Important update and workaround Thursday, June 4, 2009 at 7:09 pm Windows Vista Annoyances Discussion Forum Posted by lbecque (8 messages posted) I just discovered that before I ran the tests mentioned in my message above that I had already changed the default setting in Firefox for this extension under Tools, Add ons, .NET...., options to turn ON the 'prompt before running ClickOnce applications'. By default, this option is turned off and that is unsafe. Everyone should at least turn on the prompt as a precaution if you haven't already uninstalled or disabled the extension. With the prompt turned on it is just like any other link that asks 'do you want to run this application'. So the real problem here is that MS installed this update silently and left this option turned off, but it is easy to correct. Furthermore, I tested this with IE and it also runs by default. I can't see how to turn it off in IE. This is another problem. Written in response to: Is this really a vulnerability or just hype? Results of my tests, check the facts. (lbecque: Thursday, June 4, 2009 at 4:04 pm) Responses to this message: re: Important update and workaround (Steve: Thursday, June 4, 2009 at 7:50 pm) All messages in this thread [show all] Is this really a vulnerability or just hype? Results of my tests, check the facts. (lbecque: Thu, Jun 4, 2009, 4:04 pm) Important update and workaround (lbecque: Thu, Jun 4, 2009, 7:09 pm) re: Important update and workaround (Steve: Thu, Jun 4, 2009, 7:50 pm) re: Important update and workaround (Charlie Hadden: Fri, Jun 5, 2009, 5:33 am) re: Important update and workaround (Steve: Fri, Jun 5, 2009, 6:20 am) re: Is this really a vulnerability or just hype? Results of my tests, check the facts. (Daniel Weinreb: Sun, Jun 7, 2009, 6:13 am) re: Is this really a vulnerability or just hype? Results of my tests, check the facts. (lbecque: Sun, Jun 7, 2009, 8:26 am) re: Is this really a vulnerability or just hype? Results of my tests, check the facts. (Daniel Weinreb: Sun, Jun 7, 2009, 11:40 am) re: Is this really a vulnerability or just hype? Results of my tests, check the facts. (Hayes Whitt: Wed, Jun 10, 2009, 10:32 pm) re: Is this really a vulnerability or just hype? Results of my tests, check the facts. (dmex: Mon, Jun 8, 2009, 8:49 pm) re: Is this really a vulnerability or just hype? Results of my tests, check the facts. (lbecque: Tue, Jun 9, 2009, 10:28 am) re: Is this really a vulnerability or just hype? Results of my tests, check the facts. (Hayes Whitt: Thu, Jun 11, 2009, 2:14 pm) Reply or follow-up to this message Search this forum Start a new thread on a different subject Report abuse of the forum Return to the Windows Vista Discussion Forum