Switching between Firefox 3.6 & TenFourFox -> enables Java plugin in Firefox again?
Switching between Firefox 3.6 & TenFourFox -> enables Java plugin in Firefox again?
Read developer Coffee blog, could not post there, so then I'll try to post it here:
Just to look at it and see if I'm not wrong.
Kept my MRJ and Java plugins in Firef0x 3.6 off, discovered some
time ago that switching back from TFF tot FF enabled my Java / MRJ
plugin Again (!%?), don't get me wrong here, I really like the TFF
project.
Meanwhile got struck by FLB malware (??? while trying all the time
to avoid that, Java always disabled, except for short use
sometimes: Cyberduck).
So I cant check mentioned above anymore because of modified OSx
(got rid of Java, exit plugins from FF package contents, almost
emptied library/internetplugins folder (get rid of the
JavaPluginCocoa.bundle-alias !, well at least I did without
experiencing trouble on this modified tmp PPC Leopard mac.) And in
the meanwhile had fun trying Classila on my powerbook G3 (thanks to
the malware guys!).
- Don't know for sure if this is really happening between TFF and FF
- Don't know if one could be struck by having JAVA / MRJ plugin enabled while Java prefs are disabled ( is there an usable in-between connection via the internet plugins folder? Java / cocoa / flash / quicktime).
Maybe I'm wrong, hopefully some expert on this could exclude
this possibility,
or is this actually a problem to address to FF?
Bye,
Bye, MacPpcNL
Comments are currently closed for this discussion. You can start a new one.
Keyboard shortcuts
Generic
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
Comment Form
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
Support Staff 1 Posted by Cameron Kaiser on 15 Apr, 2012 11:31 PM
I'm having trouble following here. Plugins ship disabled in TenFourFox, which is the default state (and the only supported state). Java does not get executed because it too is a plugin. If you enabled plugins for Flash, for example, then you did so at your own risk; if that's what you're referring to, I strongly suggest you turn them back off and clear your system out. Security is exactly why it ships in this fashion.
If you are referring to Java in your operating system, then there is totally something else going on; TenFourFox doesn't even touch that.
If I have misunderstood what the actual concern is, please clarify.
2 Posted by PPCMacNL on 15 Apr, 2012 11:59 PM
That's nice, did not know of a actual soon reply, really kind.
So this is the case.
1) Using firefox 3.6 not so much anymore, only if I want to see some Tv for example
2) Using tenfourfox for a safe internet experience, like a financial transaction or just to browse the web in a more safe way.
When I start FF 3.6 again it's opening with a window like If I'm a new user, I do skip that one and just go along browsing.
Starting TFF again after having used FF gives me the same routine with the "Hi-routine".
So far everything looked fine.
One month ago I discovered that in the switching process from TFF to FF my disabled JAVA / MRJ plugins of FF were enabled again while they were disabled before switching to TFF.
The plugins I'm mentioning are just there as a part of the standard FF package when you download FF.
The actual problem I'm heading at is the fact that its seems that plugins that were disabled are enabled again after switching back tot FF. While other pref-settings have been the same. So, if it's true that other people experience this as well, them this could be an issue because you don't expect this behaviour and here is a good reason to disable the Java plugins in FF.
So maybe someone could check this behaviour,
and if its true then its maybe good that people realise they have to monitor the plugin settings every time they temporarily are switching back to FF.
The rest of my story is about removing plugins under Mac osx for safety reasons , just to prevent myself for having these kind of troubles again (so I did resolve my problem but do think of other people to ;-) .
I hope this explained my point in a better way?
Support Staff 3 Posted by Cameron Kaiser on 16 Apr, 2012 12:10 AM
I think some clarification is in order. TenFourFox masks plugins by default, but this is because it is specifically programmed to not run plugins with code that isn't in Firefox. Firefox doesn't do this and doesn't know how, because it's not programmed to. So it's entirely expected that plugins "turn on again" going back to Firefox because, strictly speaking, they were never "turned off" -- TenFourFox just refuses to run them by default, but Firefox does do so.
