News for hackers. Stuff that matters.
Re:What’s up with Firefox? by myowncrapulence on Wednesday January 25, 2017 @02:05PM (#13484769)
I've been using Firefox for years without any problems and find it much better (just as fast, more privacy-minded) than chrome.

I honestly don't understand (from a consumer standpoint) why people complain about Firefox. I can understand devs having browser preferences, but to say that "time forgot" firefox is ridiculous as a general user.

Re:What’s up with Firefox? by etatoby on Wednesday January 25, 2017 @02:36PM (#13485158)
Same here.

I keep Chrome on Linux only for its developer tools, which are clearly more performant, and for its updated and sandboxed Flash.

But I only bring it up for those two features. Otherwise Firefox with a ton of extensions, including Tab Center, is my default choice. I don't see in what way it would be inferior to Chrome.

In fact, it has several user-level features that I miss in other browsers, such as column / rectangular selection of tables, automatic saving of form input, Ctrl+I dialog with a list of pictures in the current page, and so on. Don't tell me these are "power user" or developer features!

Firefox for Android is also very good, IMHO better than Chrome, and it supports uBlock, Stylish, and so on.

Re:What’s up with Firefox? by kbrosnan on Wednesday January 25, 2017 @03:58PM (#13486021)
Adobe reversed its NPAPI support instead of being stuck on the 12.x branch Adobe now ships the current version of Flash to Firefox on Linux. https://get.adobe.com/flashplayer/otherversions/
Re:What’s up with Firefox? by unsignedint on Wednesday January 25, 2017 @06:37PM (#13487322)
I migrated back to Firefox from Chrome recently after hearing this news. Though Flash is becoming less and less relevant, but it was bit annoying before.
Re:What’s up with Firefox? by CaptSpify on Wednesday January 25, 2017 @02:34PM (#13485135)
As a dedicated FF user: It feels significantly slower than chrome, it's hard to figure out what tab is killing things, and they keep making choices that I consider highly questionable.

I do love FF, and it is the browser I use everyday. But it's not without it's own warts, which Chrome is much better at hiding.

Re:What’s up with Firefox? by disordinary on Wednesday January 25, 2017 @02:54PM (#13485360)
I've found that in recent times Chrome has started to feel bloated and slow and firefox (with minimal addons) feels much more zippy. However Firefox does seem to be a bit more temperamental when something else is using significant CPU.

Ultimately I prefer Firefox.

Re:What’s up with Firefox? by pimeys on Wednesday January 25, 2017 @05:01PM (#13486648)
After version 50.0 I switched back from Opera. The deal is to get the e10s multiprocess windows on. It might be disabled because some of the addons. You can try to enforce it or like in my case with only uBlock Origin and Privacy Badger installed, it was on by default.

This browser is seriously fast now on Linux. I couldn't be happier with it. I've used it for weeks already, browsing a lot and it's still as snappy as when I installed it.

Good job. And soon we'll start getting the Servo stuff...

Re:What’s up with Firefox? by CaptSpify on Wednesday January 25, 2017 @05:20PM (#13486790)
I've tried turning it on via https://wiki.mozilla.org/Electrolysis#Force_Enable, but it still doens't seem to be on per about:support unfortunately.

If you have any other suggestions for getting it going, I'd appreciate it.

One additional complaint I have about FF: It's hard to find out where to change the setting that I want. I constantly have to ddg for "How do I change $x" and I end up with 3 different answers for 3 different revisions. If anyone knows of a good resource for me to find this out, I would appreciate it.

Re:What’s up with Firefox? by pimeys on Wednesday January 25, 2017 @05:33PM (#13486906)
Elsewhere in the comments section there were tips about an addon that tells if one of your addons is blocking e10s. Another useful tip was the dom.ipc.processCount setting. Before I cancelled my LastPass account I was using the 3.x version from them, which doesn't support e10s and crashed the browser when I forced it on. But still I was able to turn it on even though the browser was unusable.

I run this on Arch and Wayland, which might also add to the snappyness. What I kind of observed from all the comments was, that the OSX users were complaining the most about the slowness. Might be that the Linux version is faster then.

