Microsoft .NET Framework update adds addon to Firefox

ID:79992
 
Aug 21 2009, 11:34 am (Edited on Aug 21 2009, 11:50 am)
If you updated your .NET Framework recently, you may notice a new addon in Firefox:

Microsoft .Net Framework Assistant 1.0

.NET Framework Assistant is for launching ClickOnce applications into a security sandbox (something like java VM's sand box). The launcher will prompt the user if they want to download the app and run it (like other ActiveX and java applets). It is safer than than downloading an exe and running it, because it is in a security sandbox.


Security Fix: Microsoft Update Quietly Installs Firefox Extension

Annoyances.org: Remove the Microsoft .NET Framework Assistant (ClickOnce) Firefox Extension

Is Microsoft embracing its Firefox users? Or is it sabotage--an irremovable addon full of security holes?

Regardless, it's done in the usual MS fashion; installed without notification, and a pain in the butt to remove.


<edit>
It looks like MS has released another update that allows the addon to be uninstalled through firefox. Because, you know, they totally didn't expect anyone to notice them dicking around in other web browsers.
</edit>
Aug 21 2009, 2:41 pm
The update that uninstalls the addon probably patches Firefox with some sort of Microsoft made security hole.
Aug 22 2009, 10:36 pm
While I love .NET, I don't EVER want anything similar to ActiveX controls to EVER take hold anywhere ever again. ActiveX controls are probably one of the worst things ever invented.