ie8 fix
madison

Mozilla blocks McAfee Firefox extension, citing "explosive crashes"

By | October 5, 2011, 6:35am PDT

Summary: Mozilla’s new rapid-release schedule for Firefox is playing havoc with security software companies. A McAfee add-on has been blocked because of crashes with recent Firefox releases, and Norton has had to issue multiple compatibility updates.

Mozilla has taken the rare step of blacklisting a McAfee extension for the Firefox browser.

The Firefox add-ons page for McAfee ScriptScan displays a large red X and notes that the add-on “causes a high volume of crashes.”

Mozilla’s advisory says, “Users are strongly encouraged to disable the problematic add-on or plugin, but may choose to continue using it if they accept the risks described.”

The bug report for the issue goes into greater detail. The report is titled “Blocklist McAfee ScriptScan for Firefox and McAfee SiteAdvisor due to explosive crashes,” and it notes that two separate bugs highly correlated with the two add-ons caused 3,432 and 6,691 crashes in the week ending September 28. The issues reportedly affect users of Firefox 6.0.2 and the just-released Firefox 7.

A comment in the bug report, dated September 28, suggests that the problem is even worse than those numbers would suggest:

We had 1555 processed crashes on 6.* yesterday, with the 10% throttling rate, this means that roughly 15,000 crashes happened during a single day with this signature!

The list of blocked add-ons includes an entry for McAfee SiteAdvisor from last March. Three Microsoft products, including the Bing Bar, were blocked in October 2010 at Microsoft’s request, to address security issues.

This isn’t the first time that McAfee’s add-on has been flagged for performance or reliability issues. An IBM TechNote from 2008 reports that an earlier version of ScriptScan “causes a four to seven seconds delay in rendering pages” from IBM’s WebSphere application. In that case, according to IBM, McAfee acknowledged the performance issues with the tool.

A support thread at Mcafee.com acknowledges the current issue and says “McAfee is aware of it, has a bug filed and is working with Mozilla to address the problem.”

This sort of incompatibility isn’t surprising. Mozilla’s decision to shift to a rapid-release schedule plays havoc with the makers of browser add-ons. On October 1, Symantec updated its Norton Toolbar and Norton Vulnerability Protection add-ons for Firefox. That followed a “minor product update” on September 20. A separate support note advised “This patch is necessary to prepare your Norton 2012 Product for the upcoming Firefox 7 compatibility update that we will release to Norton Products at a future date.” The Firefox 7.0 Compatibility Patch was released on September 27.

Related posts:

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Ed Bott is an award-winning technology writer with more than two decades' experience writing for mainstream media outlets and online publications.

Disclosure

Ed Bott

Ed Bott is a freelance technical journalist and book author. All work that Ed does is on a contractual basis.

Since 1994, Ed has written more than 25 books about Microsoft Windows and Office. Along with various co-authors, Ed is completely responsible for the content of the books he writes. As a key part of his contractual relationship with publishers, he gives them permission to print and distribute the content he writes and to pay him a royalty based on the actual sales of those books. Ed's books written prior to fall 2011 have been distributed by Que Publishing (a division of Pearson Education) and by Microsoft Press. As of November 2011, Ed is a partner in the independent publishing company Fair Trade Digital Exchange, which exclusively publishes his books.

On occasion, Ed accepts consulting assignments. In recent years, he has worked as an expert witness in cases where his experience and knowledge of Microsoft and Microsoft Windows have been useful. In each such case, his compensation is on an hourly basis, and he is hired as a witness, not an advocate.

Ed does not own stock or have any other financial interest in Microsoft or any other software company. He owns 500 shares of stock in EMC Corporation, which was purchased before the company's acquisition of VMware. In addition, he owns 350 shares of stock in Intel Corporation, purchased more than two years ago. All stocks are held in retirement accounts for long-term growth.

Ed does not accept gifts from companies he covers. All hardware products he writes about are purchased with his own funds or are review units covered under formal loan agreements and are returned after the review is complete.

Biography

Ed Bott

Ed Bott is an award-winning technology writer with more than two decades' experience writing for mainstream media outlets and online publications. He's served as editor of the U.S. edition of PC Computing and managing editor of PC World; both publications had monthly paid circulation in excess of 1 million during his tenure. He is the author of more than 25 books on Microsoft Windows and Office, including the recently released Windows 7 Inside Out.

37
Comments

Join the conversation!

Just In

RE: Mozilla blocks McAfee Firefox extension, citing
bb_apptix 11th Oct
Mozilla???s new rapid-release schedule for Firefox is playing havoc with a lot of add-ons and plug-ins.

In a related matter, a McAfee update blue-screened my PC, twice. The first time, I did a system restore and a manual update of McAfee. Everything was fine for a week or so, and then another update caused another blue screen.

Out with McAfee, in with Microsoft Security Essentials.

I'm alos liking Firefox less and liking IE9 more.
0 Votes
+ -
Just upgraded
facebook@... Updated - 5th Oct
Most of my key plugins are incompatible, including Dejaclick. Thankfully, I still have SolarWinds and IE9's built-in network analyzer.
0 Votes
+ -
@facebook@... Just bump the MaxVersion flag in the Extension's XPI file. It's dead simple to do.
@bradavon NO, do not edit the extension. Just turn off Firefox's compatibility check: http://kb.mozillazine.org/Extensions.checkCompatibility
Firefox sync isn't working either. Everyone on Twitter is getting unknown error when trying to connect to sync server. No word on it from Mozilla it is like they don't care.
@Randalllind I'm getting the error as well. Checking the server status they are still working on it. The servers are being overloaded from what the status indicated.
@shinji257 AFAICT, the issues are supposed to be fixed by tomorrow.
@Randalllind ... They d NOT care; you're rght!
0 Votes
+ -
Eh. So, then what's the big deal? Seems like a cruddy addon to begin with. Not really needed.
0 Votes
+ -
Contributr
@Cylon Centurion

