News for hackers. Stuff that matters.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by wdr1 on Sunday May 05, 2019 @04:50PM (#19834973)
This is pretty bad for Firefox. I wonder how much people straight up & left for Chrome as a result of it.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by user17843 on Sunday May 05, 2019 @04:54PM (#19834991)
It will be possible to roughly deduct this from the following statistics during the next days/weeks:

https://addons.mozilla.org/en-us/firefox/addon/adblock-plus/...

https://data.firefox.com

Re:Firefox 66.0.4 is out, fixes disabled add-ons by floatingatoll on Sunday May 05, 2019 @05:27PM (#19835195)
Note that these statistics would, presumably, exclude all users who disable telemetry in Firefox. Since many of those outraged at the interruption to addons seem to overlap frequently with those who object to and disable telemetry and studies on principle, their departure over this incident could well have no impact whatsoever on the metrics you linked above.

It must be a nightmare for the Firefox team to have a minority group of quick-to-anger users that refuse to allow themselves to be taken into account by usage metrics, refuse to allow their browser to participate in studies, and then object loudly when decisions are made that discount them.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by Karunamon on Sunday May 05, 2019 @08:16PM (#19835921)
Who's fault is that, at the end of the day?

Mozilla didn't have to structure their addon system in such a way that their (in)actions could disable the addons of every Firefox user on the planet.

Mozilla did not have to abuse the studies mechanism (also on by default) to ship a workaround.

Mozilla did not have to disable the option that would let me work around this problem by myself (which is going to cause me no end of fun when I get into work tomorrow). If the Firefox team thinks their development concessions are a pain in the ass, try being directly accountable for the repercussions, in the "I will be fired if I don't fix this", not the "I will be talked mean about on the internet if I don't fix this" senses.

Mozilla didn't have to bundle junk like Pocket and the now-scuppered Hello, both of which could have just as easily been addons suggested on first run.

Mozilla didn't have to push promotional addons (the Mr Robot thing) without my express prior consent.

I grow exceedingly weary of this narrative that Firefox is above all reproach and criticism because they produce a web browser.

How about this instead; if Mozilla wishes for its users to respect them, they can start by respecting their users. That means no opt-out telemetry period, no paternalism about what I can and cannot install, or what options I can change, and so forth.

I am beyond sick of this shit. I would love nothing more than a true third option for browsers right now. Firefox hates its users, Chrome sees them as cattle - what's left? I have to use one of the two and take ridiculous steps to cover my own interests, because neither of these companies have them in mind.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by floatingatoll on Sunday May 05, 2019 @09:22PM (#19836168)
"Opt-out telemetry" creates precisely the scenario I describe, where the users who care most are least visible to Mozilla, at which point their needs would go unconsidered; no one knows they exist, how many of them there are, or why they're opting out. This remains true regardless of why, which negates your entire list of issues, replacing them with a simple question that is very difficult to answer:

How could Mozilla respect the needs of users who opt-out of Mozilla knowing they, and their needs, exist at all?

How could any creator of anything?

If you can't identify who your users are, you can't ask them questions, and you can't tell if they're "vocal 0.001%" or "vocal 40%" of your userbase — then what consideration could you give, as a software developer, for their needs?

You can refuse to change, and simply always offer the one thing you offer, and accept that you're the best option for a minority of users over time. You can continue developing to your own needs, and let them stay or go as they see fit. You can try to read the tea leaves of internet forum posts, but that comes with a huge penalty to significance. You can try new things and try to tell from the howls of outrage whether it's a wording error or a direction error or simply "change is bad, I hate you all".

Opting out is not free. Opting out comes at a price to you. Your needs will be less likely to be considered, and your solutions may change in ways that are not to your liking. You have every right to opt out, but is the price of that acceptable to you?

ps. If you can solve how to let users of something influence its creator in a fair and just manner, such that all users have equal influence, while opting out of being known to that creator to exist at all, you will be a billionaire within five years.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by Karunamon on Sunday May 05, 2019 @10:47PM (#19836450)
>If you can't identify who your users are, you can't ask them questions, and you can't tell if they're "vocal 0.001%" or "vocal 40%" of your userbase — then what consideration could you give, as a software developer, for their needs?

I'd ask for feedback, and when that feedback is given freely, even when unsolicited, I'd take it on board and act accordingly. I would ask if people want to participate in "telemetry" and "studies", not assume they do without affirmative prior consent.

Mozilla is breathtakingly bad at this. They're about as responsive to feedback as GNOME/Freedesktop.

