<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: No Surprises</title>
	<atom:link href="http://blog.mozilla.org/addons/2009/05/01/no-surprises/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.mozilla.org/addons/2009/05/01/no-surprises/</link>
	<description></description>
	<lastBuildDate>Wed, 19 Jun 2013 17:49:39 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
	<item>
		<title>By: Daifne</title>
		<link>http://blog.mozilla.org/addons/2009/05/01/no-surprises/comment-page-1/#comment-6675</link>
		<dc:creator>Daifne</dc:creator>
		<pubDate>Sun, 26 Jul 2009 23:04:01 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.org/addons/?p=488#comment-6675</guid>
		<description><![CDATA[And yet it happens again. The Aero Fox and Aero Fox Silver themes now include Ask.com Chrome Search extension with the updates to them. There was no opt out nor was their any notification that this would be installed. This should never have been put in the public section. Besides hijacking the default search, this also affected the Awesome Bar not allowing access to about:config. 

Per the author&#039;s website, he will be doing this with all his themes: http://www.virtusdesigns.net/

This should never happen with themes hosted at AMO.

See &lt;a href=&quot;https://bugzilla.mozilla.org/show_bug.cgi?id=502479&quot; rel=&quot;nofollow&quot;&gt;Bug 502479&lt;/a&gt;]]></description>
		<content:encoded><![CDATA[<p>And yet it happens again. The Aero Fox and Aero Fox Silver themes now include Ask.com Chrome Search extension with the updates to them. There was no opt out nor was their any notification that this would be installed. This should never have been put in the public section. Besides hijacking the default search, this also affected the Awesome Bar not allowing access to about:config. </p>
<p>Per the author&#8217;s website, he will be doing this with all his themes: <a href="http://www.virtusdesigns.net/" rel="nofollow">http://www.virtusdesigns.net/</a></p>
<p>This should never happen with themes hosted at AMO.</p>
<p>See <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=502479" rel="nofollow">Bug 502479</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: ranides</title>
		<link>http://blog.mozilla.org/addons/2009/05/01/no-surprises/comment-page-1/#comment-4030</link>
		<dc:creator>ranides</dc:creator>
		<pubDate>Wed, 20 May 2009 21:06:36 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.org/addons/?p=488#comment-4030</guid>
		<description><![CDATA[Policy policy...
great great, but it&#039;s impossible. 

Separate JavaScript sandbox for every addon... ROTFL. I don&#039;t want think about performance of that solution. Maybe... 10x slower?

And... Has anyone know that extensions could use XPCOM Compontents? That components can be written in C++ and compiled to native code. It&#039;s impossible to trace and block native code in Firefox, in user-mode. Every XPCOM component can do everything, and this can&#039;t be changed.

If you want control native code, you must create thousands hooks into operating system, and work in kernel mode. Obviously, internet browser shouldn&#039;t do that...]]></description>
		<content:encoded><![CDATA[<p>Policy policy&#8230;<br />
great great, but it&#8217;s impossible. </p>
<p>Separate JavaScript sandbox for every addon&#8230; ROTFL. I don&#8217;t want think about performance of that solution. Maybe&#8230; 10x slower?</p>
<p>And&#8230; Has anyone know that extensions could use XPCOM Compontents? That components can be written in C++ and compiled to native code. It&#8217;s impossible to trace and block native code in Firefox, in user-mode. Every XPCOM component can do everything, and this can&#8217;t be changed.</p>
<p>If you want control native code, you must create thousands hooks into operating system, and work in kernel mode. Obviously, internet browser shouldn&#8217;t do that&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Bilbo</title>
		<link>http://blog.mozilla.org/addons/2009/05/01/no-surprises/comment-page-1/#comment-3891</link>
		<dc:creator>Bilbo</dc:creator>
		<pubDate>Tue, 12 May 2009 14:21:53 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.org/addons/?p=488#comment-3891</guid>
		<description><![CDATA[About &quot;Uninstalling the add-on restores the user’s original settings if they were changed&quot;

What if user have some pref set to A, plugin changes it to B and some time later, user changes it to C. Should the plugin revert it back to A? If &quot;that pref&quot; is homepage for example, I think user will be quite unhappy with it.

I think the plugin should restore the settings to its previous values ONLY if they are not changed between installation and uninstallation of the plugin.

