Live data from Hacker News

Firefox 88.0

mozilla.org

71–80 of 209 posts

Re: Firefox 88.0

#71
post #3

> PDF forms now support JavaScript embedded in PDF files. Some PDF forms use JavaScript for validation and other interactive features. The amount of complexity that one can put into a PDF is both surprising and a tad frightening.

Firefox opens PDF via pdf.js. From security perspective it's merely yet another bloated web page.

Re: Firefox 88.0

#72
post #3

> PDF forms now support JavaScript embedded in PDF files. Some PDF forms use JavaScript for validation and other interactive features. The amount of complexity that one can put into a PDF is both surprising and a tad frightening.

> The amount of complexity that one can put into a PDF is both surprising and a tad frightening.

off-topic, but fwiw: the pocorgtfo16.pdf[1] is a polyglot that is valid PDF, a ZIP archive, and a Bash script that runs a Python webserver which hosts Kaitai Struct’s WebIDE which, allows you to view the file’s own annotated bytes.

[1] https://www.alchemistowl.org/pocorgtfo/pocorgtfo16.pdf

Re: Firefox 88.0

#73
post #55

Earlier quoted context omitted.

I used it yesterday. I regularly use FTP at work, well preferably SFTP but it does happen. While we have a automatic deployment pipeline for our own projects, lots of our customers that host externally still use good old FTP. I don't think FTP is ever going to fully die. It is still a typical way to deploy your files when using a shared web hosting that does not offer SSH.

> I don't think FTP is ever going to fully die. It is still a typical way to deploy your files when using a shared web hosting that does not offer SSH. Surely those abominations are almost dead now though, in the age of the low-overhead VMs?

Some parts of the tech world seem quick to forget that smaller (and sometimes bigger) non-tech companies do exist. Sometimes non professional people create and deploy websites either as hobbyists or simply because there is no budget to hire a proper tech guy.

Wordpress is still a huge part of the Web and is running fine on shared hosting. And yes it can be an appropriate and cost effective choice for smaller sites even in 2021.

Also adding to that, the one time I did migrate a project from shared hosting to a dockerized VM solution was when the hoster was not supporting the needed PHP version anymore. Meaning hopelessly too old to ever update.

Re: Firefox 88.0

#74
JavaScript in PDF? Have people learned nothing? This is so incredibly stupid. They're just looking for bullshit "features" to implement.

Re: Firefox 88.0

#75
post #51

Earlier quoted context omitted.

I typically use Ctrl+Shift+S for this

I likely would as well if I remembered it. I have always had a problem recalling key combinations across all the applications I use which is why I rely on context menus and tool bars heavily. I've called out VSCode on this a few times as well as it is a memorization fest to work efficiently in there without proper toolbars. It's not just this but I have memory issues in general which have only gotten worse as I've ag…

when I discover a new key-combo I write it on a postit at the bottom of my monitor, lives there for a while until it sticks in my brain.

Re: Firefox 88.0

#76
post #3

> PDF forms now support JavaScript embedded in PDF files. Some PDF forms use JavaScript for validation and other interactive features. The amount of complexity that one can put into a PDF is both surprising and a tad frightening.

> PDF forms now support JavaScript

I thought they always required JS to be enabled. I have JS disabled by default in uBlock Origin, and the inbuilt Firefox PDF viewer doesn't work unless I whitelist and enable JS temporarily for the page. Only then can I read my PDF.

Re: Firefox 88.0

#77
Holy Moly! JavaScript in PDF?!

What were they thinking? It’ll just get disabled in a few months because it makes for one awesome vector attack.

Re: Firefox 88.0

#78
post #13
post #6

Earlier quoted context omitted.

Is this using the browser's own JS engine? Do things like NoScript allow one to turn off PDF JS? On the flip side, are there any examples of PDF JS being actually useful and not a vector for tracking/exploits?

This desperately needs an option to disable PDF js.

You can create a Policy File on Linux named "/etc/firefox/policies/policies.json" to disable pdf through out the system, here is a snippet for just pdf:

{ "policies": { "PDFjs": { "Enabled": false }, "DisableBuiltinPDFViewer": true } }

See:

https://support.mozilla.org/en-US/kb/managing-policies-linux...

Re: Firefox 88.0

#79
post #58

Still no update on super-high CPU usage of Twitch on Firefox, an issue that has been open for at least 4 years [1][2]. I really want to like Firefox and I want there to be viable alternatives to Chrome but when playing video back at 360p (not joking) grinds my 1.5 year old Macbook Pro to a halt on a popular website... I just can't use it. I don't know if this is a video codec issue, a CSS/JS issue that Twitch manages…

Non-solution, but have you seen https://github.com/streamlink/streamlink-twitch-gui? It runs natively using streamlink, and streamlink can use e.g. mpv and use minimal CPU, instead using hardware acceleration (or not run whatever JavaScript Twitch decides to run, at least).

Re: Firefox 88.0

#80
post #3

> PDF forms now support JavaScript embedded in PDF files. Some PDF forms use JavaScript for validation and other interactive features. The amount of complexity that one can put into a PDF is both surprising and a tad frightening.

> PDF forms now support JavaScript I thought they always required JS to be enabled. I have JS disabled by default in uBlock Origin, and the inbuilt Firefox PDF viewer doesn't work unless I whitelist and enable JS temporarily for the page. Only then can I read my PDF.

The firefox PDF reader is based on JS.
Post reply on HN