Live data from Hacker News

Introducing Mozilla Firefox Accounts

blog.mozilla.org

21–30 of 63 posts

Re: Introducing Mozilla Firefox Accounts

#21
post #20

> Last year, we created a new team at Mozilla to explore one specific area of the Web that’s grown with the explosion of mobile devices — the cloud (sometimes called Internet servers). Hey Mozilla, you are too honest about the cloud thing. :)

Truth.

Re: Introducing Mozilla Firefox Accounts

#22
post #20

> Last year, we created a new team at Mozilla to explore one specific area of the Web that’s grown with the explosion of mobile devices — the cloud (sometimes called Internet servers). Hey Mozilla, you are too honest about the cloud thing. :)

Truth.

Yeah, after reading this I can imagine myself translating "we have a cloud" to "WE GOT SERVERS LOL" and the like...

Re: Introducing Mozilla Firefox Accounts

#23
post #18

Love it. I abandoned the old sync. Figuring out how to set it up was more difficult than trying to learn Julia. Only thing I didn't love was the icon, but its beta so hey. Link to Aurora nightly: ftp://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-mozilla-aurora/

How is Options>Sync>Pair a Device and follow the directions difficult? I mean, it was definitely too many steps, and it wasn't labelled clearly enough which device was the master and which was the slave, but those are more like "users won't bother to find it" troubles, rather than it actually being difficult if you want to turn it on.

Please see the presentation. It gives you some clue why the old sync wasn't user friendly (you probably can guess already).

https://news.ycombinator.com/item?id=7200425

Basically, many assumed it was a backup program. Recovery was painful. There was multiple iterations of enhancement before they decided to roll out Fx Account, it was clear that users didn't like the original Sync.

Fx Account is more than Sync. This is like having a Google account and allows you to connect to Mozilla services like Marketplace and all instances of Firefox a user owns.

Re: Introducing Mozilla Firefox Accounts

#24
post #18

Love it. I abandoned the old sync. Figuring out how to set it up was more difficult than trying to learn Julia. Only thing I didn't love was the icon, but its beta so hey. Link to Aurora nightly: ftp://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-mozilla-aurora/

How is Options>Sync>Pair a Device and follow the directions difficult? I mean, it was definitely too many steps, and it wasn't labelled clearly enough which device was the master and which was the slave, but those are more like "users won't bother to find it" troubles, rather than it actually being difficult if you want to turn it on.

The steps to turn on sync for devices where you don't have access to both at the same time are a bit mangled since you're required to use the recovery key.

I'm hoping with this it will turn into something close to Chrome's sync

Re: Introducing Mozilla Firefox Accounts

#26
post #17
post #12

Will it still work with the self hosted sync server? Or will there be a self hosted one for Firefox Accounts? And I hope they will implement it on Firefox OS very soon, otherwise the whole syncing is not really that interesting.

I expect those of us that host their own Sync server will have to deploy this[0] one instead. This is the general idea I got reading [1]. [0]: https://github.com/mozilla/fxa-auth-server [1]: https://blog.mozilla.org/services/2014/02/07/a-better-firefo...

That.. looks quite a convoluted setup for 'simple' private hosting. Plus, the instructions seem quite sparse.

Is that something Mozilla is officially endorsing or something that might perhaps work, good luck with that?

Re: Introducing Mozilla Firefox Accounts

#27

Earlier quoted context omitted.

It actually uses Persona inside, and it's an email-as-ID as well. Also, this is a new occurrence of scrypt used in the wild.

That's not quite accurate; Firefox Accounts uses the BrowserID Protocol, of which Persona is an implementation. That is to say, it authenticates using BrowserID assertions, but does not directly tie in to Persona accounts. Yet. https://developer.mozilla.org/Persona/Glossary

You mean it doesn't use Mozilla's bridge? Presumably, if you have your own IdP, it will use it, since it uses BrowserID.

Re: Introducing Mozilla Firefox Accounts

#28
How is this any better or different than one of the other cloud providers? I read nothing about self-hosting this, nothing about end-to-end encryption, nothing about Persona.

I understand Mozilla is in a tight place with no access to iOS, little market share in mobile in general and the new walled gardens erected by Google, Apple, FB and soon Microsoft. But simply playing copy cat and catchup does not cut it.

Re: Introducing Mozilla Firefox Accounts

#29
post #28

How is this any better or different than one of the other cloud providers? I read nothing about self-hosting this, nothing about end-to-end encryption, nothing about Persona. I understand Mozilla is in a tight place with no access to iOS, little market share in mobile in general and the new walled gardens erected by Google, Apple, FB and soon Microsoft. But simply playing copy cat and catchup does not cut it.

Click on "same browser-based encryption". It's a link to an earlier blog post where they explain the encryption methods used in Firefox Sync. It mentions end-to-end encryption, too.

Re: Introducing Mozilla Firefox Accounts

#30
post #29
post #28

How is this any better or different than one of the other cloud providers? I read nothing about self-hosting this, nothing about end-to-end encryption, nothing about Persona. I understand Mozilla is in a tight place with no access to iOS, little market share in mobile in general and the new walled gardens erected by Google, Apple, FB and soon Microsoft. But simply playing copy cat and catchup does not cut it.

Click on "same browser-based encryption". It's a link to an earlier blog post where they explain the encryption methods used in Firefox Sync. It mentions end-to-end encryption, too.

As Mozilla is a US-based organization, is anyone afraid of the NSA/USG commandeering Mozilla to setup pen-register/password-interception a la Lavabit?

Only a couple of months ago comments like mine would have been passed off as tin-foil conspiracy. Now, I think everyone's sense of normal is now tightly wrapped in tin-foil, encased in lead.

Post reply on HN