Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Firefox 84.0

mozilla.org

Post reply on HN
Print view View original

291–300 of 328 posts

Re: Firefox 84.0

#291

Post by skykooler »

IainIreland wrote: post #122
CJefferson wrote: post #51

Is anyone else worried Firefox on Android is becoming increasingly unusable? How well supported is it my Mozilla I wonder. I often find pages render as blank pages until I refresh, and scrolling will often hang for multiple seconds. I was playing "Jackbox Games" (which is played via the web and PC), and I found those of us on Firefox found the text boxes were broken. Just downloading PDFs was broken for several weeks…

(Mozilla employee, though not working directly on mobile) Mozilla is invested in Firefox on Android for the long haul. We landed a complete re-architecture this year (Fenix). It hasn't been completely painless -- for example, as you seem to have experienced, we've had to split our development time between working on the new engine and maintaining the old -- but Fenix is already better than Fennec in most ways and is…

You might be able to answer this - are containers coming to Firefox Mobile at any point? That's the main thing that would make me switch from my phone's default browser.

Re: Firefox 84.0

#292

Post by sicariusnoctis »

chinhodado wrote: post #11

I love Firefox, I use it everyday, I can't imagine using a browser without Tree Style Tab, or all the things that I can do in about:config. At the same time, I can't shake off the dreadful feeling that it will eventually die one day. The market share keeps falling year by year. What is the most realistic future for Firefox?

Have you considered switching from Tree Style Tab to Sidebery?

Re: Firefox 84.0

#293

Post by minitech »

radlad wrote: post #260
minitech wrote: post #169

Earlier quoted context omitted.

Both of those requests can be sent. CORS just stops the response from being read. It’s up to web servers on localhost to assume they’re at just as much risk as any other non-local service, and they often fail to do so. (See also DNS rebinding that nets an attacker the opposite set of permissions, in a sense.)

That's not actually true, at least via Ajax. Certainly you can just throw a POST at the website, and we hope that any web server is secured with CSRF protection. Additionally, the SameSite changes recently introduced by Chrome should further mitigate this problem.[1] > The Cross-Origin Resource Sharing standard works by adding new HTTP headers that let servers describe which origins are permitted to read that informa…

s/CORS/Lack of CORS/, but you can probably tell from my comment as a whole that I was covering exactly what you’ve just mentioned. Forgetting CSRF protection and Host header checks are exactly the kinds of things developers who write software that starts local servers forget all the time.

Re: Firefox 84.0

#294

Post by aorth »

acoard wrote: post #88
johnchristopher wrote: post #79

Earlier quoted context omitted.

Does it mean I can curl https://whatever.localhost without SSL warning for self signed certificates ? That would simplify my life when developing stuff on localhost and importing them between different things over http(s). edit: Kids, you see those articles that regularly hit the frontpage about work/life balance ? The ones about how you need healthy sleep patterns and crunching all night long is actually bad for you…

It means FireFox could visit https://whatever.localhost without SSL warnings for self-signed certs. It has no bearing on cURL. cURL is maintained by Daniel Stenberg (an open source legend), whereas FireFox is maintained by Mozilla. Completely separate. This is like asking if Tesla's new car policy will affect your Toyota.

I was curious about this because the release notes don't mention changing the behavior of HTTPS for localhost. I set up a local test and http://mytest.localhost works without having to add an entry to /etc/hosts, but https://mytest.localhost with a self-signed TLS certificate will still raise a SEC_ERROR_UNKNOWN_ISSUER error. You still need to ignore those or install your own root CA with something like https://github.com/FiloSottile/mkcert for that to work seamlessly.

Re: Firefox 84.0

#295

Post by skinkestek »

sicariusnoctis wrote: post #292
chinhodado wrote: post #11

I love Firefox, I use it everyday, I can't imagine using a browser without Tree Style Tab, or all the things that I can do in about:config. At the same time, I can't shake off the dreadful feeling that it will eventually die one day. The market share keeps falling year by year. What is the most realistic future for Firefox?

Have you considered switching from Tree Style Tab to Sidebery?

I'm using it for my "logged out" browser.

(I keep a Firefox Developer edition which I use for reading documentation, news etc. It is fully stashed up with all my favorite extensions except Bitwarden.

My main browser is almost bare bones, just BitWarden, uBlock origin etc.

As for why: I'm conservative in more than one way. The more separation I can add between customer data and auto updating extensions the better.

Re: Firefox 84.0

#296

Post by skinkestek »

dblohm7 wrote: post #143
dorfsmay wrote: post #100

Earlier quoted context omitted.

Correct. I wish a fund were created for Firefox, like the one for Thunderbird. I'd love to give towards Firefox but have no desire to fund Mozilla mismanagement.

Your best options are: * Use Firefox; * Consider Pocket Premium; * Subscribe to Mozilla VPN.

Does Pocket Premium go directly to Firefox?

If so I'm probably in (even if I don't use Pocket :-)

Firefox VPN isn't available for me yet.

Re: Firefox 84.0

#297

Post by skinkestek »

I see there are many here who work for or follow Mozilla / Firefox closely.

Could someone share:

- is there any progress on fixing the extensions API (it doesn't have to be exactly equal to the old, but for example some way to disable tabs on top would be highly appreciated as I always use Sidebery or TST in one or more browsers.) (I generally don't complain much about ux/ui, but this is a real mess).

- Are management aware that many of us badly wanted to support the Firefox / Servo teams while we just as badly don't want to support the people who fired lots of them, agreed to shady extension deals etc? (Personally I would accept a heartfelt apology and a change in direction.)

Re: Firefox 84.0

#298

Post by driton »

slenk wrote: post #158
blindm wrote: post #3

Earlier quoted context omitted.

And if you sorely miss Flash, you can run it with Ruffle: https://ruffle.rs/

I will have to keep that in mind. A lot of old management interfaces for rack-mount servers run flash for their web interface :S

That sounds interesting, can you please elaborate on the whys and hows?

Re: Firefox 84.0

#299

Post by [deleted] »

hutzlibu wrote: post #222
JoshTriplett wrote: post #207

Earlier quoted context omitted.

Yahoo outbid Google one year, and Firefox duly changed the default search engine for a while.

FFs market share was a bit higher back then, though. I see the main asset of firefox as being a) not google tech b) mobile browser with ublock c) tech nerds with tons of custom FF addons, never wanting to switch So I don't see them go away anytime soon, but I also see nothing to stop the decrease of their marketshare. That means, unless mozilla would focus on their core values again. They lost much trust with quite s…

[deleted]

Re: Firefox 84.0

#300

Post by mackrevinack »

Macha wrote: post #125
gnusty_gnurc wrote: post #57

Earlier quoted context omitted.

> I can't imagine using a browser without Tree Style Tab, or all the things that I can do in about:config Vivaldi is a configuration juggernaut in my experience. Reminds me of the glory days of Opera. It has a wonderful vertical tab bar too - built-in .

It is unfortunately closed source, however.

vivalidi is open source https://vivaldi.com/source

you can't contribute to it like you can with something on github, but the source is open none the less

Post reply on HN