Remove fright extension which causes system restart without UI to abort


Status Graveyard
11 years ago
2 years ago


(Reporter: aryx, Assigned: fligtar)




User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1) Gecko/20061010 Firefox/2.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1) Gecko/20061010 Firefox/2.0

The extension 'Fright' wants to be humour, because it is hosted at AMO, people will normally trust someone who send them a link to this extension and do the one click for installing it. After the restart, a few javascript alerts will pop up and a fake 'formating your hard drive' will be shown. After that, the system will be restarted without a Firefox UI/chrome to stop that. So data in other applications are lost. For that reason it should be banned from AMO (at least until the author removes this part).

Reproducible: Always

Comment 1

11 years ago
removing security sensitive flag, since the reported problem is public.  this also will help to speed the investigation of the problem and figure out a solution.
Group: security

Comment 2

11 years ago

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1) Gecko/20061010 Firefox/2.0

Extension installs, shows a bunch of alerts and scary progress bars, then says it's going to restart my pc, I have to click okay (no other options) but nothing happens.

Could Norton Internet Security 2005 be protecting me? Perhaps because I was running Fx with -no-remote ?
I have the problem with 1.0 (at AMO) and (in Approval Queue) and used MOZ_NO_REMOTE. The restart.bat from the extension pops up for a part of a second. This will only happen during the first run of the extension in the profile, so installing would do no restart.

No Norton software present.
Ever confirmed: true

Comment 4

11 years ago
This extension did restart my Windows VM. It's a good extension for a joke (if you try to ignore the frequent grammatical issues), but I'm not really sure it should be public. This would really scare a basic user and some of the dialogs sound like it might be Firefox talking to them, which they'd then associate with Mozilla doing this.

I'm going to move it to the sandbox unless I hear objections by later today!
Assignee: nobody → fligtar

Comment 5

11 years ago
Moved to sandbox and author e-mailed.
Last Resolved: 11 years ago
Resolution: --- → FIXED
Component: Add-ons → Administration
QA Contact: add-ons → administration
Product: → Graveyard
You need to log in before you can comment on or make changes to this bug.