Earlier quoted context omitted.
TOS agreements should be illegal in the US, especially those that try to circumvent our 'Freedoms of Speech'.
Define socialism and let me know how economic theory impacts civil liberties. The US has had socialist programs for a long time and hasn't devolved into madness. If I recall correctly it's been the conservative Congress that has stripped protections by establishing "free speech zones", they pushed through the Patriot Act which stripped more civil liberties, they expanded the surveillance state, they removed civil lib…
Update Regarding Add-Ons in Firefox
491–500 of 504 posts
Re: Update Regarding Add-Ons in Firefox
#492Earlier quoted context omitted.
I did not say "all trust". Please don't presume to inflate my explicitly stated position — especially while also minimizing the impact this incident had on me, and others. I did not merely "lose some tabs"; those, I could just re-open. I lost work . That data, effort, and time are gone . If you think this clownshoery hasn't cost Firefox any trust, then you're being as naïve as you accuse me of being "absurdly overdra…
Alright, I apologize for the tone. It's unnecessary to make something like this into a heated discussion. That said, the part I was referring to is: > The mere fact of such a thing being possible is a usability defect. On what basis do I trust that my work is not going to disappear on me like that again? The possibility of a bug happening is hardly a usability defect in my mind. Or if you want to call it one, it seem…
I understand your perspective, and appreciate your recognition of my own. That said, if you think I'm putting the situation in an unfair light, I think you're downplaying it at least as much.
In my eyes, this is no mere "bug"; it's an abject process failure. As a reply to another of my comments in this discussion suggests, this is more on the level of, "Oops, we forgot to renew our domain name...", than it is, "Gosh, we didn't validate the pointer returned by the frobnitz function, when the whoozle isn't initialized yet..."
Dealing with expiring certificates before they expire is covered in like the second week of Certificate Management 101, as it were. If it's necessary to stick an intermediate cert in there, then it's doubly so to keep it current.
> The basis is that this is a single instance of a failure over the course of the features' lifetime, for a feature that has existed for absolutely ages.
The plural of "anecdote" isn't "data", but an existence proof is an existence proof. That the problem has gone from zero occurrences to one, no matter over what period, literally makes it infinitely more likely to recur, if you want to be that reductive...
Re: Update Regarding Add-Ons in Firefox
#493Instead of enabling studies just click on this link. It installs that specific "study" (hotfix) without installing anything else. https://storage.googleapis.com/moz-fx-normandy-prod-addons/e...
How do I uninstall this? It doesn't show up anywhere after installation.
Re: Update Regarding Add-Ons in Firefox
#494Earlier quoted context omitted.
Stuff like adjusting bug priorities and arranging for someone to tweet an announcement is the work of a good engineering manager So we can come to the obvious conclusion about Mozilla, then? No good "engineering" managers? Miss one reprioritization and you're out! This is what sane people think?
At no stage did the parent post state there are no good engineering managers at Mozilla. They just said that adjusting bug priorities is the work of a good engineering manager. There's a world of difference. If you want to complain about knee-jerk overreactions, I think you might want to look in the mirror first.
Re: Update Regarding Add-Ons in Firefox
#495Earlier quoted context omitted.
For me at least, it was pleasantly surprising that Google either has no inventory or just no clue who I am, as when ublock got disabled by this bug, YouTube started presenting me with ads for cars in mostly Japanese, with prices in Yen and "Singapore stock also available". I guess because I watched anime videos?
It would be interesting to see what they show for me, but I'm avoiding surfing websites other than HN until it gets fixed (FF for Android).
Perhaps leave yourself a note to change it back once an update ships : )
Re: Update Regarding Add-Ons in Firefox
#496Earlier quoted context omitted.
But that's the point. Either the installer does something malicious or it doesn't. If it does you lost the game. If it doesn't then a simple check is sufficient. Everything else is security theater which makes life worse for everyone. Also, they could still run the verification and prompt the user instead of just forcing the decision.
I don't think that's necessarily true. After all, the policy is effective against undesirable-but-not-malicious extensions. Before signature verification I had extensions installed in Firefox that I didn't install; today I don't. [1] And the clearly malicious action of modifying Firefox to disable signature verification can and should be flagged by anti-malware software, which runs at a higher privilege level. [1] Pu…
... How?
I agree with the sibling poster; it sounds like you already lost.
Re: Update Regarding Add-Ons in Firefox
#497Earlier quoted context omitted.
If you didn't have browsers auto updating no-one would update them manually, meaning bad news for web developers wanting to take advantage of newer features.
I understand the appeal of that for developers but it comes at the cost of users agency and control of their own system, I've been very annoyed with even simple UI changes in firefox updates as I simply didn't ask or want any such change. Reading other comments here it's clear I'm a dying breed of old and stubborn users that prefers full control and agency over my own system. Making it easier for web developers to im…
Re: Update Regarding Add-Ons in Firefox
#498Earlier quoted context omitted.
Out of interest, what's special about this add-on that allows it to install intermediate certificates like this vs. an add-on that any random dev could write?
In the manifest it has a special "experiment_apis": "experiment_apis": { "skeleton": { "schema": "experiments/skeleton/schema.json", "parent": { "scopes": [ "addon_parent" ], "script": "experiments/skeleton/api.js", "paths": [ [ "experiments", "skeleton" ] ] } } } Only Mozilla can use these on release versions of Firefox. If you want some more details then try here: https://firefox-source-docs.mozilla.org/toolkit/com…
Re: Update Regarding Add-Ons in Firefox
#499Earlier quoted context omitted.
Out of interest, what's special about this add-on that allows it to install intermediate certificates like this vs. an add-on that any random dev could write?
In the manifest it has a special "experiment_apis": "experiment_apis": { "skeleton": { "schema": "experiments/skeleton/schema.json", "parent": { "scopes": [ "addon_parent" ], "script": "experiments/skeleton/api.js", "paths": [ [ "experiments", "skeleton" ] ] } } } Only Mozilla can use these on release versions of Firefox. If you want some more details then try here: https://firefox-source-docs.mozilla.org/toolkit/com…
Re: Update Regarding Add-Ons in Firefox
#500Earlier quoted context omitted.
That's a bit different though- generally speaking those messages show up when the javascript tracker can't talk to the server it's communicating with. Even though it's "detecting" the adblock it isn't able to send information back from the client about it.
> Even though it's "detecting" the adblock it isn't able to send information back from the client about it. Sure they can, they can just send back a resource request. It could even be for like an image with a query string attached with it, it doesn't have to be an ajax request necessarily.