certain sites to "never run plugins or . . . always run plugins." Off the top of my head, I can think of one site you'd want to add to the white list right away: Netflix, which (somewhat bizarrely) uses Silverlight to stream video content.
The thinking behind Mozilla's decision is pretty easy to understand. As Coates points out, auto-running plug-ins can jeopardize performance and stability. Also, security holes in outdated or vulnerable plug-ins are a "common exploitation vector." There may be no stopping users from clicking the "activate" button and infecting themselves, but at least this way, it won't happen automatically.
|1. Ryszard - $603||2. Hdfisise - $600||3. Andrew Lauritzen - $502|
|4. Redocbew - $350||5. the - $306||6. SomeOtherGeek - $300|
|7. chasp_0 - $251||8. Ryu Connor - $250||9. mbutrovich - $250|
|10. YetAnotherGeek2 - $200|
|AMD's Radeon Software Crimson Edition: an overview||62|
|Asus updates Zenbook UX305 with a Skylake Core M CPU||14|
|Shuttle XPC Nano's svelte body is clad in black and gold||7|
|AMD ends driver support for non-GCN Radeon cards||53|
|Dell owns up to eDellRoot hole and provides removal instructions||14|
|MIT researchers say many popular Android apps call out covertly||9|
|Dell gets Superfishy by shipping PCs with self-signed root certificates||47|
|It's an early Black Friday deals extravaganza||34|
|Mozilla axes heavyweight Firefox themes and tab groups||59|