{"id":101777,"date":"2021-10-26T10:22:35","date_gmt":"2021-10-26T08:22:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/mozilla-udalila-dva-populyarnyh-dopolneniya-blokiruyushhih-zagruzku-obnovlenij-k-firefox"},"modified":"2021-10-26T13:22:57","modified_gmt":"2021-10-26T11:22:57","slug":"mozilla-udalila-dva-populyarnyh-dopolneniya-blokiruyushhih-zagruzku-obnovlenij-k-firefox","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/mozilla-udalila-dva-populyarnyh-dopolneniya-blokiruyushhih-zagruzku-obnovlenij-k-firefox","title":{"rendered":"Mozilla has removed two popular add-ons that block updates to Firefox","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Mozilla has announced the removal of two extensions \u2014 Bypass and Bypass XM \u2014 from the addons.mozilla.org (AMO) directory. These extensions had a total of 455,000 active installations and were marketed as tools to access content behind a paywall. They utilized an API Proxy to modify traffic, allowing control over web requests made by the browser. In addition to their stated functions, these extensions used the API Proxy to block requests to Mozilla's servers, preventing updates to Firefox and leading to the accumulation of unaddressed vulnerabilities, which could be exploited by attackers.<\/p>\n
Notably, in addition to preventing Firefox updates due to the activities of the extensions in question, there was also an interruption in the updating of remotely configured browser components, and access to block lists was closed, which would allow the disabling of malicious extensions already installed on users' systems. Users are advised to check their current browser version \u2014 if automatic updates have not been specifically disabled in settings, and the version differs from Firefox 93 or 91.2, manual updating should be performed. In the new releases of Firefox, the Bypass and Bypass XM extensions are already blacklisted, so they will be automatically disabled after the browser is updated.<\/p>\n
To prevent the future hosting of malicious extensions that block updates and block lists, changes have been made in the code starting from Firefox 91.1, implementing direct requests to update and verification servers if a proxy request fails. To extend this protection to users of any version of Firefox, a mandatory system extension called \u2018Proxy Failover\u2019 has been prepared, which prevents the improper use of the API Proxy to block Mozilla services. Until the proposed protection method is widely deployed, the acceptance of new extensions that use the API Proxy in the addons.mozilla.org directory has been suspended.<\/p>\n