desktop-packages team mailing list archive

[Launchpad Bug Tracker <1469548@xxxxxxxxxxxxxxxxxx>]

Status changed to 'Confirmed' because the bug affects multiple users.

** Changed in: unity-firefox-extension (Ubuntu)
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to unity-firefox-extension in Ubuntu.
https://bugs.launchpad.net/bugs/1469548

Title:
  one-click installation of software is a security risk

Status in unity-firefox-extension package in Ubuntu:
  Confirmed

Bug description:
  since upgrading to ubuntu 14.04 LTS release i have noticed that, in
  firefox (38.0+build3-0ubuntu0.14.04.1), i am offered to install
  software for sites i visit, including launchpad and facebook
  (messenger).  this software can be installed with one click and
  without any user authentication.  this seems like a huge security risk
  to me.  what's more, after installing the software, if i want to
  remove it i am required to enter my password.  this process makes no
  sense to me and there should be at least a password required to
  install the software in the first place.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/unity-firefox-extension/+bug/1469548/+subscriptions