Why does Firefox now block Social Fixer???
Recently anytime I put together a new computer, I attempt to install Social Fixer and FireFox blocks the install. WHY???
Additional System Details
- Google Update
- NPRuntime Script Plug-in Library for Java(TM) Deploy
- Next Generation Java Plug-in 11.71.2 for Mozilla browsers
- Office Authorization plug-in for NPAPI browsers
- The plug-in allows you to open and edit files using Microsoft Office applications
- Picasa plugin
- Adobe Shockwave for Director Netscape plug-in, version 22.214.171.124
- Yahoo Application State Plugin version 126.96.36.199
- iTunes Detector Plug-in
- User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0
Firefox 43+ requires that extensions be digitally signed by Mozilla. This article has more information: Add-on signing in Firefox.
When I hit the download button, Firefox tells me this extension is not yet signed. I don't know whether or when the publisher of Social Fixer is planning to get the extension signed.
Until it does, you could make a temporary global exception to the signing requirement. Unfortunately, there's currently no way to only make an exception for specific extensions and therefore you need to be vigilant about bad add-ons creeping in if you do this.
(1) In a new tab, type or paste about:config in the address bar and press Enter/Return. Click the button promising to be careful.
(2) In the search box above the list, type or paste xpin and pause while the list is filtered
(3) Double-click the xpinstall.signatures.required preference to switch it from true to false -- note that this is for Firefox 43-45 only
> therefore you need to be vigilant about bad add-ons creeping in if you do this
Understood; but I'm not sure how to exercise that vigilance. If I have to explicitly grant permission for every add-on to be installed, I'm comfortable with that; but if a script can run without my knowledge and install one by stealth, the risk is exponentially greater.
Hi ronks, by design, externally discovered extensions require permission to become enabled. However, we're talking about possible malware, so it might be engineered to bypass the regular permission request page somehow. I suggest checking your extensions list every couple of weeks to see whether there are any surprises there, or anything you no longer need.
Thanks! I was able to find a workaround to the problem by moving to the Social Fixer Greasemonkey script from the "native" SFX add-on.