News for hackers. Stuff that matters.
Re:Firefox 56: Last Stop Before Quantum by wyldfire on Friday October 06, 2017 @10:49AM (#15417189)
> Firefox Quantum’s new engine uses 30% less memory than Chrome

This is a pretty appealing claim. I'm ashamed to admit that one thing that might keep me on Chrome is the trove of passwords in my sync'd up account. But I'll definitely give Quantum a test drive.

Re:Firefox 56: Last Stop Before Quantum by satysin on Friday October 06, 2017 @11:42AM (#15417650)
> I'm ashamed to admit that one thing that might keep me on Chrome is the trove of passwords in my sync'd up account.

I was the same until a few days ago when I finally took the time to switch to a real password manager. A HN'er recommended Bitwarden[0] and I have to say it was pretty painless and I am much happier knowing my passwords are with a third party (not that I have any real issue with Google but I did worry about having all my eggs in one basket as such).

I haven't paid for Bitwarden yet but I plan to providing it doesn't have a massive failure in the next couple of weeks. Looks like it will easily be worth the $10/year though.

Another added bonus is that their Android app is very decent as well and so far has worked with all my apps as well which is handy and not something I had thought much about in the past. Makes life that little bit easier although I don't have to enter app passwords much in Android it is nice to have the option now.

But back to Firefox - I checked out Nightly when it hit 57 a while back and was extremely impressed. It felt like a whole new browser. Not sure if I will switch from Chrome just yet but I am excited for the future of Firefox again.

[0]https://bitwarden.com

Re:Firefox 56: Last Stop Before Quantum by smnrchrds on Friday October 06, 2017 @01:28PM (#15418544)
I would like to switch to Bitwarden, but I don't know how I can assure I can trust them with all my passwords. Are any of the founders well-known security experts? Has the service been recommended by respected security researchers?

I am not a security expert, so I cannot assert their trustworthiness myself. I know that you can run your own server. But even then, without auditing the code, configuring a firewall, and checking network logs, I cannot assure the server and the clients do not call home. And all of those solutions are both prohibitively time-consuming and way out of my area of expertise.

How did you decide Bitwarden was trustworthy? How can I stop worrying and give them my passwords already?

Re:Firefox 56: Last Stop Before Quantum by satysin on Friday October 06, 2017 @05:07PM (#15420497)
I didn't pick Bitwarden right away. The comment that mentioned it prompted me to research password managers in general. I looked at primarily online (1Password, LastPass, Bitwarden, etc) and offline desktop client ones (Keepass).

I do prefer the idea of using something like Keepass and not relying on a service but I found it rather frustrating to manage between my multiple devices. I knew if I were to actually make use of a password manager it needed to be a smooth experience because otherwise I would just return to using Chrome's built in one out of laziness.

After researching the main online managers I decided to go with Bitwarden. It is open source so if it does do something dodgy I would hope it is found and reported. I do not have the time nor expertise to audit all of the code myself so I have to put some trust in others.

Plus while it would be a real pain in the ass if accounts were compromised due to the developer being an asshole/idiot it wouldn't destroy my life. I have a strong password on my primary email account (not stored in Bitwarden) along with 2FA. Most of the logins stored in Bitwarden are for things like Hacker News, Reddit, Slack (personal not work), etc. Randomly generated 18+ character strings that are a pain to enter manually, especially on a phone.

Re:Firefox 56: Last Stop Before Quantum by zzalpha on Friday October 06, 2017 @07:15PM (#15421145)
FYI: KeePass plus Syncthing works great for me for cross-device password databases.
Re:Firefox 56: Last Stop Before Quantum by satysin on Friday October 06, 2017 @07:32PM (#15421238)
Will have to check this out. Not used Syncthing before. Thanks!
Re:Firefox 56: Last Stop Before Quantum by zzalpha on Friday October 06, 2017 @08:39PM (#15421554)
No problem!

As I mentioned in my other comment, the only gotcha is to make sure you set up your syncthing ignore file to ignore the KeePass database lockfile.

Re:Firefox 56: Last Stop Before Quantum by terminalcommand on Friday October 06, 2017 @01:52PM (#15418784)
I use KeePass as my password manager, it doesn't sync automatically across all my devices, I occasionaly transfer my keys database to my phone.

You could always upload your encrypted key database to dropbox, and keep your private key on your phone, on your computer, or on a USB stick, if you want automatic sync.

Re:Firefox 56: Last Stop Before Quantum by zzalpha on Friday October 06, 2017 @07:15PM (#15421146)
Syncthing + KeePass works very well for cross device peer-to-peer syncing.

Just make sure to configure Syncthing to ignore KeePass lockfiles.

Re:Firefox 56: Last Stop Before Quantum by lern_too_spel on Friday October 06, 2017 @02:36PM (#15419210)
It has no unit tests.
Re:Firefox 56: Last Stop Before Quantum by NikolaeVarius on Friday October 06, 2017 @11:46AM (#15417699)
I like bitwarden at a high level, but there are tons of things that feel extremely janky with it.

Also for some reason, Firefox keeps complaining that bitwarden is freezing its UI thread.

Re:Firefox 56: Last Stop Before Quantum by wj on Friday October 06, 2017 @03:11PM (#15419533)
I'm not in love with LastPass so am curious as to what you don't like about Bitwarden?
Re:Firefox 56: Last Stop Before Quantum by NikolaeVarius on Friday October 06, 2017 @03:24PM (#15419647)
It seems to lag on Firefox. Multiple times I've gotten notifications from Firefox Dev that Bitwarden is causing my page to not render (which was true).