I most certainly would not put spyware in the product and turn it on without asking first. I'd most certainly never get myself into a situation where an oversight can simultaneously break every copy of my software ever deployed.

This idea that you require all copies of your software to phone home to make effective development decisions is bunk. We got along just fine without that garbage for decades.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by chienandalou on Monday May 06, 2019 @03:26AM (#19837475)
> How could Mozilla respect the needs of users who opt-out of Mozilla knowing they, and their needs, exist at all?

How about surveys or well, common sense?

I'm a tech oriented person who cares about privacy. I want software that is lightweight, configurable, with sensible defaults. For any features besides the basic functionality (in this case: browsing the web), I don't want to opt-out, I want to opt-in.

Privacy oriented means for me that the software I use doesn't send one bit of data that isn't necessary for its basic functionality. I use a "dumb phone" because of this. I never understood how anybody can think telemetry and privacy can co-exist.

I want a Firefox without Pocket, Send, Screenshot Tools, Sync, Clickz, any cloud based service. I only want a fast, lightweight browser that doesn't send any unnecessary data anywhere without me explicitly configuring it. That's a sensible default for me, really. Software used to be like that.

I'd also like to configure when my software looks for updates. My Linux distro let's me do that.

And it would be awesome if all other functionality (like Send/Sync/Pocket, etc.) is available via optional plugins, or in another "full-featured" version of Firefox. The deluxe edition or whatever.

I believe I'm not alone with these ideas about software. In discussions about Firefox these things always come up. There are github projects [1,2] with 1600 and 1200 stars about hardening Firefox. People care about privacy. It's not hard to find this part of the userbase.

The idea that you can't create software for your users without telemetry, is what leads Mozilla to disregard their privacy oriented users in the first place. It's depressing.

And even if I allowed telemetry on my system Mozilla wouldn't learn anything about what I wrote here. It's useless.

1: https://github.com/pyllyukko/user.js/ 2: https://github.com/ghacksuserjs/ghacks-user.js

Re:Firefox 66.0.4 is out, fixes disabled add-ons by floatingatoll on Wednesday May 08, 2019 @04:59PM (#19862876)
A brief search of "site:blog.mozilla.org inurl:2019 survey" shows a bunch of results, and even more for inurl:2018. Have you signed up to receive unsolicited email from Mozilla in any venue? If you've opted-out, then you may be experiencing observer bias.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by steve19 on Sunday May 05, 2019 @09:50PM (#19836279)
In the old days, and today in every other industry but tech, if you want to understand your customers you survey them, do focus groups and listen to unsolicited feedback.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by ptx on Monday May 06, 2019 @02:19AM (#19837225)
> "Opt-out telemetry" creates precisely the scenario I describe, where ... no one knows ... why they're opting out.

Telemetry doesn't tell you why users do anything. They would have to ask, which doesn't require telemetry. There used to be a form for submitting feedback.

> How could Mozilla respect the needs of users who opt-out of Mozilla knowing they, and their needs, exist at all?

Because of the values and principles that Mozilla used to share with its users, the principles that underpinned the first implemenation of Firefox Sync and were completely abandoned in the current implementation.

I trusted Mozilla because they didn't require our trust. They understood this principle and designed their systems in accordance with it.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by pbhjpbhj on Monday May 06, 2019 @09:00AM (#19838990)
>no one knows they exist, how many of them there are, or why they're opting out //

They're burning half-a-billion a year of Google's money, they can afford to have an intern run filters to capture stories on HN, reddit, slashdot, ... amalgamate the main points and make them available as part of the user feedback.

Presumably many of the devs at Mozilla have been using it for the last 15 years too and also value a privacy-centric advertising-lite web.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by kevingadd on Monday May 06, 2019 @12:01AM (#19836762)
So you're going to complain about the software breaking and also complain about them pushing a hotfix for it?

This whole situation isn't ideal but it's absurd to me that people are upset about hotfixes for a bug that they found extremely inconvenient. Do you like the bug or not? The option to turn off the system they used for hotfixes is right there in the privacy settings and they even show you what it's currently being used for (and what it was used for in the past). Like it or not, as far as I know every major browser (maybe not Safari?) is doing the exact same thing except they're less transparent about it.

I have literally no idea how to identify what experiments and rollout flags are quietly turned on for my install of Chrome and not for other people because it's not documented anywhere. At least in Firefox the option is right there and so is info on what the option does.

