News for hackers. Stuff that matters.
Re:Firefox 72.0 by Twirrim on Tuesday January 07, 2020 @09:53AM (#21980410)
"Firefox replaces annoying notification request pop-ups with a more delightful experience, by default for all users. The pop-ups no longer interrupt your browsing, in its place, a speech bubble will appear in the address bar when you interact with the site."

That should pretty much kill off a lot of the notification request crap, especially if Chrome follows suit. I can envision the conversion rate massively falling off when it's no longer something right in your face.

Re:Firefox 72.0 by hedora on Tuesday January 07, 2020 @10:15AM (#21980648)
Slack has started disabling unrelated features if you disallow notifications. For instance, you can’t add channels to the “ignore @here” list if notifications are off. I’m sure this’ll get worse over time.

FF needs a “disable notifications, but lie to the website and say they’re enabled” button.

Re:Firefox 72.0 by daxelrod on Tuesday January 07, 2020 @10:42AM (#21980981)
I've seen sites that refuse to show you their content at all until you've enabled notifications. I like this lying idea.
Re:Firefox 72.0 by zamalek on Tuesday January 07, 2020 @11:54AM (#21981747)
It should always lie. Consistently rejecting notifications is yet another bit for fingerprinting a user (not just a device).
Re:Firefox 72.0 by Nightshaxx on Tuesday January 07, 2020 @12:10PM (#21981944)
I feel like a good extension to make would be a lying extension. Make it able to lie to a site about any API and have set configurations to deal with specific types of behavior.
Re:Firefox 72.0 by timlyo on Wednesday January 08, 2020 @03:27AM (#21989513)
Maybe even one that can randomise some settings to throw off fingerprinting.
Re:Firefox 72.0 by marcosdumay on Tuesday January 07, 2020 @12:13PM (#21981973)
I don't understand why browsers would ever not lie about this.
Re:Firefox 72.0 by twic on Tuesday January 07, 2020 @01:20PM (#21982832)
A non-malicious website could activate some alternative UI for giving you news if you disable notifications.
Re:Firefox 72.0 by currysausage on Tuesday January 07, 2020 @12:22PM (#21982067)
Maybe because of the privacy implications of web workers keeping connections/checking for new notifications in the background?
Re:Firefox 72.0 by rtpg on Wednesday January 08, 2020 @12:22AM (#21988592)
"Why are my notifications for Slack not working?"
Re:Firefox 72.0 by OskarS on Wednesday January 08, 2020 @04:56AM (#21989983)
"Because you've declined to get notifications for Slack"

This does not seem like a reasonable complaint to me.

Re:Firefox 72.0 by ViViDboarder on Thursday January 09, 2020 @10:05AM (#22001751)
But the application would have no way of knowing that to display this message to the user if the browser lies about it.
Re:Firefox 72.0 by ric2b on Sunday January 12, 2020 @04:19PM (#22029471)
"Check if you have notifications enabled for Slack on your browser's settings"
Re:Firefox 72.0 by Paul-ish on Tuesday January 07, 2020 @01:03PM (#21982629)
It may require bandwidth and CPU to check for notifications.
Re:Firefox 72.0 by radicalriddler on Tuesday January 07, 2020 @04:55PM (#21985389)
I feel like if a specific browser, ie. Firefox went down this path, it wouldn't take long until websites stopped supporting that browser. It'd take browser wide action to take on big players such as Slack imo.
Re:Firefox 72.0 by IfOnlyYouKnew on Wednesday January 08, 2020 @08:11AM (#21991070)
This is a common error people make. It’s transferring their emotions to inform what some (often companies or countries) should do.

In the specific example, it makes no sense for any single website to forgo, say, 5% of revenue to “teach browsers a lesson”, especially since any change would benefit them accrue mostly with their competitors.

See also: “Google/FB/... should leave the EU to protest these privacy laws...”

Re:Firefox 72.0 by ric2b on Sunday January 12, 2020 @04:21PM (#22029496)
Unless a huge number of websites cooperate, they will all think it's useless for them individually to "fight the power".
Re:Firefox 72.0 by dannyw on Wednesday January 08, 2020 @01:03AM (#21988770)
No, no company is going to choose to see a -5% dip in overall engagement just because they want to fight a web browser.
Re:Firefox 72.0 by ravedave5 on Tuesday January 07, 2020 @10:56AM (#21981123)
How sad is the current age that this is the feature I'm most excited about in like the last 6 months of browser changes.
Re:Firefox 72.0 by bambax on Tuesday January 07, 2020 @10:37AM (#21980921)
I never accept any notification from anywhere on desktop or mobile (except some calls) and am all the happier. Don't let others control your agenda.
Re:Firefox 72.0 by Caspy7 on Wednesday January 08, 2020 @02:43AM (#21989244)
In Firefox Notification prompts can be disabled entirely in settings.

