Earlier quoted context omitted.
"We" as in "the people who knows how to use the command line". Unfortunately very few of the people I send files to knows that. There's https://webwormhole.io/ and https://file.pizza/ , but can I know what they really do behind the scenes? Native open-source software for this would be a dream come true. It's 2020 and I still wrestle with sending files between devices. And no, don't take this as a wish for creating ju…
I've started a UI for magic wormhole: https://github.com/sneakypete81/wormhole-ui It's GPL, cross-platform, native (Qt) and uses the same Python library as the Magic Wormhole CLI.
What happened to Firefox Send?
251–260 of 267 posts
Re: What happened to Firefox Send?
#252Earlier quoted context omitted.
Magic wormhole is your friend
Magic Wormhole is a security disaster. Do not use if you have other options. 1) By default, authentication key has only 16 bits of entropy. (I wish I was making this up…) 2) There's no good UI to make the key stronger: you can either use, say, "--code-length 16", which makes the receiving code ridiculously long, or provide your own code with "--code", in which case it's visible to other local users via ps(1). 3) Betw…
Worse, because MW is so happy to reuse channel ids, with some amount of luck, one can ruin multiple transfers in one go:
• Alice runs "wormhole send foo", which generates code "1-revenue-hamlet".
• Mallory runs "wormhole receive 1-bad-code-haha", ruining Alice's transfer.
• Bob runs "wormhole send bar", which generates code "1-enchanting-drunken". (Channel id 1 is now technically free, so why not.)
• Alice's friend, unaware of Mallory's malfeasance, runs "wormhole receive 1-revenue-hamlet", inadvertently ruining Bob's transfer.
Re: What happened to Firefox Send?
#253Earlier quoted context omitted.
Is it? I feel that people vastly overestimate the actual number of competent programmers (not managers, CxOs, etc) many projects need. Consider that even here on HN we have one person who wrote their own HTML5 renderer, JS-like scripting language, CSS, etc from scratch (csmile). How do you figure that to go from that to what is needed to make a browser that renders sites properly you need to add more than 49 addition…
Sciter doesn't even come close to a fraction of what Gecko or WebKit offers or does, and it still took the author many years to get to that point, so I'm not sure what you're trying to get at. The "JS-like engine" is an excellent example. It turns out, you need an actual JS engine to run real websites, not a "JS-like" engine. The difference between 80% and 100% of that problem is massive, and it also turns out runnin…
It is close enough to show that a web engine can be made by a single person even if it doesn't fully adhere to the standards and its functionality is certainly not less than 1/49th of what you'd need to go there.
> The "JS-like engine" is an excellent example. It turns out, you need an actual JS engine to run real websites, not a "JS-like" engine.
Fabrice Bellard has written (among many other things) a full modern JavaScript interpreter, again showing you do not need a "dozen" people (like another commented mentioned) to make such an interpreter.
Re: What happened to Firefox Send?
#254Earlier quoted context omitted.
Is it? I feel that people vastly overestimate the actual number of competent programmers (not managers, CxOs, etc) many projects need. Consider that even here on HN we have one person who wrote their own HTML5 renderer, JS-like scripting language, CSS, etc from scratch (csmile). How do you figure that to go from that to what is needed to make a browser that renders sites properly you need to add more than 49 addition…
Its not just about the code though. Somehow that code needs to keep up with the latest standards and magically be delivered to my client device. To think that a project as complex as the Firefox ecosystem can be maintained with less than 50 engineers doesn't match my experience working on large product teams. Here's my estimate: * A dozen build engineers to support development and builds for X client platforms * A do…
> * A dozen engineers for the Javascript VM
> * Dozens of engineers to support ongoing javascript and CSS standards
Fabrice Bellard is a single person who in his free time has made a full modern JavaScript engine. Key parts: single person, free time.
I call bullshit that you need "dozens of engineers" to make a JavaScript engine - what you need to good engineers (and to ensure they stay around).
Re: What happened to Firefox Send?
#255Earlier quoted context omitted.
Is it? I feel that people vastly overestimate the actual number of competent programmers (not managers, CxOs, etc) many projects need. Consider that even here on HN we have one person who wrote their own HTML5 renderer, JS-like scripting language, CSS, etc from scratch (csmile). How do you figure that to go from that to what is needed to make a browser that renders sites properly you need to add more than 49 addition…
Yeah, as someone who wrote a good chunk of a CSS layout engine (Servo) I can confidently say that this comment demonstrates a huge lack of appreciation of what the scale of work involved is.
Re: What happened to Firefox Send?
#256To be honest, I think some form of abuse was bound to happen. Your files are encrypted client-side with JavaScript before uploading, so to the server it's just an opaque blob. Out of curiosity, I did some technical analysis¹ of how your files were being encrypted to see if they were really secure and as a side-effect, also wrote a Go client for it. An interesting property I did discover about the way the encryption k…
Might be a stupid question, but why server can't see the secret key? You said that "note that URL fragments are never sent to the server", which is true when uploading the file. But when someone is downloading the file, they need to use this full URL with secret key right? By then, the server will get the key and can decrypt the file themselves.
> Note that URL fragments are never sent to the server. They are often used for page anchors, and sometimes to keep track of local state in SPA.
Re: What happened to Firefox Send?
#257Earlier quoted context omitted.
The downside with Dropbox's way is that a lot of people using the link will think that they need to register an account. I think the link offers you to create one but it's not clear that it's not required.
So use Nextcloud instead ;-) You can link-share files and folders as read-only, write-only (i.e. upload drop), or read-and-write.
Re: What happened to Firefox Send?
#258Earlier quoted context omitted.
