Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Firefox Tweaks – An attempt to make Firefox suck less

github.com

Post reply on HN
Print view View original

31–40 of 67 posts

Re: Firefox Tweaks – An attempt to make Firefox suck less

#31

Post by TD-Linux »

okasaki wrote: post #25
mediumdeviation wrote: post #5

> Remove "(site) is now fullscreen" nag message and make it faster For a list that want to make the browser more secure, why do they want to remove the only line of defense against sites using fullscreen mode for phishing? > Disable PDF reader PDF.js has fewer security vulnerabilities than desktop PDF readers. > Disable 'safe browsing' aka. Google tracking/logging This seems like a really bad idea for most users

> PDF.js has fewer security vulnerabilities than desktop PDF readers. You can limit desktop readers with something like AppArmor (no network access, only allowed to read files, only allowed to open *.pdf files, etc). You can't (AFAIK) do that with PDF.js.

>only allowed to read files

You just let through the vulnerability in PDF.js.

Re: Firefox Tweaks – An attempt to make Firefox suck less

#32

Post by TD-Linux »

Proleps wrote: post #23
codemac wrote: post #14

Disabling IPv6?! This is an... opinionated list. Wish there was more annotation around what those opinions were.

Don't know if it is still true. DNS lookup didn't work correctly when ipv6 was enabled.

W..what? I don't think this has been true for any Firefox version, ever. Certainly I'm using v6 right now. (Not on hn of course, it's v4 only)

Re: Firefox Tweaks – An attempt to make Firefox suck less

#33

Post by zobzu »

Even thus the changes arent all great many of them are definitely in the "why isnt this default?" category for me.

For ex webrtc should def. prompt instead of leaking by default, full screen animation is slow as fuck, pocket is adware, loop and safe-browsing should be turnable-off in the main prefs, social is adware, yada yada.

Re: Firefox Tweaks – An attempt to make Firefox suck less

#36

Post by thaumasiotes »

nfm wrote: post #20
bpicolo wrote: post #7

Earlier quoted context omitted.

The only time I ever see the fullscreen message is when the screen has essentially already fullscreened itself in a case where I want it to. =/

The warning is a bit annoying, but without it attacks like this would be harder to spot: http://feross.org/html5-fullscreen-api-attack/ (it's just a proof-of-concept, no malicious payload)

Who are all these people who apparently run their browser maximized? Web pages generally get worse as the window gets wider. (Unless, of course, they control their own width, but that's its own obvious prompt to stop wasting all your screen space.)

Re: Firefox Tweaks – An attempt to make Firefox suck less

#37

Post by [deleted] »

TD-Linux wrote: post #31
okasaki wrote: post #25

Earlier quoted context omitted.

> PDF.js has fewer security vulnerabilities than desktop PDF readers. You can limit desktop readers with something like AppArmor (no network access, only allowed to read files, only allowed to open *.pdf files, etc). You can't (AFAIK) do that with PDF.js.

>only allowed to read files You just let through the vulnerability in PDF.js.

[deleted]
Post reply on HN