Re:What’s up with Firefox? by iaml on Wednesday January 25, 2017 @02:53PM (#13485347)
Exactly that, it feels slow. On my laptop I have chrome and nightly firefox which typically is faster than stable branch. I have tons of addons in chrome and only ublock in ff, and yet chrome feels much more responsive compared to ff.
Re:What’s up with Firefox? by ZenoArrow on Wednesday January 25, 2017 @02:23PM (#13484984)
Agreed. I prefer Firefox, but I recognise there's really not that much difference between Firefox and Chrome in terms of usability and features, they both seem about on par to me (some areas Firefox is slightly ahead, some areas Chrome is slightly ahead). The suggestion that Firefox is something "time forgot" is basically just trolling, someone looking for a reaction rather than something substantial.
Re:What’s up with Firefox? by komali2 on Wednesday January 25, 2017 @03:04PM (#13485461)
The numbers don't back either of your claims, though - significantly more people use Safari and Chrome than use Firefox. I for one appreciate chrome for the fact that it syncs with my google everything, across all devices, google accounts, etc.

I'm probably going to hate myself for my blase attitude towards security when I inevitably end up on some massive dump of hacked accounts, but I've kind of given up on privacy/security. It's just so convenient to be able to pull up on my phone the tab I had open on my browser when I'm in the kitchen cooking, or whatever.

Re:What’s up with Firefox? by ZenoArrow on Wednesday January 25, 2017 @03:11PM (#13485524)
>"The numbers don't back either of your claims, though - significantly more people use Safari and Chrome than use Firefox."

The reason we're in disagreement is we're picking different forms of comparison. You're looking at popularity, I'm looking at technology. I don't dispute more people use Chrome, but that doesn't make it automatically better from a technical point of view. As I said before, technically Firefox and Chrome are fairly equal, and there are benchmarks and feature comparisons that back this up.

Re:What’s up with Firefox? by rebelwebmaster on Wednesday January 25, 2017 @06:46PM (#13487361)
"It's just so convenient to be able to pull up on my phone the tab I had open on my browser when I'm in the kitchen cooking, or whatever."

FWIW, Firefox supports syncing tabs between devices as well.

Re:What’s up with Firefox? by icc97 on Wednesday January 25, 2017 @08:56PM (#13488092)
The firefox syncing is awesome. FF syncing feels friendly and the Chrome feels like a stranger being 'overly' friendly.

Somehow I'm willing to sell most of the rest of my soul, but not my browsing history.

Re:What’s up with Firefox? by funnyfacts365 on Wednesday January 25, 2017 @08:35PM (#13488005)
Yes it does. My 2 laptops and 2 Android phones all use the dame profile. Everything syncs, tabs, passwords, addons...
Re:What’s up with Firefox? by myowncrapulence on Wednesday January 25, 2017 @05:21PM (#13486804)

  for the fact that it syncs with my google everything, across all devices, google accounts, etc.
Shudders My god that's the last thing I'd ever want and exactly why I avoid Chrome and Android devices.
Re:What’s up with Firefox? by vacri on Wednesday January 25, 2017 @11:50PM (#13488840)
> significantly more people use Safari and Chrome than use Firefox

This is true. Significantly more people use "Safari and Chrome" than "Firefox". However, significantly less people use "Safari" than "Firefox". Chrome is the gorilla, Safari is waaaaaaay back in the pack.

Re:What’s up with Firefox? by bzbarsky on Thursday January 26, 2017 @01:33AM (#13489202)
It depends on whether you count "desktop" market share, "mobile" market share, or "both" (and if "both" how you weight it).
Re:What’s up with Firefox? by armitron on Wednesday January 25, 2017 @06:00PM (#13487099)
> I've been using Firefox for years without any problems and find it much better (just as fast, more privacy-minded) than chrome.

Then you must not value security at all.

Firefox is by far the worst of the modern browsers in how easy it's to exploit. Don't listen to me, listen to the experts [1] [2] [3]

I would go as far as to say that if Firefox is your main browser, odds are you're owned by multiple parties, and I don't mean nation states. This can not be fixed by iterative improvements, Firefox needs to die. By far the best thing you can do for your online peace of mind is to switch to Chromium/Chrome or (on Windows only) Edge.

