Blocklist RealDownloader add-on

RESOLVED WONTFIX

Status

()

RESOLVED WONTFIX
6 years ago
3 years ago

People

(Reporter: kmag, Unassigned)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Reporter)

Description

6 years ago
+++ This bug was initially created as a clone of Bug #845581 +++

Silently installed by the RealPlayer installer when run from the Fun4IM installer. Not entirely sure what it does.

RealDownloader: {34712C68-7391-4c47-94F3-8F88D49AD632}
Sent an email to the developers. Let's wait and see what they say.

Comment 2

6 years ago
Hi Kris and Jorge,

This is Dave Herrera, the QA Manager for RealPlayer. The RealDownloader is a component of RealPlayer and users would have to go through an install flow where our EULA is accepted and they know what is being installed. If there is a situation where RealPlayer is being installed without a user's knowledge, then I'd like to know about it. I've noticed that Fun4IM is not longer available for download in the top sites where it seems to have previously been distributed.

Kris, can you explain to me the install flow you saw, or provide a direct link to the Fun4IM installer? I'll investigate immediately and if there is a partner distributing improperly we'll take immediate action.

Thanks,

Dave Herrera
Sr. QA Manager, RealPlayer Engineering.
Thank you for your reply Dave.

Please note that we require all externally-installed add-ons to use our opt-in screen, as shown in this post: https://blog.mozilla.org/addons/2011/08/11/strengthening-user-control-of-add-ons/. This is a requirement even if the installer has an opt-in or opt-out of its own.

Comment 4

6 years ago
Created attachment 720021 [details]
Install_Add-on_Screen_RealDownloader

Comment 5

6 years ago
Jorge: Please see the attachment. That was with an install of RealPlayer 16, and the proper notifications were given in Firefox.

You'll also notice that the GUID {34712C68-7391-4c47-94F3-8F88D49AD632} is identical to Kris' GUID.

Is there a scenario you've found where we don't show this screen on Firefox launch?

Updated

6 years ago
Attachment #720021 - Attachment description: Install_Ad-on_Screen_RealDownloader → Install_Add-on_Screen_RealDownloader
(Reporter)

Comment 6

6 years ago
Dave,

See the description in bug 845581. When installed via the Fun4IM installer, the add-on is installed without the about:newaddon opt-in. If that's not your intent, you need to make it clear to your distribution partners that distributing your add-on in bundles that cause this behavior is not acceptable.
Dave, do you have any updates about this?
Depends on: 853435
Does Fun4IM still bundle the RealDownloader add-on? I have other contacts at Real that can look into this if this is still a problem.
(Reporter)

Comment 9

6 years ago
(In reply to Jorge Villalobos [:jorgev] from comment #8)
> Does Fun4IM still bundle the RealDownloader add-on?

Yes.
Our realnetworks contact has repeatedly stated that all of their affiliate installers are following our rules. Kris, do you have exact steps to reproduce the silent install?
Flags: needinfo?(kmaglione+bmo)
No longer blocks: 835676
(Reporter)

Comment 11

5 years ago
They seem to have migrated their RealDownloader users to an add-on with a new ID: {FCE04E1F-9378-4f39-96F6-5689A9159E45}
Flags: needinfo?(kmaglione+bmo)
The question from comment #10 is still pending, though. Are there any silent installs happening?
(Reporter)

Comment 13

5 years ago
Sorry. As I said in the email thread relating to this bug, the installer that I used the first time was apparently an ad disguised as the download button for the Fun4IM listing, and provides a different installer now, so I can't duplicate it.
OK, I'm closing this for now. If any more silent installs are detected, please open a new bug. I think in future cases we should also record the download URL and attach the installer so we have more reproducible information to work with.
Blocks: 845581
Status: NEW → RESOLVED
Last Resolved: 5 years ago
No longer depends on: 845581
Resolution: --- → WONTFIX
(Reporter)

Comment 15

5 years ago
This is bundled with the installer from vdownloader.com. When installed from there, about:newaddon is not triggered and the extension is enabled by default.
Status: RESOLVED → REOPENED
Resolution: WONTFIX → ---
(In reply to Jorge Villalobos [:jorgev] from comment #14)
> OK, I'm closing this for now. If any more silent installs are detected,
> please open a new bug. I think in future cases we should also record the
> download URL and attach the installer so we have more reproducible
> information to work with.

Please open a new bug and attach the installer.
Status: REOPENED → RESOLVED
Last Resolved: 5 years ago5 years ago
Resolution: --- → WONTFIX
(Assignee)

Updated

3 years ago
Product: addons.mozilla.org → Toolkit
You need to log in before you can comment on or make changes to this bug.