Nit: the preferred abbreviation is Fx or fx, instead of ff. See FAQ 8 on https://website-archive.mozilla.org/www.mozilla.org/firefox_...
That FAQ is from 2005, is it still the preferred abbreviation in 2021?
Firefox Profilemaker
21–30 of 53 posts
Re: Firefox Profilemaker
#22I'm wondering about the security implications of this default referrer setting to "Spoof referer (send the same url)" (step "Privacy", third item from the top).
Wouldn't that then bypass all csrf checks, where the site checks if the referer is correct, because your browser is overriding and always setting it to the expected origin?
Re: Firefox Profilemaker
#23Terrible defaults, as discussed below. Also I kind of dislike the fact telemetry is disabled by default: you’re making all these non-default changes to Firefox, then you’re actively disabling the feature that tells Mozilla you value these non-default features, or any crash reports relating to them?
I get it, wide-ranging telemetry is bad. But it seems like it actively hurts Mozilla to do this.
Re: Firefox Profilemaker
#24Earlier quoted context omitted.
And on the other hand one of the biggest annoyances of the web - autoplaying videos - is enabled by default! Clearly shows that you cannot please everyone with your defaults, no matter how hard you try.
Afaik the way autoplay works is that if it is on, it does only autoplay videos without sound. This can be useful for looping video backgrounds, memes and such. If they want audio too, autoplay does not work (not even if you try to manually trigger it via js). In my eyes (browser-configurable) autoplay without sound is an acceptable use case. Autoplay with sound is not.
I would have agreed with that until news sites started popping videos into view as soon as you start reading their news articles. Since that became a way too common thing, I don't care enough for the other valid uses cases anymore and right away disable any sort of autoplay. :(
Re: Firefox Profilemaker
#25I like it design wise, but like a lot of these "de-clutter" tools it defaults to disabling security features without warning and will break some sites while making most sites slower. Plus it ironically installs a bunch of browser addons. So if you hit next, next, next you'll lose: Google Safebrowsing (security), malware scan (security), DNS over HTTPS (security and sometimes functionality), Automatic Browser Updates,…
It's making trade-offs, and differently than the Mozilla defaults. Google Safebrowsing reduces privacy (not because of the content, but because it says "hi Google, I'm running Firefox at this IP address"), DNS over HTTPS happily sends all your DNS queries to Cloudflare (and since we're arguing over functionality, breaks some split-horizon DNS), Widevine is blatantly anti-user, third-party cookies are a privacy proble…
Quite. My FF looks a lot like this provides. I refuse to use Widevine and explicitly disable it and DRM on principle, and I want websites to know that this is something that is perfectly legitimate to do -- unlike Chrome where they've removed the ability to turn it off without deleting the horrible library itself.
I understand that some might hate this choice. Mozilla defaults to their preferences. These defaults are pleasingly made for people like me.
Re: Firefox Profilemaker
#26I like it design wise, but like a lot of these "de-clutter" tools it defaults to disabling security features without warning and will break some sites while making most sites slower. Plus it ironically installs a bunch of browser addons. So if you hit next, next, next you'll lose: Google Safebrowsing (security), malware scan (security), DNS over HTTPS (security and sometimes functionality), Automatic Browser Updates,…
It's making trade-offs, and differently than the Mozilla defaults. Google Safebrowsing reduces privacy (not because of the content, but because it says "hi Google, I'm running Firefox at this IP address"), DNS over HTTPS happily sends all your DNS queries to Cloudflare (and since we're arguing over functionality, breaks some split-horizon DNS), Widevine is blatantly anti-user, third-party cookies are a privacy proble…
I'd rather Cloudflare get my DNS queries than a broken network middlebox.
Re: Firefox Profilemaker
#27I like it design wise, but like a lot of these "de-clutter" tools it defaults to disabling security features without warning and will break some sites while making most sites slower. Plus it ironically installs a bunch of browser addons. So if you hit next, next, next you'll lose: Google Safebrowsing (security), malware scan (security), DNS over HTTPS (security and sometimes functionality), Automatic Browser Updates,…
Most of these defaults are what I have mine set to. I wouldn't say it's "simply awful", just different priorities. Having a tool like this allows the choice to be made in the first place, versus installing a browser and not being able to pick these without exploring.
Re: Firefox Profilemaker
#28Earlier quoted context omitted.
It's making trade-offs, and differently than the Mozilla defaults. Google Safebrowsing reduces privacy (not because of the content, but because it says "hi Google, I'm running Firefox at this IP address"), DNS over HTTPS happily sends all your DNS queries to Cloudflare (and since we're arguing over functionality, breaks some split-horizon DNS), Widevine is blatantly anti-user, third-party cookies are a privacy proble…
I'd rather Cloudflare get my DNS queries than a broken network middlebox.
And I'd like my local pihole equivalent to get them. Most defaults fail for someone.
Re: Firefox Profilemaker
#29Re: Firefox Profilemaker
#30Wizard is cool, but would love if this also included the GUI/about:config option to make this change.
Exactly what I was thinking. I would love this if it was just a list of options that you may consider changing.