[1] https://twitter.com/thegrugq/status/803693249789509632

[2] https://medium.com/@thegrugq/tor-and-its-discontents-ef51648...

[3] https://it.slashdot.org/story/16/02/12/034206/pwn2own-2016-w...

Re:What’s up with Firefox? by yborg on Wednesday January 25, 2017 @06:42PM (#13487347)
Your statement may be valid, but the two links you provided don't seem to have much to say on that topic. The first refers to a bug currently fixed in current GA Firefox, the second is a rant about Tor bundle. If reblogging snark is the standard of proof here, anyone could justify any "modern browser" as "worst".

My counterargument is that Firefox has always and continues to support tools such as NoScript and uBlock that prevent whole classes of attack. And Chrome, for example, is pwned like clockwork at every contest for exploitation. Behavior and not platform is the biggest determinant of security online.

Re:What’s up with Firefox? by armitron on Wednesday January 25, 2017 @06:46PM (#13487363)
If you're talking about Pwn2own, they've dropped Firefox from the competition __because it was too easy to exploit__ [1].

I quote:

"For the last decade, the Pwn2own hacking competition has pitted the world's best hackers against web browsers to try and find zero-day vulnerabilities in a live event. The contest, which is sponsored by HPE and TrendMicro this year, is offering over half a million dollars in prize money, but for the first time, not a penny of that will directed to Mozilla Firefox. While Microsoft Edge, Google Chrome and Apple Safari are targets, Firefox isn't because it's apparently too easy and not keeping up with modern security: "'We wanted to focus on the browsers that have made serious security improvements in the last year,' Brian Gorenc, manager of Vulnerability Research at HPE said."

How is that for a slap in the face?

Selectively reading what you like and ignoring the rest [an entire section in the second link is devoted to Firefox issues that have nothing to do with TBB, including the conclusion] won't change the basic facts. Another point those not in the security domain miss, is that there are plenty of exploitable bugs that are deliberately kept private. Those who have visibility in these circles (such as thegrugq) are obviously in a much better position to appraise how secure a software system really is. Trying to determine how secure Firefox is just from CVEs and bugs that are made public will only lead you to a piece of the entire puzzle. In Firefox case, even that alone should be enough to trigger RED ALERT in somebody's mind.

The best we can all hope for is for people to stop using Firefox and flock to alternatives that raise the bar significantly.

[1] https://it.slashdot.org/story/16/02/12/034206/pwn2own-2016-w...

Re:What’s up with Firefox? by librexpr on Wednesday January 25, 2017 @07:46PM (#13487755)
And yet according to these sources[0][1], Firefox is back this year in Pwn2own. A quote from [1]:

> "Mozilla improved their security enough for us to warrant their re-inclusion in the contest," Gorenc said.

Firefox is fine. Like in every other browser, when security problems are found, they are fixed. There's a lot of work going into making Firefox a great and secure browser, and to call for abandoning it en masse is unwarranted IMO.

Edit: Heck, isn't it your own link[2] that claims that one of the security problems with Tor is their homogeny, that they all use the same browser and version? By that logic, abandoning Firefox is a bad move for overall security.

[0] https://blog.trendmicro.com/pwn2own-returns-for-2017-to-cele...

[1] http://www.eweek.com/security/pwn2own-2017-takes-aim-at-linu...

[2] https://medium.com/@thegrugq/tor-and-its-discontents-ef51648...

Re:What’s up with Firefox? by armitron on Wednesday January 25, 2017 @07:55PM (#13487804)
Look at the prize money for Firefox, lowest of them all. I think this proves my original point.

TBB is routinely attacked by nation states and other government groups. In that context, homogeneity is an important factor since they only have one target to focus on and considerable resources to use. By the way this is also another point against someone using Firefox. By choosing Firefox, you are choosing a browser that __you know__ is actively targeted by nation states and government groups, because it's used in TBB. You can safely assume said groups have multiple Firefox 0days.

My original point however is not that Firefox is insecure vs nation-grade attackers. __Every browser is__

There are plenty of criminal groups (ever increasing) and actors with limited resources that will focus on Firefox because it's easy to exploit. The fricking FBI was owning people with a Firefox 0day. The same groups would find Chrome or Edge too hard. This is of course a personal evaluation, given what I know from conversations with people in the security domain.

