Firefox Now Available with Enhanced Tracking Protection by Default • Hacker News Board

Re: Firefox Now Available with Enhanced Tracking Protection by Default

#141

Post by gruez » Wed, Jun 05, 2019, 1:49 AM UTC

mschuster91 wrote: post #116

chii wrote: post #110

Earlier quoted context omitted.

If they already have your phone, you're already pwned.

>If they already have your phone, you're already pwned. No, that's not what GP means. If the attacker manages to get malware on the Mac, for example by exploiting a browser 0day, then the attacker can simply circumvent the 2FA by making the Mac fetch the 2FA code. The user won't notice it.

If the attacker manages to get malware on the mac, they can also wait for you to do a login, and steal your 2fa code as you enter it.

Re: Firefox Now Available with Enhanced Tracking Protection by Default

#142

Post by grahamburger » Wed, Jun 05, 2019, 2:01 AM UTC

whizzkid wrote: post #4

It is funny how my browser preferences has changed over last 5 years. 2014 me as a developer had Chrome as number 1 browser for both development and all rest. Firefox once a month just to check cross browser compatibility. And Safari was just installed without me using it. 2019 me uses Safari for everything except development. Excellent power consumption and UX. Firefox for development. And lastly Chrome for all web…

Google Meet works fine for me in Firefox fwiw. I'm in meetings several hours a day on Firefox nightly on a Mac.

Re: Firefox Now Available with Enhanced Tracking Protection by Default

#143

Post by ViViDboarder » Wed, Jun 05, 2019, 2:01 AM UTC

gruez wrote: post #141

mschuster91 wrote: post #116

Earlier quoted context omitted.

>If they already have your phone, you're already pwned. No, that's not what GP means. If the attacker manages to get malware on the Mac, for example by exploiting a browser 0day, then the attacker can simply circumvent the 2FA by making the Mac fetch the 2FA code. The user won't notice it.

If the attacker manages to get malware on the mac, they can also wait for you to do a login, and steal your 2fa code as you enter it.

Or just steal your session tokens. Not all apps are secure enough to prevent session roaming.

Re: Firefox Now Available with Enhanced Tracking Protection by Default

#144

Post by mschuster91 » Wed, Jun 05, 2019, 2:03 AM UTC

cortesoft wrote: post #129

mschuster91 wrote: post #116

Earlier quoted context omitted.

>If they already have your phone, you're already pwned. No, that's not what GP means. If the attacker manages to get malware on the Mac, for example by exploiting a browser 0day, then the attacker can simply circumvent the 2FA by making the Mac fetch the 2FA code. The user won't notice it.

Same could be said of the phone, right? A zero day on the phone would circumvent the 2FA. Really, the SMS part is the actual weak link in the chain. Easier to hijack SMS than own a computer or phone.

> Easier to hijack SMS than own a computer or phone.

That depends on the country, in Germany it's way more difficult.

Re: Firefox Now Available with Enhanced Tracking Protection by Default

#145

Post by dvcrn » Wed, Jun 05, 2019, 2:07 AM UTC

whizzkid wrote: post #4

It is funny how my browser preferences has changed over last 5 years. 2014 me as a developer had Chrome as number 1 browser for both development and all rest. Firefox once a month just to check cross browser compatibility. And Safari was just installed without me using it. 2019 me uses Safari for everything except development. Excellent power consumption and UX. Firefox for development. And lastly Chrome for all web…

I also completely switched to Safari a few years ago mainly for power consumption (how can you all run chrome on battery??), but there isn’t really anything I miss in it these days.

It also integrates very well with my other Apple devices, and works with AppleScripts and keyboard maestro to quickly do complex macros and talk to other apps.