"No opt-out telemetry" is a great idea that doesn't function in the real world. If you ship online-connected software with 1m+ users that doesn't have a way to deploy hotfixes or a killswitch for dangerous features or basic telemetry, that is incredible negligence because all it takes is a single bug or a single unanticipated act by a third party and you're DDoSing someone or causing other kinds of mayhem. I'm quite serious. This is why most vendors operating at Mozilla's scale have the same set of tools at their disposal, even if they don't tell you about it. You cannot deploy large-scale connected software in the real world without doing this. It's one thing to go 'Word shouldn't have any telemetry' (okay, sure) and another to go 'this app that connects to thousands of servers, is left open all the time, and runs remote code should not have any telemetry or automatic update mechanism'. The latter is naive on the level of 'just don't write any bugs and your software won't need updates'.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by Karunamon on Monday May 06, 2019 @12:12AM (#19836816)
So you're going to complain about the software breaking and also complain about them pushing a hotfix for it?

The right way to do this is to push a new release, which they've done. The absolutely wrong way to do this is to silently push a fix through a back door that's open by default and rightly shouldn't exist in the first place.

Yes, you can do things more efficiently when you ignore the rules and subvert reasonable expectations. Generally though, society takes a dim view of this.

>If you ship online-connected software with 1m+ users that doesn't have a way to deploy hotfixes ..

That way is checking for updates, and then asking me if I want to install them. Most software does this and it works fine. There are no privacy implications for hitting an API for a number and checking locally if it's higher than a number I have. All clean, all above-board.

That way is emphatically NOT playing like a sneak and making changes silently and remotely without asking me about it first. I don't care what you think your good reason is, you don't have the ethical/moral right to make changes on my property without that affirmative consent.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by lucb1e on Monday May 06, 2019 @02:56AM (#19837355)
If Mozilla has you that angry, I can't imagine what you must go through every time you interact with any other company. Your points are not completely invalid (most of them anyway) but you might want to rethink where you spend your time ranting in some fury, encouraging people to move away from the only open browser with any sort of market share in favor of our new monopolist. Firefox is not beyond criticism but I think they get plenty of it already for all the good they do compared to everyone else, and a mad fury like this might be better spent contributing to the project.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by reciprocity on Monday May 06, 2019 @12:46PM (#19841166)
Mozilla does not "hate" its users. This comment is way too emotional and dogmatic. Firefox is not above reproach but the presentation of your message leaves a lot to be desired.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by Karunamon on Monday May 06, 2019 @03:49PM (#19843066)
So why do they ignore their feedback at every step? Why do they continue taking anti-user moves seemingly at every opportunity when there's a choice?

If what we see here is how you think Mozilla treats its users well, I'd hate to see what it would take to get you to agree they treat them badly.

I see nothing but naked contempt. YMMV.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by floatingatoll on Thursday May 09, 2019 @12:01AM (#19865263)
What if what you see as “anti-user moves” turned out to be directly beneficial to a thousand times as many people as a few that agree with you?

If you see all instances of someone disagreeing with your ethical and logical judgements as naked contempt, then you will never be able to perceive anyone’s true motivations, in order to argue your case more persuasively and find out whether they understand your views.

Outrage has jumped the shark. Everyone disagrees about everything, which is hard enough to address without declaring “naked contempt” any time a choice is made that isn’t in your favor.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by user17843 on Sunday May 05, 2019 @05:32PM (#19835218)
I doubt this. There are extension update pings, and my guess is that the number of users is deducted from the update pings, but I could be wrong.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by floatingatoll on Sunday May 05, 2019 @05:36PM (#19835233)
“How dare Firefox check for updates from a remote server” is a real thing that’s been said in support of many “privacy” guides that disable all Firefox and addons autoupdates, so I wouldn’t bet the farm either way.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by lugg on Sunday May 05, 2019 @07:30PM (#19835742)
Yea but there is valid reasons for controlling random network access with an iron fist. It's not usual user behaviour but it's one of Firefoxes many niche audiences. Alienating them will just fragment the base. Also remember these vocal niches bring in a lot of family and friends as well.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by Semaphor on Monday May 06, 2019 @03:48AM (#19837541)
Their departure where? Considering the group in question I can't imagine them wanting to switch to Chromium or Opera.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by chappi42 on Monday May 06, 2019 @04:07AM (#19837622)
Where do you see issues with Brave or Vivaldi?
Re:Firefox 66.0.4 is out, fixes disabled add-ons by shadofx on Monday May 06, 2019 @03:15PM (#19842737)
Uses Blink and therefore dependent on Google for security updates.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by fraudsyndrome on Monday May 06, 2019 @01:53AM (#19837154)
I was on the reddit thread when it happened - was super confused as I just updated my firefox and it happened at a very similar time frame so I assumed it was from the update

I personally found the issue trivial, my main addon is ublock origin. There was a workaround using about:debugging and installing UBO on there which worked so it's not like the fix was a long process.

