Automatic plugin update check?

[back2themoon]

Since plugins can pose a security risk, I've always wondered why they were not included in the various auto-update checks. This recent extension handles the problem nicely, but maybe it's a feature worth including in Pale Moon as an extra security measure?

[mgagnonlv]

Not sure I like the idea, unless the function can be turned off easily.

1. There are times when I use the computer off the grid or with a flaky internet connection. Likewise, there are times I turn on the computer to do a presentation. I want to be able to decide if/when it is appropriate to do an update or not.

2. We have seen this especially with the Flash player: there are times when the new version brings new bugs and recommendation has been to keep the older Flash player. So as a principle, I tend to wait a few days until I see comments on various updates. I don't like the idea of having updates pushed in my face. Besides, it looks very bad during a presentation.

[back2themoon]

Auto-check for updates, not auto-updates.

An update notification should be enough (users warned and will update if/when they wish) and actually I'm not sure how feasible an auto-update would be since these are essentially external programs (unlike extensions).

[LimboSlam]

This is good! I just tried it out and automatically it warned me of out date plugins, like Java and foxit plugin. I than chose to update them and that was it. Plus I like how you can choose when to check for updates and what plugins to check and not check for updates. So with a little more improvements and some high rating on this add-on, It will be perfect to use for all PM/FF users.

[dark_moon]

So it exist a addon for your problem?
Then is all fine. Isn't it?

Don't increase the browser code with too much code.

It you have security problems with your plugins, then uninstall it or set it to click to play.

[back2themoon]

So it exist a addon for your problem?
Then is all fine. Isn't it? Don't increase the browser code with too much code. It you have security problems with your plugins, then uninstall it or set it to click to play.

It's not a personal problem, I can deal with it. Although they stem from external applications, plugins interact directly with the browser, and I'm guessing many unsuspecting users have outdated plugins installed (as LimboSlam above confirmed).

I'm only throwing the question: are outdated plugins enough of a security risk to justify automatic updates, without having to resort to an extension? Users who have outdated plugins, would be obviously unaware of that extension, too.

[opera1215b1748]

Most people use add-ons/extensions unnecessarily - confusing them with proper means to gain security.
The less code you have installed and running the safer you are.

An add-on to check for add-ons - is the utmost crazy idea (to me).

Just subscribe to receive a notice about the availability of an update - and install it in the proper manner.

[sIDcORK]

People who use add-ons/extensions do not care for (or know nothing about) security in the first place.
The less code you have installed and running the safer you are.

That's an interesting point of view.

[Moonchild]

Guys, please don't start a flame war.

[sIDcORK]

No intention to start one, it is interesting. Not the place to explore it though

[Night Wing]

This is good! I just tried it out and automatically it warned me of out date plugins, like Java and foxit plugin. I than chose to update them and that was it. Plus I like how you can choose when to check for updates and what plugins to check and not check for updates. So with a little more improvements and some high rating on this add-on, It will be perfect to use for all PM/FF users.

I've been following this thread.

When it comes to an out of date plugin like Java, I regularly check the Java site since it's in my Bookmark Toolbar to see if my Java plugin is up to date. Also, when one installs the Java plugin, it has an update feature that will nag the user telling them the plugin is out of date and they need to install the new update.

Since it won't break my arm to check the Java site weekly, I would not be in favor of adding more code to the core of Pale Moon. Why do I say this? Because lately, while reading other topics on other forums, it seems quite a few people have an extension which they champion and which they would like to incorporate into the core of Pale Moon.

[back2themoon]

Also, when one installs the Java plugin, it has an update feature that will nag the user telling them the plugin is out of date and they need to install the new update.

Not yet with the 64-bit Java (used in x64 Pale Moon). Also, IMO it's best to have a "centralized" plugin check (which is the case now, but not automatically) that to rely on each one of them.

...it seems quite a few people have an extension which they champion and which they would like to incorporate into the core of Pale Moon.

Not the case here. This is a security concern, I'm not talking about that extension. I'm sure we all agree many users use outdated plugins with no way of getting promptly notified about it.

[sIDcORK]

The, sorry, a problem with auto-updating is it can break things, for instance some people prefer the ESR version of Flash.

My preference, and it won't suit everyone, is to have http://securitygarden.blogspot.co.uk/ on RSS feed, I don't know quite how they do it but they are really quick with notifications, always beating the Avast! updater by hours although they can't cover everything obviously.

I still think Auto updating a better candidate for an add-on rather than built in.

[back2themoon]

The, sorry, a problem with auto-updating is it can break things, for instance some people prefer the ESR version of Flash.

I actually agree with this but it's already mentioned (post #3): auto-check for updates and notification, not forced auto-updates. Not the same thing.

[mikeysc]

Haven't seen it mentioned here, Mozilla has a plugin update check page:
https://www.mozilla.org/plugincheck
Not automagical, but good enough for some people.

[back2themoon]

That page is the point of this thread: it is linked directly within the browser (Add-ons Manager/Plugins/"Check to see if your plugins are up to date" at the top). Just not "automagically" as you say, and is probably unknown/forgotten to many users.

[LimboSlam]

Yes, but why check for updates manually when you have a perfectly good extension that checks for you within 24 hrs or less. Well idk, maybe I'm lazy, but I hate going to different pages/places to just to check for updates.

[mikeysc]

Too many extensions - there's one for every litle thing, just to save one click sometimes. I might add a hundred or more if convenience were the only factor.