Ver. 17.0.3 Secure Search Issue

[itman 1,743]

I installed the Eset add-on in Firefox. However, I see no green check mark on Google search results. Does Google Safe Search need to be disabled for Eset's to work?

Also, I see uBlock Origin add-on blocking a large number of search results. Don't recall seeing that previously.

Edited November 10, 2023 by itman

[Marcos 5,242]

Yes, Secure search must be enabled here:

[itman 1,743]

2 hours ago, Marcos said:

Yes, Secure search must be enabled here:

Those settings don't exist for the Eset Firefox add-on. When I mouse click on the BP&S icon on the toolbar, all I see is what is shown in the below screen shot. Likewise, the settings don't exist under Manage extension settings.

Edited November 10, 2023 by itman

[itman 1,743]

Pretty sure I know what the issue is.

Eset is not auto installing BP&S extension in Firefox when enabled . That is what my testing reveals. Strangely if I disable BP&S, it will auto uninstall BP&S extension from Firefox.

This also syncs with what happened when I installed ver. 17. The BP&S extension was not auto installed in Firefox and I had to manually install it from Firefox extension store. The problem is when installed this way, none of the configuration options are available.

I did everything to get the extension to auto install including a system reboot to no avail.

Edited November 11, 2023 by itman

[constexpr 47]

11 hours ago, itman said:

Pretty sure I know what the issue is.

Eset is not auto installing BP&S extension in Firefox when enabled . That is what my testing reveals. Strangely if I disable BP&S, it will auto uninstall BP&S extension from Firefox.

This also syncs with what happened when I installed ver. 17. The BP&S extension was not auto installed in Firefox and I had to manually install it from Firefox extension store. The problem is when installed this way, none of the configuration options are available.

I did everything to get the extension to auto install including a system reboot to no avail.

Firefox extension can be installed only from Firefox addons store. How did you open it, you search for ESET extension on store, or link with store was open after you click on product notification?

Is the extension behavior (just ESET deck logo) the same for Chrome/Edge?

If the extension still looks like on your screenshot (for any of the mentioned browser), can you please send us ELC log, when browser is open?

Thanks

[itman 1,743]

4 hours ago, constexpr said:

Firefox extension can be installed only from Firefox addons store. How did you open it, you search for ESET extension on store, or link with store was open after you click on product notification?

Yes, the add-on was manually installed from Firefox add-on store;

I don't know what you mean by "product notification?" I don't recall receiving any notification at ver. 17 installation time. I vaguely recall seeing something listed under download down arrow toolbar symbol in Firefox the first time opened after ver. 17 install. It appeared related to EBP&C but accessing it didn't install the add-on.

An additional test I performed was to attempt to install this add-on w/o EBP&C enabled. Firefox installed it and then it was immediately uninstalled. This indicates there is communication between Eset and Firefox.

Bottom line is the EBP&C functionality claimed by Eset is missing from this Firefox add-on. Again, I believe the functionality is created when EBP&C auto adds its add-on when Firefox opens which clearly does not occur.

4 hours ago, constexpr said:

Is the extension behavior (just ESET deck logo) the same for Chrome/Edge?

I don't use Chrome, so can't test there.

As far as Edge processing goes upon opening of Edge, no EBP&C add-on added to it. Searching for EBP&C add-on in Edge add-on store yields zip. It doesn't exist there.

Edited November 11, 2023 by itman

[itman 1,743]

3 hours ago, constexpr said:

If the extension still looks like on your screenshot (for any of the mentioned browser), can you please send us ELC log, when browser is open?

Log with Firefox open;

essp_logs.zip

Edited November 11, 2023 by itman

[itman 1,743]

I will also add that Firefox has for some time blocked extension sideloading;

Quote

Sideloading is a method of installing an extension in Firefox by adding an extension file to a special location using an executable application installer. This installs the extension in all Firefox instances on a computer.

Sideloaded extensions frequently cause issues for users since they did not explicitly choose to install them and are unable to remove them from the Add-ons Manager. This mechanism has also been employed in the past to install malware into Firefox. To give users more control over their extensions, support for sideloaded extensions will be discontinued.

Is this not what Eset ver. 17 is attempting to do with the EBP&C add-on?

Edited November 11, 2023 by itman

[itman 1,743]

To rule out this is a ver. 17 upgrade issue, I uninstalled ver. 17 and reinstalled from scratch.

Still a no-go. No auto creation of EBP&C add-on when Firefox starts. No notification, nada, zip about it.