Nearly all their "side projects" look like greenfields used by the project teams to boost their CVs so they can land better jobs. Those teams know very well that those projects have no use case, but they dont care. Foundation does not care either, since it is busy with increasing own remuneration and politics. Meanwhile their core product lost around 10 percentage points of market share (from 15% marketshare to 5%):…
I hesitate to reply to this, because it's such a caricature of negativity. It's kind of a rollup of all of the crap that HN comes up with to fling at Mozilla. Everything has some kernel of truth in it, but it's pretty heavily buried. 1) The majority of developers at Mozilla are working on Firefox. Many more than 50. It is true that we have fewer staff than Google has working on Chrome (Mozilla is less than half, I he…
When you write about Firefox, you seem to write about various side projects like Firefox-Send, or Pocket that barely add any value to the actual users. Users don't want them (or even ask for them) - yet the teams are very happy to start and make some half-baked greenfield product [after all Firefox Send is a project failure - couldn't stop malware + nobody used it].
This might be a blasphemy, but IMHO even creating Rust is a bad side project. [maybe good for the world, but definitely bad for Firefox - resources are removed from browser development team]
2) Your comment makes me lose hope. Users are very clear: they want extensions. Yet you act as if XUL extensions is the only way to make extensions. Ever.
Do you mean that the whole Firefox team (probably 1000 people) cannot invent a new and secure extension model that allows to adjust the browser per user needs? I get it - creating it is hard. But it is literally your job. When you are a Firefox programmer you should work on the core product. Not on some easy side-project.
From outside perspective it looks that nobody wanted to deal with the difficult problems. Management just let the developers to ignore them and create new, sexy, greenfield side projects.
Another user pointed out that the new extension model does not even allow to remap keys immediately (personally haven't tested it) - most computer games allow this, so don't act as if this was some impossible programming challenge.
3) When you release unfinished, buggy products you alienate your user base. Most users understand that software can have bugs. But why does Mozilla constantly release things that break the users' work-flow? From user perspective it feels like change for the sake of change. You start to wonder what feature will the new patch remove or break.
At the same time your competitor is reliable. They can change the inside, but they don't touch the outside: the user interface stays constant.
4) The problems with extension signatures is a complete fiasco of the Firefox project management. It shows that inside you have zero control over the process - no tools to track workflow, critical tasks and what needs to be done? (are you still stuck on mailing lists?)
This one is 100% on Mozilla and please dont come up with some excuses, because they sounds pathetic.
I repeat: from user perspective it looks like a very small part of Mozilla deals with the actual Firefox and everyone deals with other, random stuff. Some gatekeeper had one job: sign the extensions once per year - and failed.
Also when you sign the extensions using some strange side channels, you sound like hypocrites when you claim that Firefox does not spy on its users.
5) Instead of focusing on core product, old bugs, user requests - the teams prefer to make "sexy" greenfield projects.
Proving proper Firefox installers to companies, means higher market share and consequently more money from Google. It's like someone at Mozilla was sabotaging the company from inside. Sorry, your argument that providing installers cost money is just absurd. Why you dont use the same argument about Firefox-Send, Pocket, or 20 other side-projects that are leeching development time/money from the actual browser? Browser is the one that earns money, but it is stripped from resources that are used for "adventures" of developers. Like the Firefox Send "adventure" that was a failed idea from the start, failed at the end. That money could have been spent working on your core product.
Also, when we speak about installers for corporate multiple people claim that inside Mozilla, there was a stubborn idiot that didnt want it to happen. It is a complete failure of management who didnt identify that person and fire on the spot.
Re: What happened to Firefox Send?
#259Earlier quoted context omitted.
Nearly all their "side projects" look like greenfields used by the project teams to boost their CVs so they can land better jobs. Those teams know very well that those projects have no use case, but they dont care. Foundation does not care either, since it is busy with increasing own remuneration and politics. Meanwhile their core product lost around 10 percentage points of market share (from 15% marketshare to 5%):…
Regarding 2) ...evidently focusing on their existing userbase isn't viable. So often these comments like "they are ignoring their user base" and "why won't they let us donate to firefox" miss the point (even if true / beneficial)...they don't want to double down on their existing user base; they want to expand their userbase to go with their mission of bringing more trust to the web Firefox was the better extension p…
I disagree.
First of all: their strategy to ignore the requests of existing users in order to focus on some potential new users doesn't work. Firefox lost around 10 percentage points of market share in last few years.
Second of all: the whole "strategy" of alienating current user base in hope of finding new users is batshit insane.
Browsers are a mature product: it is much easier to keep current users happy and grow organically. This is not some start-up that will come up with a killer feature - you evolve the product.
You can scroll a bit up, even in this thread to see people complaining about the terrible user experience in last Firefox for Android roll out. Do you see a single person praising it? Long gone are the days when tech-savy users would recommend Firefox to their friends and family. Also, why did they even roll out a half baked product? Couldnt they fix it before rolling it out?
As an user, at this point you might start to wonder if it is even worth it to update Firefox. How will the new patch break your workflow? Will some useful features be cut? It's not even about the bugs and the project seems to have them.
People go to Chrome because it is stable. No batshit insane changes to UI or workflow. [and yes, I am aware that Chrome wants to kill the address bar to introduce "AMP" - what is a terrible thing for whole internet]
Re: What happened to Firefox Send?
#260....oh. I have used it a few times in the past for the classic task "move large file between two computers that are next to each other, how the hell do I do this simply", but yeah, I can't see how that would be cost-effective for Firefox.
Easy ways to copy files between nearby computers: scp The python 3 equivalent of -mSimpleHTTPServer Samba Or maybe I’m missing something.
and I go send it through gmail as that’s the fastest way