Let me leave you with this piece of (anecdotal) information: In my last job, we used to have new hires for exploit development pick a browser to work on for the first few months. Expectation being remote exploits, lots of them.

Most of them picked Firefox.

Re:What’s up with Firefox? by nikcub on Wednesday January 25, 2017 @11:47PM (#13488822)
Firefox had no process isolation or web content sandboxing for years. It still doesn't in a lot of places even today. That meant that every little bug became a serious bug.

In contrast, RCE's for Chrome and Safari require chaining together a number of exploits - the most valuable of which is the sandbox escape.

Firefox are years behind on security - and in the meantime large number of people have abandoned it and you have an entire security community openly advocating against using or deploying it.

Yes, the security model is improving now (thanks in large part to code from Chromium) - but it's improved in the same way Adobe Flash security has improved, or Java security has improved - it will always have that huge weight of a bad reputation to carry, and it is still a far way from catching up to the norm in browsers today (check the incomplete features, bugs and open issues of e10s)

Firefox missed a huge opportunity in becoming the defacto secure and private browser - I know I don't love running Chrome/Chromium but I kinda have to

Re:What’s up with Firefox? by kebolio on Thursday January 26, 2017 @02:57AM (#13489556)
>thanks in large part to code from Chromium

This is false and misleading. The only bits Firefox plans to nick from Chromium are things like the C++ PDF reader which is a regression compared to pdf.js running in a nominally memory-safe runtime. The browser itself doesn't use code lifted from Chromium.

Re:What’s up with Firefox? by kebolio on Thursday January 26, 2017 @03:08AM (#13489608)
Something ruffled your feathers. Why do you want Firefox to be abandoned rather than improve it's security? For my and most other's mundane browsing needs Firefox _is_ secure enough. Mozilla is the only browser vendor actually innovating with Rust, Servo/Quantum and WebRender as examples, the first two give me hope that Mozilla really can tighten the ship and make a more secure browser than Chromium would be.
Re:What’s up with Firefox? by armitron on Thursday January 26, 2017 @09:50AM (#13491774)
Nothing ruffled my feathers, I'm simply laying out facts. Feel free to ignore them.

There is no improvement for Firefox, it will never amount to anything given how rotten the codebase is. Unless they plan to scrap it and rewrite everything from scratch, with an actual focus on security from the beginning, which of course they don't. Slowly rewriting small parts of Firefox in Rust will do nothing for security, it's just more smoke and mirrors from Mozilla.

On the other hand, we have Google who were really the pioneers when it comes to securing the browser since they spent millions of dollars doing just that. Mozilla didn't even bother. Even their current attempts are laughable really in terms of scope and actual impact, it's just shitty PR aimed at people without security experience.

That's not to say that Chrome is a secure browser, but it has raised the bar significantly and it deserves wider adoption. Finally, we also have Microsoft who have probably spent even more than Google on improving security on Windows and are doing a lot of innovative security-related work with Edge [1].

[1] http://arstechnica.com/information-technology/2016/09/window...

Re:What’s up with Firefox? by steveklabnik on Thursday January 26, 2017 @12:26PM (#13493266)
It's not "small parts." Quantum has big ambitions. For example, Stylo, a sub-project of quantum, replaces the CSS layout code with Rust. That's a large, key component.
Re:What’s up with Firefox? by baby on Wednesday January 25, 2017 @03:31PM (#13485719)
Same here, I personally don't understand people who can use a browser that does not support Tree Style Tab. Serious browsing requires nested tabs on the side.
Re:What’s up with Firefox? by macspoofing on Wednesday January 25, 2017 @05:52PM (#13487039)
We have a performance sensitive application. Firefox is faster than ie but slower than Safari, Chrome and Edge.
Re:What’s up with Firefox? by bzbarsky on Thursday January 26, 2017 @01:32AM (#13489193)
If there's any way you can provide a link that can be used to reproduce the problem (either here or in private mail), I would be very much interested in investigating this performance problem.
Re:What’s up with Firefox? by macspoofing on Thursday January 26, 2017 @08:40AM (#13491180)
Sure. Sounds great. I'd prefer private message - what is your preferred way to receive the link?
Re:What’s up with Firefox? by bzbarsky on Tuesday January 31, 2017 @03:36PM (#13534948)
Thank you for the link! I have some more questions that I sent in email to you. Don't know whether those ended up in spam or something; could you check?
Re:What’s up with Firefox? by bzbarsky on Thursday January 26, 2017 @10:13AM (#13491964)
Email to my username at mit.edu would be great.