Perhaps add some helper functions which extension authors would call and they will do this &quot;properly&quot;.]]></description>
		<content:encoded><![CDATA[<p>About &#8220;Uninstalling the add-on restores the user’s original settings if they were changed&#8221;</p>
<p>What if user have some pref set to A, plugin changes it to B and some time later, user changes it to C. Should the plugin revert it back to A? If &#8220;that pref&#8221; is homepage for example, I think user will be quite unhappy with it.</p>
<p>I think the plugin should restore the settings to its previous values ONLY if they are not changed between installation and uninstallation of the plugin.</p>
<p>Perhaps add some helper functions which extension authors would call and they will do this &#8220;properly&#8221;.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Michael Kaply</title>
		<link>http://blog.mozilla.org/addons/2009/05/01/no-surprises/comment-page-1/#comment-3780</link>
		<dc:creator>Michael Kaply</dc:creator>
		<pubDate>Thu, 07 May 2009 00:42:27 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.org/addons/?p=488#comment-3780</guid>
		<description><![CDATA[My problem is with this wording:

&quot;Changes to default home page and search preferences, as well as settings of other installed add-ons, must be related to the core functionality of the add-on.&quot;

This says to me that if an add-on is not explicitly related to search (like Yahoo or Google toolbar), it can&#039;t change search preferences, even if it is upfront with the user about the fact that it is going to change these things.

So an addon that says &quot;we change the search engine to Foo. Please use Foo and support us&quot; won&#039;t be allowed to do that anymore unless the addon is explicitly related to search.

Is that correct?]]></description>
		<content:encoded><![CDATA[<p>My problem is with this wording:</p>
<p>&#8220;Changes to default home page and search preferences, as well as settings of other installed add-ons, must be related to the core functionality of the add-on.&#8221;</p>
<p>This says to me that if an add-on is not explicitly related to search (like Yahoo or Google toolbar), it can&#8217;t change search preferences, even if it is upfront with the user about the fact that it is going to change these things.</p>
<p>So an addon that says &#8220;we change the search engine to Foo. Please use Foo and support us&#8221; won&#8217;t be allowed to do that anymore unless the addon is explicitly related to search.</p>
<p>Is that correct?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: AKAJohnDoe</title>
		<link>http://blog.mozilla.org/addons/2009/05/01/no-surprises/comment-page-1/#comment-3759</link>
		<dc:creator>AKAJohnDoe</dc:creator>
		<pubDate>Wed, 06 May 2009 04:54:43 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.org/addons/?p=488#comment-3759</guid>
		<description><![CDATA[The answer is the three-pronged approach:

(1) Enact and enforce a policy regarding scope of authority for add-ons
(2) Implement an improved process for installing (and uninstalling) add-ons
(3) Implement the functionality of the best of the best of the add-ons into the core functionality of Firefox]]></description>
		<content:encoded><![CDATA[<p>The answer is the three-pronged approach:</p>
<p>(1) Enact and enforce a policy regarding scope of authority for add-ons<br />
(2) Implement an improved process for installing (and uninstalling) add-ons<br />
(3) Implement the functionality of the best of the best of the add-ons into the core functionality of Firefox</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: chofmann</title>
		<link>http://blog.mozilla.org/addons/2009/05/01/no-surprises/comment-page-1/#comment-3753</link>
		<dc:creator>chofmann</dc:creator>
		<pubDate>Tue, 05 May 2009 20:22:16 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.org/addons/?p=488#comment-3753</guid>
		<description><![CDATA[mkaply,

JR, summed up what this policy is about.

&quot;...policy change is important and necessary to retain the trust users have in Mozilla&quot;

If an extension isn&#039;t upfront about the fact that it is going to change the search engine,  or it takes the introduction of lots of complicated UI with lots of misunderstood or confusing words and dialogs to do so then we simple are in a race to the bottom.

When addons start to change preferences outside the core functionally of the addon,  users will lose trust individual addon, then addons as a whole, then Firefox, then Mozilla.   As we have seen the war can also escalate to a race to the bottom between competing addons wanting to control preferences.

We can&#039;t put users in the middle of this battle and expect any kind of good outcome.

