Live data from Hacker News

Mozilla Launches Firefox 4 for Android

blog.mozilla.com

11–20 of 88 posts

Re: Mozilla Launches Firefox 4 for Android

#12

My two favorite features: - Tabs are actually usable. - With Sync, you can walk away from your desktop and have your tabs (and history/bookmarks/passwords) on your phone. (Disclaimer: I work at Mozilla, but have nothing to do with mobile.)

I want to use Sync, but I'm really concerned with the security of it. How do I know my data is safe? Can I install a sync server on my own domain?

Data is encrypted client-side, so even Mozilla can't read it. If someone hacks Mozilla, they could get your encrypted data, but without your passphrase, they won't be able to read it. On the downside, if you forget your passphrase, you won't be able to read your data either (you have to wipe your account and start over).

Re: Mozilla Launches Firefox 4 for Android

#13

The benchmark numbers seem great, but actual browsing perf doesn't seem any better if not worse than the stock Nexus S browser. Just curious if Mozilla spends a lot of time optimizing benchmarks or the top 1000 sites? I'm just having trouble reconciling their incredible benchmark numbers with how it feels to simply browse the web.

They've been working on a variety of performance indicators: http://blog.lassey.us/2011/03/29/mobile-firefox-performance-...

Yeah, that's the page I had read and was expecting perf that killed the Nexus S stock browser. But I'm not sure if its any better. Do you see better perf on your device? Are there some pages that show the perf delta more than others (besides Mozilla built showcase pages?).

Re: Mozilla Launches Firefox 4 for Android

#15
post #10

Earlier quoted context omitted.

I want to use Sync, but I'm really concerned with the security of it. How do I know my data is safe? Can I install a sync server on my own domain?

You can. Source code: http://hg.mozilla.org/services/sync-server Instructions: https://wiki.mozilla.org/Labs/Weave/Sync/1.1/Setup

Wow, thanks. That looks a little too complicated for me, though.

Edit: Also the link seems to be outdated.

Re: Mozilla Launches Firefox 4 for Android

#17
post #12

Earlier quoted context omitted.

I want to use Sync, but I'm really concerned with the security of it. How do I know my data is safe? Can I install a sync server on my own domain?

Data is encrypted client-side, so even Mozilla can't read it. If someone hacks Mozilla, they could get your encrypted data, but without your passphrase, they won't be able to read it. On the downside, if you forget your passphrase, you won't be able to read your data either (you have to wipe your account and start over).

Are you sure? According to this: https://wiki.mozilla.org/Labs/Weave/Sync/1.1/Setup it says the passphrase you use is sent in the clear (over HTTPS) to mozilla every time you get the data. That implies that while the data may be stored encrypted client-side, it's decrypted or at least verified server-side.

Re: Mozilla Launches Firefox 4 for Android

#19
post #14

Does contentEditable/designMode work on it by any chance? If so, it will be the first mobile browser to support it. Basic test here: http://html5demos.com/contenteditable or much more advanced here: http://ckeditor.com/demo

Just tried it. It does!

Wow this is huge news!

Others might not appreciate it but that means it's the first mobile browser that rich, WYSIWYG editors like CKEditor and TinyMCE will finally work!

(iPhone and native Android do NOT support contentEditable despite being a webkit branch)

This is history repeating itself where Mozilla/Firefox competition will force other browsers to finally improve their game.

Re: Mozilla Launches Firefox 4 for Android

#20
post #12

Earlier quoted context omitted.

Data is encrypted client-side, so even Mozilla can't read it. If someone hacks Mozilla, they could get your encrypted data, but without your passphrase, they won't be able to read it. On the downside, if you forget your passphrase, you won't be able to read your data either (you have to wipe your account and start over).

Are you sure? According to this: https://wiki.mozilla.org/Labs/Weave/Sync/1.1/Setup it says the passphrase you use is sent in the clear (over HTTPS) to mozilla every time you get the data. That implies that while the data may be stored encrypted client-side, it's decrypted or at least verified server-side.

That is an old page, back when it was a labs project called Weave.

Try this: http://support.mozilla.com/en-US/kb/what-firefox-sync#w_what...

There is absolutely no way for Mozilla to get your data, even if subpoenaed. And, if for some reason you still don't trust it, you can easily set it up on your own server.

Post reply on HN