Thank you!

Re:What’s up with Firefox? by mistermann on Wednesday January 25, 2017 @03:41PM (#13485828)
Open say 5 to 10 tabs with various twitter profiles loaded in them, does your Firefox still perform reasonably well? 3 twitter tabs open is enough to kill my performance.
Re:What’s up with Firefox? by fredsanford on Wednesday January 25, 2017 @06:58PM (#13487426)
So, because of one poorly designed shitty website you're moaning about FF being bad? You should be moaning about Twitter with its bliveted 8 tons of javascript in a 5 pount sack.

You can add espn.com, washingtonpost.com and nytimes.com to that list as well.

Blivetware.

Re:What’s up with Firefox? by scrollaway on Wednesday January 25, 2017 @08:16PM (#13487918)
It's a fair complaint when this doesn't happen on other browsers.

Your website doesn't have to have "shitty poor design" for it to lag FF. Compare scrubbing in this React player in Chrome and Firefox: https://hsreplay.net/replay/WpWzqzkCHTGdEmbguHUoiC

It comes down to issues in the Firefox JS/DOM engines.

Re:What’s up with Firefox? by fredsanford on Thursday January 26, 2017 @08:58AM (#13491328)
The websites I called Blivetware are shitty on all the browsers I've tried. I guess it's truly YMMV...

In my experience, Twitter and ESPN can bring any browser to its knees

Re:What’s up with Firefox? by mistermann on Thursday January 26, 2017 @02:32AM (#13489431)
I'd rather a browser that can handle shitty websites than hoping every website will somehow magically be written efficiently. Especially since FF is the only browser I know of that can't handle multiple active javascript sessions. It's completely absurd if you think about it, I mean it's a browser, for browsing websites, which use javascript.
Re:What’s up with Firefox? by vacri on Wednesday January 25, 2017 @11:43PM (#13488804)
If I open 5 to 10 tabs with various twitter profiles loaded in them, and I won't notice much because of the icepick that I'll very shortly embed in through my ear.

However, I routinely run with tens of tabs open - usually 40-50 - and love the 'tab groups' extension so I can semantically group them (I have more tabs overall, but they're not all actively loaded). It can get a little slow with 50 active tabs, yes, but what doesn't? Modern webpages suck CPU and RAM dry.

Re:What’s up with Firefox? by mistermann on Thursday January 26, 2017 @04:08AM (#13489851)
Hmmm, this sounds like an interesting extension. Does it ACTUALLY unload them (and release the memory)? Well, even if it quit executing javascript, I'd be sold.
Re:What’s up with Firefox? by vacri on Thursday January 26, 2017 @04:04PM (#13495237)
Ah, I've misled. I mean that I have a lot of tabs in groups, and FF doesn't load them when you start it up, just when you visit them. So while I have a 'map' of perhaps a couple of hundred tabs in those tab groups, only the ones I've visited in that session are loaded.
Re:What’s up with Firefox? by cyphar on Wednesday January 25, 2017 @08:09PM (#13487878)
The same happens for me in Chrome. Twitter is the issue, not your browser.
Re:What’s up with Firefox? by mistermann on Thursday January 26, 2017 @04:06AM (#13489846)
Chrome tabs each have their own process though, so then wouldn't your problem be your PC?
Re:What’s up with Firefox? by cyphar on Thursday January 26, 2017 @06:46AM (#13490567)
Sure. But if three instances of a website can bring a fairly new machine to its knees, then there's nothing any browser could reasonably do to fix Twitter's massive JS bloat.
Re:What’s up with Firefox? by mistermann on Thursday January 26, 2017 @09:15AM (#13491463)
In my case, FF uses well less than 10% of CPU, yet the browser is extremely unresponsive. So no, it's not the machine, it is FF.