[constexpr 47]

1 hour ago, itman said:

To rule out this is a ver. 17 upgrade issue, I uninstalled ver. 17 and reinstalled from scratch.

Still a no-go. No auto creation of EBP&C add-on when Firefox starts. No notification, nada, zip about it.

Can you please try to switch to prerelease update? After product update, restart browser and check it again (if possible, compare Firefox and Edge).

Thanks

[Petrovic 0]

how to install browser security for chrome? (chrome store link?)

[Marcos 5,242]

When you launch a browser you should get a pop-up like this:

[itman 1,743]

4 hours ago, Marcos said:

When you launch a browser you should get a pop-up like this:

Some progress.

After system startup this morning and opening FireFox, I did receive the Eset popup notification to add the EBP&C add-on which I did. Problem is I still can't access any Eset configuration settings for the add-on. As such, the add-on is not functional.

I will switch to pre-release update per @constexpr request and report back my findings.

[itman 1,743]

14 hours ago, constexpr said:

Can you please try to switch to prerelease update? After product update, restart browser and check it again (if possible, compare Firefox and Edge).

Thanks

Here's the results.

First, fix your pre-release servers download speed. It took forever to download the update on my 1 GB network connection.

As far as the notification issue to add EBP&C add-on on both Firefox and Edge, it appears on both. So it appears that issue is fixed.

Edge

EBP&C add-on appears to work as designed. Settings are accessible and configurable.

Only issues I found were;

1. The add-on needs to be configured in Edge to always show on its toolbar.

2. A lag in rendering of search results reputation; i.e. green checkmark. Search results display and then later the green checkmarks.

3. Use of cmd.exe to process Eset EBP&C add-on will require modification of Eset HIPS rules if one if monitoring cmd.exe child process startup.

Firefox

Unfortunately, nothing has changed in regards to prior issue. The EBP&C add-on settings do not show and cannot be configured. Also, the add-on is not functional in that for search results, Eset reputation status; i.e. green check mark, does not display.

Notice the lack of cmd.exe use to load EBP&C add-on? Also conhost.exe running as child process to EBP&C add-on versus the reverse?

Edited November 12, 2023 by itman

[itman 1,743]

2 minutes ago, Glassertje said:

You must enable safe search manually in the plugin

All that is displayed is what I posted previously: https://forum.eset.com/topic/38669-ver-1703-secure-search-issue/?do=findComment&comment=175187 . I am running Win 10 Pro x(64) 22H2. Also, Firefox 119.0.1.

6 minutes ago, Glassertje said:

there is no green checkmark

This should be displayed on your browser search; e.g. Google, results.

[Marcos 5,242]

The pre-release and release updates are on exactly the same servers but in different folders. Since you are experiencing both issues with slow updates and slow rendering of search results, there's likely a connectivity issue between your machine and ISP or between the IPS and ESET's servers. As Glassertje wrote, he did not have any lag issues and search results are rendered quickly on my machine too.

[itman 1,743]

Maybe this is related to the Firefox issue;

Refer to above Process Explorer screenshot for Firefox as to what is loaded extension-wise.

[itman 1,743]

11 minutes ago, Marcos said:

Since you are experiencing both issues with slow updates and slow rendering of search results,

Search results rendering is instantaneous. I was referring to when Eset's green check marks appear.

[itman 1,743]

Below is  a snipet of the source code behind this EBP&S display. What I am seeing is its options are only being activated for the new Eset Ultimate ver..

<div id="features-section-ultimate">
				<div class="grid-item item-hover" id="secure-search-tile">
					<div class="fr-heading">
						<div class="fr-heading-row">
							<div class="fl-icon">
								<svg class="secure-search-icon">
									<use href="./assets/icons.svg#secure-search-icon" />
								</svg>
							</div>
							<div class="fr-btn secure-search-btn">
								<button class="setup-btn">__MSG_setup_btn__</button>
							</div>
						</div>
						<div class="fr-heading-text">
							<div>__MSG_secure_search_header__</div>
						</div>
						<div class="fr-text">__MSG_summary_search_stats_text__</div>
					</div>
				</div>

				<div class="grid-item item-hover" id="browser-cleanup-tile">
					<div class="fr-heading">
						<div class="fr-heading-row">
							<div class="fl-icon">
								<svg class="browser-cleanup-icon">
									<use href="./assets/icons.svg#browser-cleanup-icon" />
								</svg>
							</div>
						</div>
						<div class="fr-heading-text">
							<div>__MSG_browsing_cleanup_header__</div>
						</div>
						<div class="fr-text">__MSG_summary_privacy_stats_text__</div>
					</div>
				</div>