Can't change hotkey for auto-fill login form in Firefox.

No Support for standard notes (yet I guess).

UI renders very slowly on FF and has tons of strange inconsistencies.

It definitely has the FEEL of a somewhat younger open source project while LastPass was much more refined.

I'm debating if I should bother learning C# for the sole purpose of trying to fix some of these issues, because it is maddening enough where I actually use Chrome when i do things that require logins.

Re:Firefox 56: Last Stop Before Quantum by wj on Friday October 06, 2017 @03:56PM (#15419891)
Thanks. Will probably wait for LastPass to release the firefox plugin for 57 then. Will check Bitwarden again in a few months.
Re:Firefox 56: Last Stop Before Quantum by satysin on Friday October 06, 2017 @05:10PM (#15420511)
Just to give a second opinion, I have not had any of the issues NikolaeVarius mentioned.

Well that is not quite true actually. In Firefox you can't change the hotkeys but that is more of a Firefox issue as you can't change the hotkeys for any extension. You can in Chrome though.

Re:Firefox 56: Last Stop Before Quantum by milcron on Friday October 06, 2017 @05:04PM (#15420482)
BitWarden is new to me, thanks for recommending it! Always good to see new open-source password managers. There are already enough proprietary ones.
Re:Firefox 56: Last Stop Before Quantum by tmzt on Friday October 06, 2017 @10:56AM (#15417249)
You can export passwords from Google:

https://www.ghacks.net/2017/07/10/google-chrome-password-exp...

It may also be possible through the data portability site.

You can also see them by going to https://passwords.google.com

Re:Firefox 56: Last Stop Before Quantum by Vinnl on Friday October 06, 2017 @11:15AM (#15417425)
And also good to know is that Firefox can do syncing just fine.
Re:Firefox 56: Last Stop Before Quantum by pault on Friday October 06, 2017 @11:36AM (#15417608)
I switched to the beta a few days ago and it's crazy fast. I only use ublock origin so I don't miss any extensions, but I'm definitely not switching back.
Re:Firefox 56: Last Stop Before Quantum by CoffeeDregs on Friday October 06, 2017 @11:46AM (#15417697)
Agreed. I switched to Nightly and it's completely stable and completely noticeably faster.
Re:Firefox 56: Last Stop Before Quantum by kej on Friday October 06, 2017 @11:46AM (#15417704)
Firefox will offer to import those (along with bookmarks) when you start it up, and it offers its own syncing service as well. I switched about a month ago and it's been pretty seamless.
Re:Firefox 56: Last Stop Before Quantum by gkya on Friday October 06, 2017 @01:01PM (#15418333)
Sending tabs and syncing bookmarks is especially useful. Find sth. nice to read on the PC but have to leave, send the tab(s) to your phone. Stupid registration form, bad mobile site, sth. to copy or paste from: send it to your laptop.

Also, a bit off topic, but the Tab Queue thing in Firefox for Android is incredibly awesome. I have some newsletters that I follow, hit the links, they're queued in Firefox, and I stay in my (K-9) mail app. When I've gonr through all the newsletters, I switch to FF, and all my pages are there.

Re:Firefox 56: Last Stop Before Quantum by xinyhn on Friday October 06, 2017 @12:40PM (#15418155)
Might be looking into bitwarden myself as lastpass as of this post does not support firefox 57.
Re:Firefox 56: Last Stop Before Quantum by infogulch on Friday October 06, 2017 @10:53PM (#15422018)
I also switched to nightly for the speed and immediately started missing LastPass. I switched to bitwarden after eyeing it for a while on recommendation of someone from HN and I'm pretty happy with it.
Re:Firefox 56: Last Stop Before Quantum by lkbm on Friday October 06, 2017 @12:45PM (#15418196)
This has been a constant annoyance for me for a few weeks (since I switched to Nightly), but for what it's worth, Lastpass says they'll have a WebExtension version out by the time Firefox 57 is officially released (2017-11-14).
Re:Firefox 56: Last Stop Before Quantum by dchuk on Friday October 06, 2017 @11:08AM (#15417345)
I was like that a few months back, but then I started using 1password to centralize all my passwords (and for security obviously). Makes switching browsers much easier, especially because (I think) Firefox doesn't use OSX's Keychain.
Re:Firefox 56: Last Stop Before Quantum by FruityFaiz on Friday October 06, 2017 @11:17AM (#15417435)
Same here, I have both Firefox nightly and safari but I tend to use safari more still...
Re:Firefox 56: Last Stop Before Quantum by Aeolos on Friday October 06, 2017 @12:24PM (#15418015)
There is one thing that stops me from using Safari (or Chrome/Opera) on Mac OS: the lack of middle-click autoscrolling.

Firefox lets me do a triple-finger tap and then scroll a page smoothly at a consistent pace. This is wonderful for reading sites such as HN without getting RSI from doing the same motion again and again.

Re:Firefox 56: Last Stop Before Quantum by frandroid on Friday October 06, 2017 @01:49PM (#15418750)
Use the spacebar?
Re:Firefox 56: Last Stop Before Quantum by akerro on Friday October 06, 2017 @10:59AM (#15417276)
> Firefox Quantum’s new engine uses 30% less memory than Chrome

This is probably because 70% of addons go away, there are no replacements of very low quality replacements for most of addons I use daily.

Re:Firefox 56: Last Stop Before Quantum by mtgx on Friday October 06, 2017 @11:00AM (#15417282)
I think they compared both browsers with zero add-ons.