If this is what you mean, this isn't really a bug, just unexpected behaviour. Given that Firefox 3.6 will be unsupported after April 24th, it will shortly be a moot point since we wouldn't recommend using it anyway after that point (there are already known security issues it is vulnerable to which will not be fixed).
4 Posted by M Time on 16 Apr, 2012 01:12 AM
Hello Cameron Kaiser,
Many thanks for replying.
For I don't know why, my reply wont get in the message board.
Although you gave me the aswer, so hereby my last answer and thanks to you:
"Yes this is exactly what I mean!
Thanks for the explanation.
And I understand / do agree that these things can happen or can not be prevented by you,
and won't by the FF team for ending-being -interested-in-ppc (less understanding from my side).
So no one can help this is happening, but I think it is really important information for people to know that the "turn again" behaviour is there,
so that they can act on it (is that the right expression? -> leave the pref or change it)
Why switching between TenFourFox and Firefox 3.6 now and then?
Just Because I do want to see some Tv Video one in a while and for that I just need the use of a flash plugin (for which I know is vulnerable, but what can I do, no silverlight, html5 far away, quicktime not so common).
The choice to watch video content with an unsafe / not supported browser has not anything to do with this good project, choice and risk on the user, although one could see / mention this as a "just good to know interaction behaviour"?
My solution to this
(for switching people like me who want to use the flash functionality once in a while) :
Taking away (trashing) the problematic plugins from the Firefox 3.6 package contents
1) JavaEmbeddingPlugin.bundle
(/Applications/Firefox.app/Contents/MacOS/plugins/JavaEmbeddingPlugin.bundle)
2) MRJPlugin.plugin
(/Applications/Firefox.app/Contents/MacOS/plugins/MRJPlugin.plugin)
Did not remove the "DefaultPlugin.plugin", don't know what it does or if it's harmful.
After this you don't have to monitor the java-troubles anymore when switching between TenFourFox and Firefox anymore.
(and I realise there maybe is a lot more to worry about in the config section of FF3.6 in the future, but that's another topic for another place).
Thank you for the effort to answer this,
I already recommended people using TenFourFox
and will also inform them to be careful (TFF<->FF)
Best Regards
PPCMacNL "
========================================================================
--- On Mon, 4/16/12, Cameron Kaiser <[email blocked]> wrote:
> From: Cameron Kaiser <[email blocked]>
> Subject: Re: Switching between Firefox 3.6 & TenFourFox -> enables Java plugin in Firefox again? [Problems]
> To: [email blocked]
> Date: Monday, April 16, 2012, 2:10 AM
5 Posted by trollalert on 16 Apr, 2012 01:15 AM
troll alert!
6 Posted by PPCMacNL on 16 Apr, 2012 01:20 AM
On saying thanks for the answer and good work?
Don't understand this.
Bye bye
Support Staff 7 Posted by Cameron Kaiser on 16 Apr, 2012 01:34 AM
@trollalert, that's not helpful.
@PPCMacNL, if that's what you'd like to do, I think you would find Camino a better choice as the second browser in this case. Its settings will not interfere with TenFourFox, and it uses the same browser engine as Firefox 3.6, so it should act much the same. You can even have them running simultaneously.
8 Posted by PPCMacNL on 16 Apr, 2012 02:05 AM
Thanks again, don't like camino. Just like TFF.
I did solve my problem on this issue. Just wanted to verify and help.
Did find a replacement for FF already but to me that was a bit odd / nice to mention here, and it was also beside the point.
Appearently anyone can spam me with messages I don't want nor understand, or have time for. Can anyone from the support team push the big unsubscibe button here / trash my "account"? Could not find it.
Thanks again and keep up the good work! bye bye
Support Staff 9 Posted by Cameron Kaiser on 16 Apr, 2012 02:10 AM
You only receive messages from this thread. I'll close it now. Good luck.
Cameron Kaiser closed this discussion on 16 Apr, 2012 02:10 AM.