361483 - Remove fright extension which causes system restart without UI to abort

Status: RESOLVED FIXED

(addons.mozilla.org Graveyard :: Administration, defect)

Description

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1) Gecko/20061010 Firefox/2.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1) Gecko/20061010 Firefox/2.0

The extension 'Fright' wants to be humour, because it is hosted at AMO, people will normally trust someone who send them a link to this extension and do the one click for installing it. After the restart, a few javascript alerts will pop up and a fake 'formating your hard drive' will be shown. After that, the system will be restarted without a Firefox UI/chrome to stop that. So data in other applications are lost. For that reason it should be banned from AMO (at least until the author removes this part).

Reproducible: Always

Comment 1

[chris hofmann]

removing security sensitive flag, since the reported problem is public.  this also will help to speed the investigation of the problem and figure out a solution.

Comment 2

[Cameron]

WORKSFORME 

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1) Gecko/20061010 Firefox/2.0

Extension installs, shows a bunch of alerts and scary progress bars, then says it's going to restart my pc, I have to click okay (no other options) but nothing happens.

Could Norton Internet Security 2005 be protecting me? Perhaps because I was running Fx with -no-remote ?

Comment 3

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

I have the problem with 1.0 (at AMO) and 1.0.0.2 (in Approval Queue) and used MOZ_NO_REMOTE. The restart.bat from the extension pops up for a part of a second. This will only happen during the first run of the extension in the profile, so installing 1.0.0.2 would do no restart.

No Norton software present.

Comment 4

[Justin Scott [:fligtar]]

This extension did restart my Windows VM. It's a good extension for a joke (if you try to ignore the frequent grammatical issues), but I'm not really sure it should be public. This would really scare a basic user and some of the dialogs sound like it might be Firefox talking to them, which they'd then associate with Mozilla doing this.

I'm going to move it to the sandbox unless I hear objections by later today!

Comment 5

[Justin Scott [:fligtar]]

Moved to sandbox and author e-mailed.