Microsoft update leaves Firefox users unexpectedly vulnerable

Mozilla Firefox

An add-​​on that Microsoft silently slipped into Mozilla’s Firefox last February leaves that browser open to attack, Microsoft’s secu­rity engi­neers acknowl­edged ear­lier this week.

via Sneaky Microsoft plug-​​in puts Firefox users at risk ( — Internet — Software — Security ).

I sup­pose some­where in Microsoft’s licens­ing lan­guage there is an acknowl­edg­ment and release of lia­bil­ity for actions like this. Even so, I cer­tainly don’t think most Microsoft cus­tomers expect updates to so directly com­pro­mise 3rd-​​party pro­grams like Firefox — and I won­der what Microsoft’s legal respon­si­bil­ity would be, even with their licens­ing lan­guage, should this kind of action truly result in a major loss?

Related articles

    About the Author

    I'm a PhD student in the history of science, focusing on intellectual property and other law & technology issues. I'm also a recent law school graduate and a former developer/sysadmin at a biotech non-profit. For more about me and my work, see krisnelson.org.