				<div class="grid-item item-hover" id="metadata-cleanup-tile">
					<div class="fr-heading">
						<div class="fr-heading-row">
							<div class="fl-icon">
								<svg class="metadata-cleanup-icon">
									<use href="./assets/icons.svg#metadata-cleanup-icon" />
								</svg>
							</div>
							<div class="fr-btn" id="metadata-btn">
								<button class="setup-btn">__MSG_setup_btn__</button>
							</div>
							<div class="fr-icon" id="metadata-icon"><img src="./assets/status_icon.svg"
									alt=__MSG_metadata_warning_status_icon_alt__>
							</div>
						</div>
						<div class="fr-heading-text">
							<div>__MSG_metadata_cleaner_header__</div>
						</div>
						<div class="fr-text">__MSG_summary_metadata_stats_text__</div>
					</div>
				</div>

Edited November 12, 2023 by itman

[itman 1,743]

Firefox problem solved!

I reset Firefox.

I rebooted system. Note this to date has been necessary to receive the  EBP&S add-on add notification.

Started Firefox and received EBP&S add-on add notification. Added it.

Verified EBP&S add-on functional;

Enabled Secure Search and verified it works properly; at this point only verified green checks show on search results. As with Edge search results, green check marks populate after search results shown.

Proceeded with setting up my prior Firefox profile custom configuration including adding of uBlock Origin add-in. Re-verified EBP&S add-on still functional.

At this point, I have my fingers crossed that EBP&S add-on remains functional.

@constexpr let me know when this pre-release version will be placed on production server.

 

[constexpr 47]

1 hour ago, itman said:

Firefox problem solved!

I reset Firefox.

I rebooted system. Note this to date has been necessary to receive the  EBP&S add-on add notification.

Started Firefox and received EBP&S add-on add notification. Added it.

Verified EBP&S add-on functional;

Enabled Secure Search and verified it works properly; at this point only verified green checks show on search results. As with Edge search results, green check marks populate after search results shown.

Proceeded with setting up my prior Firefox profile custom configuration including adding of uBlock Origin add-in. Re-verified EBP&S add-on still functional.

At this point, I have my fingers crossed that EBP&S add-on remains functional.

@constexpr let me know when this pre-release version will be placed on production server.

 

Thanks for your great job. We're still analysing this scenario and preparing a few changes to the code flow that may lead to the result you're achieved.

I will ket you know, when current module fix will be fully released (but I think change of module update server setting fom pre-release to release doesn't downgrade modules)

Edited November 13, 2023 by constexpr

[itman 1,743]

A few final comments here.

When the EBP&S add-on successfully installed in Firefox, it did so with its toolbar icon hidden. Since the Secure search option is disabled by default, I can anticipate a whole bunch of forum postings about Safe search not working right.

Next is the  EBP&S add-on permissions upon installation. Advanced permissions; i.e. access on all web sites, is disabled. I would think this has to be enabled for this add-on to function properly?

Finally, my initial testing yields Google search results always show with green check mark enabled. I displayed a bunch of porn web sites; etc,, and they all showed as safe. Perhaps uBlock Origin, Google Safe Search, plus Firefox internal blocking is doing this, but that seems "a stretch."

Edited November 13, 2023 by itman

[Marcos 5,242]

I have installed Ublock extension but have no problems with the labels. Please note that the websites are evaluated by the blacklist; not all malicious or shady sites are blacklisted. For instance, we do not usually blacklist legitimate sites that were compromised and contain malware.

[constexpr 47]

2 minutes ago, itman said:

A few final comments here.

When the EBP&S add-on successfully installed in Firefox, it did so with it toolbar icon hidden. Since the Secure search option is disabled by default, I can anticipate a whole bunch of forum postings about Safe search not working right.

Next is the  EBP&S add-on permissions upon installation. Advanced permissions; i.e. access on all web sites, is disabled. I would think this has to be enabled for this add-on to function properly?

Does it work, when you enable Secure search and grant permissions to all urls?

Firefox doesn't grant you to get those permission right after install, you (user) need to do an extra action to allow extension to access those sites. That's main differences between Firefox and Chrome/Edge version, where those permission are (for now) granted after install automatically.

[itman 1,743]

8 minutes ago, Marcos said:

I have installed Ublock extension but have no problems with the labels.

Thanks. Same result here. Good to know Safe search working as designed which is Eset blacklist detection only. The question is since Eset will detect these black list web sites upon access, is Safe search redundant?

Edited November 13, 2023 by itman