News for hackers. Stuff that matters.

A comment on Security vulnerabilities fixed in Firefox 72.0.1 and ESR 68.4.1. Parent comment

Re:Security vulnerabilities fixed in Firefox 72.0.1 and ESR ... by prophesi on Wednesday January 08, 2020 @04:36PM (#21996048)
It's to be expected that running the installer will give you a fresh install of Firefox.

You can still manually update by hitting "About Firefox" in your menu, which will keep your settings as-is.

[ Parent | on HN ]
Re:Security vulnerabilities fixed in Firefox 72.0.1 and ESR ... by deith on Wednesday January 08, 2020 @05:08PM (#21996308)
No it's not... Program files and settings are stored in two completely different folders... Even uninstalling a program shouldn't remove your settings unless it asks you first.
[ Parent | on HN ]
Re:Security vulnerabilities fixed in Firefox 72.0.1 and ESR ... by prophesi on Wednesday January 08, 2020 @05:53PM (#21996646)
Well, yes, it will keep your Firefox profile and its related settings. It's only the about:config settings that will be reset, which I think is a sane default.
[ Parent | on HN ]
Re:Security vulnerabilities fixed in Firefox 72.0.1 and ESR ... by svnpenn on Wednesday January 08, 2020 @06:23PM (#21996872)
You realize this isnt true anymore right?

If you disable update via policy (which is the only way you can do it now that about:config method is removed), then going to "About Firefox" doesnt give you any options regarding updating.

Check your facts.

[ Parent | on HN ]
Re:Security vulnerabilities fixed in Firefox 72.0.1 and ESR ... by prophesi on Thursday January 09, 2020 @08:53AM (#22001137)
I did check them. I set my settings to "Check for updates but let you choose to install them." via the about:config method, which is the setting I assumed they were referring to.

I could still update from 72.0.0 to 72.0.1 from the About Firefox menu item, and from the about:preferences#general page. I'm running Mac OSX Catalina.

That said, Firefox is definitely doing what they can to make users keep auto updates on. I do think there should be a way to manually update if you've disabled both auto-updates and their update checks, without requiring the user running the installer, forcing you to toggle one of those settings off again.

[ Parent | on HN ]