You are right that addon developers are caught in difficult place with no few monitization options right now and we need to solve that problem, but lets not do it at the expense of degrading user experience and trust.]]></description>
		<content:encoded><![CDATA[<p>mkaply,</p>
<p>JR, summed up what this policy is about.</p>
<p>&#8220;&#8230;policy change is important and necessary to retain the trust users have in Mozilla&#8221;</p>
<p>If an extension isn&#8217;t upfront about the fact that it is going to change the search engine,  or it takes the introduction of lots of complicated UI with lots of misunderstood or confusing words and dialogs to do so then we simple are in a race to the bottom.</p>
<p>When addons start to change preferences outside the core functionally of the addon,  users will lose trust individual addon, then addons as a whole, then Firefox, then Mozilla.   As we have seen the war can also escalate to a race to the bottom between competing addons wanting to control preferences.</p>
<p>We can&#8217;t put users in the middle of this battle and expect any kind of good outcome.</p>
<p>You are right that addon developers are caught in difficult place with no few monitization options right now and we need to solve that problem, but lets not do it at the expense of degrading user experience and trust.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Manne</title>
		<link>http://blog.mozilla.org/addons/2009/05/01/no-surprises/comment-page-1/#comment-3750</link>
		<dc:creator>Manne</dc:creator>
		<pubDate>Tue, 05 May 2009 18:15:46 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.org/addons/?p=488#comment-3750</guid>
		<description><![CDATA[How about programs like skype?
It installs (without asking and impossible to unselect) an extension in Firefox.

Not fine.]]></description>
		<content:encoded><![CDATA[<p>How about programs like skype?<br />
It installs (without asking and impossible to unselect) an extension in Firefox.</p>
<p>Not fine.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: mark</title>
		<link>http://blog.mozilla.org/addons/2009/05/01/no-surprises/comment-page-1/#comment-3744</link>
		<dc:creator>mark</dc:creator>
		<pubDate>Tue, 05 May 2009 13:14:29 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.org/addons/?p=488#comment-3744</guid>
		<description><![CDATA[&quot;Uninstalling the add-on restores the user’s original settings if they were changed.&quot;

How is this technically done? Will each plugin author need to write his own code for this, or can he use something &quot;central&quot;?]]></description>
		<content:encoded><![CDATA[<p>&#8220;Uninstalling the add-on restores the user’s original settings if they were changed.&#8221;</p>
<p>How is this technically done? Will each plugin author need to write his own code for this, or can he use something &#8220;central&#8221;?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Nom</title>
		<link>http://blog.mozilla.org/addons/2009/05/01/no-surprises/comment-page-1/#comment-3726</link>
		<dc:creator>Nom</dc:creator>
		<pubDate>Tue, 05 May 2009 00:46:30 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.org/addons/?p=488#comment-3726</guid>
		<description><![CDATA[How about Mozilla stop allowing some extensions to be installed while the browser is CLOSED and without an option to uninstall them?  *cough*Java Quick Starter*cough*]]></description>
		<content:encoded><![CDATA[<p>How about Mozilla stop allowing some extensions to be installed while the browser is CLOSED and without an option to uninstall them?  *cough*Java Quick Starter*cough*</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: BartZilla</title>
		<link>http://blog.mozilla.org/addons/2009/05/01/no-surprises/comment-page-1/#comment-3725</link>
		<dc:creator>BartZilla</dc:creator>
		<pubDate>Mon, 04 May 2009 23:54:27 +0000</pubDate>
		<guid isPermaLink="false">http://blog.mozilla.org/addons/?p=488#comment-3725</guid>
		<description><![CDATA[@JR: You wrote: &lt;i&gt;&quot;Closed-source vendors are notorious for not being responsive to issues like this.&quot;&lt;/i&gt;.
But you realize that Mozilla &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/5202&quot; rel=&quot;nofollow&quot;&gt;distributes (and even recommends on AMO)&lt;/a&gt; a &lt;a href=&quot;https://wiki.mozilla.org/Talk:Releases/Fx_3.0.7_Partners&quot; rel=&quot;nofollow&quot;&gt;closed source and proprietary&lt;/a&gt; software too, right?]]></description>
		<content:encoded><![CDATA[<p>@JR: You wrote: <i>&#8220;Closed-source vendors are notorious for not being responsive to issues like this.&#8221;</i>.<br />
But you realize that Mozilla <a href="https://addons.mozilla.org/en-US/firefox/addon/5202" rel="nofollow">distributes (and even recommends on AMO)</a> a <a href="https://wiki.mozilla.org/Talk:Releases/Fx_3.0.7_Partners" rel="nofollow">closed source and proprietary</a> software too, right?</p>
]]></content:encoded>
	</item>
</channel>
</rss>