Re: Firefox Now Available with Enhanced Tracking Protection by Default

#146

Post by kijin » Wed, Jun 05, 2019, 2:16 AM UTC

whizzkid wrote: post #4

It is funny how my browser preferences has changed over last 5 years. 2014 me as a developer had Chrome as number 1 browser for both development and all rest. Firefox once a month just to check cross browser compatibility. And Safari was just installed without me using it. 2019 me uses Safari for everything except development. Excellent power consumption and UX. Firefox for development. And lastly Chrome for all web…

My preferences haven't changed since 2007 when Chrome didn't even exist. Firefox for everything; Safari once in a while to check browser compatibility; ditto for IE & Chrome; and The Back Button for apps that only work in one browser. It's been a while since I stopped caring about performance and power consumption because I have more performance and battery life than I know what to do with anyway.

I don't regret having stayed with Firefox through the years when Chrome was all the rage. IE6 was the most popular browser in the world when I first tried Firefox, so I know how it feels. Other browsers come and go, but Firefox keeps burning bright.

Re: Firefox Now Available with Enhanced Tracking Protection by Default

#147

Post by m-p-3 » Wed, Jun 05, 2019, 2:22 AM UTC

iscrewyou wrote: post #85

whizzkid wrote: post #4

It is funny how my browser preferences has changed over last 5 years. 2014 me as a developer had Chrome as number 1 browser for both development and all rest. Firefox once a month just to check cross browser compatibility. And Safari was just installed without me using it. 2019 me uses Safari for everything except development. Excellent power consumption and UX. Firefox for development. And lastly Chrome for all web…

I would love to switch to safari. What do you use for ad-blocking?

Pi-Hole is a nice DNS-level adblocker, works with anything.

Otherwise I discovered nextdns.io recently, which seems to work well too.

Re: Firefox Now Available with Enhanced Tracking Protection by Default

#148

Post by latexr » Wed, Jun 05, 2019, 2:23 AM UTC

iscrewyou wrote: post #102

Wowfunhappy wrote: post #92

Earlier quoted context omitted.

UBlock Origin supports Safari: https://safari-extensions.apple.com/details/?id=com.el1t.uBl...

I didn’t realize unlock origin works on safari. This is very helpful. Thanks!

It’s deprecated.

Re: Firefox Now Available with Enhanced Tracking Protection by Default

#149

Post by dralley » Wed, Jun 05, 2019, 2:26 AM UTC

joecool1029 wrote: post #37

jacquesm wrote: post #7

I have two main computers. One has for continuity reasons the old version of Firefox, the other the new one. The old version is so much more usable that I find myself using that computer much more frequently. It is rock solid with 100's of tabs open, all my extensions work and without silly restrictions on what they can and can not do and it uses a lot less memory. It's measurably faster too. I'm all for progress and…

If I had to guess? Try disabling webrender on the new computer. Firefox is rolling this out by default but if your GPU sucks or has fucked up drivers for whatever reason it can cause severe performance issues. goto about:config and search for gfx.webrender.enabled and make sure it's set to false. EDIT: More info on the rollout https://www.ghacks.net/2019/05/20/firefox-webrender-rollout-...

Webrender is only rolled out to something like 2% of users, that is unlikely to be the problem.

Re: Firefox Now Available with Enhanced Tracking Protection by Default

#150

Post by eikenberry » Wed, Jun 05, 2019, 2:32 AM UTC

jillesvangurp wrote: post #136

eikenberry wrote: post #64

Starting to look forward to July when the next ESR will be out. Really tempted to just go ahead and upgrade to FF67 now but have grown fond of the stability of the ESR releases.

I've been on the Beta channel for the last few years. I can't remember the last time it crashed. It's just not a thing with Firefox these days. But then, they do push out new betas every few days so I end up restarting the browser quite often. Either way, stability is fine even with the Betas. I'm pretty sure there are quite many beta users so by the time a release comes out of beta, it has already survived many week…

Thanks. I switched to Chromium way back when FF first started their fast release cycle and kept breaking all my plugins. I finally switched back about a year or so ago and stuck with the ESR releases to be sure to avoid that. But now that they seem to have a stable plugin API I was considering switching to the standard stable releases as it doesn't seem like it should be an issue anymore.

Though that also means finding a good source for them as I currently just use the packages from Debian Stable (well, upcoming stable as I upgraded to Buster early).