Being committed to a single browser, if anyone was using firefox for as long as me, I can't fathom someone leaving their main browser over something like this. I haven't been using it for THAT long but what if Chrome did something like this too? Then they'd move to another browser that's not FF/Chrome?

Re:Firefox 66.0.4 is out, fixes disabled add-ons by Santosh83 on Monday May 06, 2019 @02:22AM (#19837237)
I too use only two extensions, uBlock Origin and HTTPS Everywhere and the hotfix pushed by Mozilla re-enabled them within half an hour of disabling. I do sympathise with those who apparently lost the settings of certain addons, notably Container based ones. Fortunately I always found the UX of Containers so clunky that I never bothered.

Sticking with Firefox as an open competition to the browser monopoly is critical now more than ever before.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by ntp85 on Monday May 06, 2019 @04:27AM (#19837696)
> Sticking with Firefox as an open competition to the browser monopoly is critical now more than ever before.

I think this fact cannot be emphasized enough. Or we'll have the 90s monopolized web again: "Optimized for Chrome" - not that there'd be a lack of websites already doing that as of now.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by chappi42 on Monday May 06, 2019 @04:19AM (#19837669)
Mozilla fine tuning some of their practices is as critical. These hn threads might give good pointers by concerned, well-meaning users.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by _Donny on Monday May 06, 2019 @06:33AM (#19838176)
I have been on the tipping edge of switching from FF to another browser for a long time now.

Short-lived bugs such as this one do not annoy me as much as the terrible performance of FF. It is not rare that FF uses 2 cores at full utilization all the time.

I always end up installing a new browser out of anger, but I _always_ come back to FF for its great features that I have become addicted to.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by burtonator on Sunday May 05, 2019 @07:44PM (#19835798)
It's about 10-15% on my app but Firefox users are generally super smart so they provide great feedback.

One thing Firefox ROCKS at is that they support extensions/addons on mobile!

Chrome won't add them on mobile because they don't want adblock there.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by jazoom on Sunday May 05, 2019 @07:42PM (#19835789)
I took the opportunity to check out Vivaldi again. Wow. It's so polished compared to Firefox. The downside is I'm now supporting the Chromium monoculture.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by lugg on Sunday May 05, 2019 @07:27PM (#19835731)
Probably fuck all because chrome still has no add-ons on mobile.

People will bitch for a few days then they'll get over it.

This is a shitty screwup but I'm not about to jump ship over it.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by bluedino on Sunday May 05, 2019 @06:31PM (#19835493)
Or they just lived with it for a few days. They were probably using FF because the addon doesn’t exist for chrome in the first olace
Re:Firefox 66.0.4 is out, fixes disabled add-ons by lugg on Sunday May 05, 2019 @07:32PM (#19835746)
It was also over the weekend.

All it did was cement how much I despise Chrome's inability to sandbox it's network config.

Yay gotta close down all chrome instances to turn a proxy on and off.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by onli on Sunday May 05, 2019 @06:24PM (#19835466)
Probably many, but don't forget that there are many firefox users that never install a single addon.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by contravariant on Sunday May 05, 2019 @06:52PM (#19835584)
Which ironically means that the people most affected by this debacle have the most to lose by switching.

Although that also means that firefox managed to piss off it's most loyal group of users. Again.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by ne0sapi3n on Sunday May 05, 2019 @05:27PM (#19835198)
I left for Chrome in a way via Brave. Brave is based on Chrome minus being owned by the All-Seeing-Eye Company in Mountainview.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by AtHeartEngineer on Sunday May 05, 2019 @05:45PM (#19835288)
I really like brave, but right now FF is still my main. Brave is still needs some features. The whole syncing bookmarks and wallets thing is really annoying. I'm glad the way they devised is secure, and privacy sensitive, but it's still a pain in the ass.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by bscphil on Sunday May 05, 2019 @07:17PM (#19835696)
Doesn't using Chromium solve the same issue, as long as you're not signed in to Google?
Re:Firefox 66.0.4 is out, fixes disabled add-ons by yabatopia on Monday May 06, 2019 @02:16AM (#19837215)
I've switched to Vivaldi on my desktop and Brave on my smartphone. For now. It's been three days and I'm still waiting for an official release with the add-on fix, can't wait forever.