And when Firefox updates itself, it causes a crash. At least 15,000 such crashes in one day. You want that happening in your organization?
0 Votes
+ -
IE autodestructs, too
JimboNobody 5th Oct
I get frustrated with IE, which is our corporate mandated browser. It breaks for no apparent reason such that I can't reach our HR website, nor use our VPN (amongst other things). The only way I can get connected is to download Firefox (just checked ... I'm on 7). The support folks get in and fiddle with settings and IE works for a few days, then self-destructs again. That stinks.
@Ed Bott No, but after seeing what McAfee AntiVirus Enterprise can do, I would rather not have it in my organization at all.
@Cylon Centurion: Agreed. It looks pointless and IT Pros should've disabled it to start with.
I don't believe that crashing a lot would be considered a performance issue, more of a stability one. Generally if you have a performance issue you function but just take longer.
0 Votes
+ -
Contributr
Thanks
Ed Bott 5th Oct
@RandomEngy

My point was that the extension in question had been flagged before. I edited that sentence to make the point clearer based on your feedback. Thanks.
0 Votes
+ -
@RandomEngy

But, if your organization uses Firefox for internal `web` apps, crashes does impede productivity; and management won't have any of that.
Chrome........I yanked firefox from our 1-and-only Windoze system a few weeks ago.

Of course, Firefox is running fine on our Ubuntu machines....
@gregebert

I still prefer Opera to any of the others.
McAfee has always made Bloatware with these types of problems. Along with Norton they publish long lists of things to disable so their Bloat can run. Wise up folks, there are other alternatives that don't make you slaves to their exceptions
0 Votes
+ -
RE: Mozilla blocks McAfee Firefox extension, citing
LoverockDavidson_-24231404894599612871915491754222 5th Oct
I wouldn't trust a McAfee firefox extension. I'd opt not to install it if that was a possibility.
I disabled every add-on except my 1password extension and it still kept crashing. I went back to Safari until they fix it. I don't have the McAfee extension as I am on a Mac. Firefox has also been hogging a huge amount of my resources for a long time. I like it but I can't keep up with the crashes.
I stopped using both McAfee and Norton antivirus around 2005 when they became based on IE because they would be always disabled by Spyware/Adware before the 2 week trial period was even over. They were also resource hogs. I've been using AVG antivirus for years with no such problems.
(sarcasm)

I hope Mozilla does not do a `Microsoft on Chrome` on McAfee.

(/sarcasm)

(`Microsoft on Chrome` means deleting a competing product from the user's machine by means of a `defective AV signature`).
I figure Fire Fox can do what it wants as I have finally given up on them. I now use Google Chrome and McAfee Site Adviser works fine there, on IE, and even Opera. I conclude that this is a Fire Fox problem. BTW, my FF crashed even with McAfee disabled.
Interestingly, the minor update predates the Norton update on 1st Oct - "On October 1, Symantec updated its Norton Toolbar and Norton Vulnerability Protection add-ons for Firefox. That followed a ???minor product update??? on September 20."
I don't have the McAfee extension as I am on a Mac, but after the last FF update, I crashed all day long, even after removing every extension but 1Password. I can't use it until they fix the issue and it has been a memory hog since version 6.
Rapid upgrade schedule has rendered the browser mostly useless at this point. Multiple non-responding events with threads contending for I/O and network access. What a mess. I've been a loyal user for years and I'm ready to bolt to Chrome.
0 Votes
+ -
This is good news!

Security software browser add-ons are never needed and just add bloat to the browser. They scan at the http level anyway. I always disable them.

Firefox will disable add-ons installed by third parties by default in one of the upcoming Firefox releases. More good news.
I wish Mozilla would add browser toolbars to their block list.

I doubt that Norton toolbar does anything particularly useful.
2 WORDS: Install "LinkExtends Toolbar"; and "Presto" all these security tools plus many others all work seamlessly and minimal wasted room.
The Firefox 6 and 7 block the Trend Micro anti-virus extensions and the Java extensions. Not acceptable in my book.
0 Votes
+ -
Why blame Mozilla?
GR8BigCheese 5th Oct
Why are you blaming Mozilla for McAfee's bad programming and inadequate testing?
@GR8BigCheese

Exactly.

In case you are not an usual zdnet reader - or just didn't noticed it - it looks like these guys are being paid by Google to promote Chrome, hence it's normal when there is something to say about Mozilla/Firefox they will say the worst possible things, since their main goal is that Chrome overtakes Firefox.

Certainly McAfee should take more caution with who they hire to create their Firefox add-ons, there are thousands of addons which works fine since the FF 2.x days...
0 Votes
+ -
(NT)
IMNSHO, this "rapid release" program is just plain stupid, because too many add-ins break too often; you cannot possibly expect all those authors to keep up with this rate of change. I - and I'm sure many others - am beginning to hate FF.
0 Votes
+ -
Using NoScript suffices for me.
Dietrich T. Schmitz * Your Linux Advocate 6th Oct
nt
I have no problem with McAfee Siteadiver ! I think moz needs to get its sh*t together and work with the folks that make the addons so they don't break them!I wont use FF with out it , as most of us only use it for the extensions!
Mozilla???s new rapid-release schedule for Firefox is playing havoc with a lot of add-ons and plug-ins.

In a related matter, a McAfee update blue-screened my PC, twice. The first time, I did a system restore and a manual update of McAfee. Everything was fine for a week or so, and then another update caused another blue screen.

Out with McAfee, in with Microsoft Security Essentials.

I'm alos liking Firefox less and liking IE9 more.

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix
ie8 fix