Firefox 76

#1

Post by kalimatas » Tue, May 05, 2020, 2:18 PM UTC

Re: Firefox 76

#2

Post by CameronNemo » Tue, May 05, 2020, 5:46 PM UTC

>Firefox now supports Audio Worklets that will allow more complex audio processing like VR and gaming on the web; and is being adopted by some of your favorite software programs.

> With this change, you can now join Zoom calls on Firefox without the need for any additional downloads.

Re: Firefox 76

#3

Post by narag » Tue, May 05, 2020, 5:51 PM UTC

Anybody using Firefox password manager that can comment on it? Is it considered safe enough?

Are the passwords stored remotely if you have multi-device profiles?

Edit: I asked because I see that some of the updats are related.

Re: Firefox 76

#4

Post by nunodonato » Tue, May 05, 2020, 5:51 PM UTC

> Firefox displays critical alerts in the Lockwise password manager when a website is breached;

>If one of your accounts is involved in a website breach and you've used the same password on other websites, you will now be prompted to update your password. A key icon identifies which accounts use that vulnerable password.

this is great! thanks :)

Re: Firefox 76

#5

Post by nunodonato » Tue, May 05, 2020, 5:53 PM UTC

narag wrote: post #3

Anybody using Firefox password manager that can comment on it? Is it considered safe enough? Are the passwords stored remotely if you have multi-device profiles? Edit: I asked because I see that some of the updats are related.

I've been using it since it was introduced. I no longer think about my passwords. Everytime I register in a new website, I just right-click -> generate secure password, it auto-fills and saves it. One password for every website. Yes, they are stored remotely with Firefox Sync.

I just love this browser more and more

Re: Firefox 76

#6

Post by Someone1234 » Tue, May 05, 2020, 5:55 PM UTC

In the security bug fixes:

>>> CVE-2020-12387: Use-after-free during worker shutdown

>>> Impact: critical

>>> A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash.

And:

>>> CVE-2020-12388: Sandbox escape with improperly guarded Access Tokens

>>> Impact: critical

>>> The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. [On Windows]

So a sandbox escape and a way to be in a position to need a sandbox escape.

Re: Firefox 76

#7

Post by m_eiman » Tue, May 05, 2020, 5:55 PM UTC

CameronNemo wrote: post #2

>Firefox now supports Audio Worklets that will allow more complex audio processing like VR and gaming on the web; and is being adopted by some of your favorite software programs. > With this change, you can now join Zoom calls on Firefox without the need for any additional downloads.

Does anyone know if this is something that will benefit Jitsi too?

Re: Firefox 76

#8

Post by rasengan » Tue, May 05, 2020, 5:55 PM UTC

nunodonato wrote: post #4

> Firefox displays critical alerts in the Lockwise password manager when a website is breached; >If one of your accounts is involved in a website breach and you've used the same password on other websites, you will now be prompted to update your password. A key icon identifies which accounts use that vulnerable password. this is great! thanks :)

How exactly does this work?

Re: Firefox 76

#9

Post by metalliqaz » Tue, May 05, 2020, 5:57 PM UTC

rasengan wrote: post #8

nunodonato wrote: post #4

> Firefox displays critical alerts in the Lockwise password manager when a website is breached; >If one of your accounts is involved in a website breach and you've used the same password on other websites, you will now be prompted to update your password. A key icon identifies which accounts use that vulnerable password. this is great! thanks :)

How exactly does this work?

They check against a database similar to https://haveibeenpwned.com/

Re: Firefox 76

#10

Post by kbenson » Tue, May 05, 2020, 5:57 PM UTC

narag wrote: post #3

Anybody using Firefox password manager that can comment on it? Is it considered safe enough? Are the passwords stored remotely if you have multi-device profiles? Edit: I asked because I see that some of the updats are related.

I'm using it, it seems to work fine, and works/syncs on mobile as well (mobile Firefox that is, not for other apps AFAIK), and on my work computer's Firefox instance. I seem to recall attempting to change my Firefox sync password once and it notified my that I would need to export and re-import the passwords (IIRC), which I took to mean they are careful to never get full access to them unencrypted on their side. While less convenient, I like how that's set up if it's how I think it is.

For every device I have logged in with Firefox sync it just works as you would expect.