In preferences type 'notifications', click the Settings button and check the box to "Block new requests asking to allow notifications"

Re:Firefox 72.0 by ksec on Tuesday January 07, 2020 @11:20PM (#21988298)
I still remember Chrome and Firefox Engineers saying it would provide much better experience to user.

That was the era when majority of public opinion on Google was Do no Evil. And Google at the time can do no wrong.

Re:Firefox 72.0 by Normal_gaussian on Tuesday January 07, 2020 @11:31PM (#21988373)
I've built quite a few web apps that make decent use of notifications. But then the users explixitly wanted to know the things being notified.
Re:Firefox 72.0 by toxican on Wednesday January 08, 2020 @12:11PM (#21993387)
It is pretty great for browser-based chat and email. Don't think I've ever allowed it for anything else.
Re:Firefox 72.0 by saagarjha on Wednesday January 08, 2020 @02:07AM (#21989044)
It may not; you'll just get fake notification prompts from the page that will morph intro instructions on how to enable notifications when you click "accept".
Re:Firefox 72.0 by neurostimulant on Wednesday January 08, 2020 @04:21AM (#21989795)
This already happening for quite some time now. Many websites uses OneSignal and their fake prompt looks similar with Chrome's notification prompt (at least to ordinary users): https://documentation.onesignal.com/docs/permission-requests...
Re:Firefox 72.0 by int_19h on Wednesday January 08, 2020 @02:42PM (#21994971)
From this link:

"OneSignal Prompts are a 'soft request', meaning that they are not invoking the 'hard request' of the browser's Native Permission Prompt. This is important because if a user denies the native prompt, the developer is unable to prompt the user again, unless the user goes through a multi-step process to re-enable these permissions. On the other hand, if a user dismisses a Soft Prompt, the app or website can still present them the option later on."

Speaking for myself, showing such prompts repeatedly is a very good way to ensure that I'll never visit your website ever again. No, I don't care about your mobile app, anymore so than I did two days ago.

Re:Firefox 72.0 by tor291674 on Sunday January 19, 2020 @01:57PM (#22093156)
But it works on other people, which is why they bothered to create that in the first place.
Re:Firefox 72.0 by gdeglin on Wednesday January 08, 2020 @10:11PM (#21998220)
Hi. I'm one of the founders of OneSignal.

To provide some context on this, we provide clients with 4 built-in prompting options and we do our best to encourage them to use the one that is best for their user experience.

We definitely want to discourage people from asking for notification permission in an obtrusive way. It's not good for anyone when that happens. We wrote a blog post with some recommendations here: https://onesignal.com/blog/web-push-permission-prompting-cha...

Re:Firefox 72.0 by saagarjha on Thursday January 09, 2020 @05:18AM (#21999961)
I'm not sure how to put this, but your product is "abused" to such an extent that I personally took the time to pop open the Web Inspector, find the CSS selector for the notification, and use it to look up your company and mentally blacklist it and make a point of bringing it up by name when relevant: https://news.ycombinator.com/item?id=21848866. Your product is seemingly fundamentally misaligned with how users want to interact with the web, to the point where browsers are implementing behaviors that specifically target your implementation. Your blog post gives me very little confidence in your commitment to making this experience better:

> OneSignal encourages all websites to adopt a two-step prompting system if they don't already do so. This will help prevent the website from being penalized and forced to show a quieter permission prompt if too many users have denied the traditional native prompt in Chrome.

Websites are being penalized for a reason, and you know this. Simply adding another modal is just making the problem worse.

> The easiest prompt to transition to is OneSignal's Slide Prompt. Ideally, however, we encourage users to use the Custom Link prompt.

The Slide Prompt should not even be offered as a transition. It's completely at odds with the intent of this browser change, which is all about user intent. Providing facilities to present annoyances that bypass user interaction is the complete opposite of this.

> Offering a coupon in exchange for users opting-in to notifications.

…no?

Please, please, please reconsider how you are implementing these. If you are genuinely unaware of the widespread misuse of your tools, I'd be more than happy to direct you to numerous examples of zero-click, near-immediate, largely irrelevant faux notification requests coming from websites using your product.

Re:Firefox 72.0 by bagacrap on Wednesday January 08, 2020 @12:51AM (#21988712)
almost simultaneous announcement from Chrome: https://blog.chromium.org/2020/01/introducing-quieter-permis...