64bit IE on Windows 8

[IEtester]

Unfortunately the addon is completely non functional in 64bit IE on Windows 8 (Enhanced Protected Mode). It is disabled at launch with the popup "This addon is not compatible with Enhanced Protected Mode".

[MonztA]

Does that happen in the Metro style IE, the "normal" IE or in both?

[Oleksandr Paraska]

Unfortunatly, we do not yet support neither Enhanced Protected Mode nor Metro style IE.

[Wladimir Palant]

I've added this limitation to the blog announcement.

[Varun]

I glad that there finally is an Adblock Plus for IE. I am using IE 10 on Windows 8 and all of my ads are blocked. Also, would it be possible to create an app like in android where metro mode is also covered?

[IEtester]

Unfortunatly, we do not yet support neither Enhanced Protected Mode nor Metro style IE.

This statement is confusing, you can't run any addons in Metro style IE, but you can in desktop IE with Enhanced Protected Mode. So with that being said, do you plan on adding support for EPM?

[hannubys]

Plugins cannot work with EPM enabled because they need access on the system (for now, not easy to do). Same as others like java, flash...

[IEtester]

Plugins cannot work with EPM enabled because they need access on the system (for now, not easy to do). Same as others like java, flash...

Complete nonsense. Plugins can run fine with EPM if they are designed to do so. Flash runs in EPM perfectly fine because the latest versions were designed in partnership with Microsoft.

[IEtester]

In order to be EPM-compatible, Toolbars and BHOs must be available in 32bit and 64bit flavors, to avoid toolbars or other UI appearing and disappearing as you navigate between zones that run at different bitnesses. To load in EPM on Windows 8, the add-on must also indicate that it is compatible with the AppContainer isolation feature by registering with a COM Component Category that indicates that the component was designed and tested to ensure it runs correctly in the no-read-up process.

The category is named CATID_AppContainerCompatible and its GUID is {59fb2056-d625-48d0-a944-1a85b5ab2640}. C++ programmers may use:

DEFINE_GUID(CATID_AppContainerCompatible, 0x59fb2056,0xd625,0x48d0,0xa9,0x44,0x1a,0x85,0xb5,0xab,0x26,0x40);

Any non-trivial add-on is likely to find that it needs access to resources that are not available from within an AppContainer. The way to security provide such access is to build a broker object that runs at Medium IL. In Vista and later, brokers were needed to write protected resources, and in EPM, they are required to read protected resources. The general pattern is:
1.Untrusted code (the add-on running in the Protected Mode tab) calls a method in the broker, passing aero or more arguments.
2.The broker evaluates the request's arguments and its own security policy.
3.The broker confirms with the user that the requested operation is acceptable (e.g. by showing a Save prompt or whatever).
4.The broker undertakes the operation if allowed, or blocks it if denied.

Writing a broker is a significant undertaking, and requires a thorough security audit to ensure that the broker doesn’t allow malicious code to escape from the tab running in Protected Mode.

Source: http://blogs.msdn.com/b/ieinternals/arc ... sktop.aspx

The addon is already using a broker process (to avoid memory duplication) so you're halfway there.

[Wladimir Palant]

Yes, we do plan to add support for Enhanced Protected Mode - I think the announcement makes it clear. You are talking about pre-release software here, we merely made it usable at all and there is still much to be done.

[hannubys]

Hi Wladimir,
Just a quick note to tell you that Enhanced Protected Mode is now enabled by default on IE11.
For now everyone on WIndows 8.1 have to disable this security setting to allow the abp plugin until this feature is supported.

[fhd]

Just a quick note to tell you that Enhanced Protected Mode is now enabled by default on IE11.
For now everyone on WIndows 8.1 have to disable this security setting to allow the abp plugin until this feature is supported.

That's true. However, we should be able to fix this before Windows 8.1 is released.

[mwaqar]

I am using Internet Explorer 10 on Windows 8 without Enhanced Protection Mode and the addon (64-bit) has no effect at all. All ads are displayed, even in the YouTube videos.

[MattFL]

I'm using Windows 8 on a Microsoft Surface Pro and a quick test shows that ABP works properly with the desktop version of IE (thank you thank you!!), but doesn't affect the metro version of IE. I installed it first on the desktop version of IE, then when I tried to install it on the metro version of IE it said that ABP was already installed and I had the option to repair. I repaired, rebooted and that did not enable APB for the metro version of IE. I hope this info is helpful in some way, GREAT product!

[TBolt]

Finally got ads blocked in IE11 (Win 8.1 Build 9431) after disabling Enhanced Protected Mode in IE & rebooting my PC.

I hope the blog will scream the good news when Enhanced Protected Mode is supported.

Thanks ABP!