Live data from Hacker News

Firefox Tweaks – An attempt to make Firefox suck less

github.com

11–20 of 67 posts

Re: Firefox Tweaks – An attempt to make Firefox suck less

#11
post #3
post #2

Ugh, it has "disable webgl" because it's a "debatable" security concern? And disable ipv6? I hope people know what these settings are for before they apply these.

Retitle "Project to make Firefox suck more"

No, this is definitely suckless: http://suckless.org/philosophy

Re: Firefox Tweaks – An attempt to make Firefox suck less

#12

> Remove "(site) is now fullscreen" nag message and make it faster For a list that want to make the browser more secure, why do they want to remove the only line of defense against sites using fullscreen mode for phishing? > Disable PDF reader PDF.js has fewer security vulnerabilities than desktop PDF readers. > Disable 'safe browsing' aka. Google tracking/logging This seems like a really bad idea for most users

It says "suck less", not more secure. And this isn't something that most users would use.

Re: Firefox Tweaks – An attempt to make Firefox suck less

#13
post #9
post #6

Not a great attempt IMO. The networking and UI things are a valiant effort. Mixing them with non-mainstream security concerns are a bad idea. You may feel that safe-browsing is tracking by the man, but advising newbies to turn it off is borderline irresponsible. Similar argument for ipv6 (wtf), error reporting (congrats: your bugs will never be fixed cause firefox doesn't know about them), and geolocation ("why doesn…

Made a PR: https://github.com/dfkt/firefox-tweaks/pull/1

A critique and a follow-up. Better than almost everyone.

Re: Firefox Tweaks – An attempt to make Firefox suck less

#15
post #7

> Remove "(site) is now fullscreen" nag message and make it faster For a list that want to make the browser more secure, why do they want to remove the only line of defense against sites using fullscreen mode for phishing? > Disable PDF reader PDF.js has fewer security vulnerabilities than desktop PDF readers. > Disable 'safe browsing' aka. Google tracking/logging This seems like a really bad idea for most users

The only time I ever see the fullscreen message is when the screen has essentially already fullscreened itself in a case where I want it to. =/

Then you probably haven't visited a phishing site that uses this technique.

Re: Firefox Tweaks – An attempt to make Firefox suck less

#16
post #10

Why Reading mode is even considered "bloatware"?

Well it was added recently, during the same time as things like pocket and hello are being added. A lot of people will never use it, so it's fair for them to put it in the same bloatware category. I use it a lot on mobile, not so much on desktop. I didn't want to disable it.

I'm not the biggest fan of hello in firefox, but I've gotten some light mileage out of it, so I guess I can't be too upset. Pocket though just really shouldn't be in the browser.

Re: Firefox Tweaks – An attempt to make Firefox suck less

#17
post #6

Not a great attempt IMO. The networking and UI things are a valiant effort. Mixing them with non-mainstream security concerns are a bad idea. You may feel that safe-browsing is tracking by the man, but advising newbies to turn it off is borderline irresponsible. Similar argument for ipv6 (wtf), error reporting (congrats: your bugs will never be fixed cause firefox doesn't know about them), and geolocation ("why doesn…

> caveat emptor: when firefox upgrades it usually wont change these settings for you

It's not so bad. You can sort prefs by user-defined, they're in bold, and each one has a reset-to-default option.

Also you can do a whole browser reset which preserves only passwords/bookmarks. Instructions: https://support.mozilla.org/en-US/kb/refresh-firefox-reset-a...

And firefox profiles might be handy for this too (from the command line add --ProfileManager or -P ).

Re: Firefox Tweaks – An attempt to make Firefox suck less

#18

> Remove "(site) is now fullscreen" nag message and make it faster For a list that want to make the browser more secure, why do they want to remove the only line of defense against sites using fullscreen mode for phishing? > Disable PDF reader PDF.js has fewer security vulnerabilities than desktop PDF readers. > Disable 'safe browsing' aka. Google tracking/logging This seems like a really bad idea for most users

> PDF.js has fewer security vulnerabilities than desktop PDF readers.

That's probably because there is one PDF.js and dozens of desktop PDF readers.

PDF.js sprouts CVEs at an alarming rate. It should be disabled until someone does a full-program security audit.

Re: Firefox Tweaks – An attempt to make Firefox suck less

#20
post #7

> Remove "(site) is now fullscreen" nag message and make it faster For a list that want to make the browser more secure, why do they want to remove the only line of defense against sites using fullscreen mode for phishing? > Disable PDF reader PDF.js has fewer security vulnerabilities than desktop PDF readers. > Disable 'safe browsing' aka. Google tracking/logging This seems like a really bad idea for most users

The only time I ever see the fullscreen message is when the screen has essentially already fullscreened itself in a case where I want it to. =/

The warning is a bit annoying, but without it attacks like this would be harder to spot: http://feross.org/html5-fullscreen-api-attack/ (it's just a proof-of-concept, no malicious payload)
Post reply on HN