News for hackers. Stuff that matters.
Re:Let's guess what Google requires in 14 days or they kill ... by syshum on Wednesday May 13, 2020 @02:46PM (#23170233)
While Firefox is better than Chrome...

Mozilla is becoming more and more Google Like as time progresses, where a few years ago I would have believed it would be unthinkable for Mozilla do so something like this to an extension, today I am not so sure I would trust them either

Re:Let's guess what Google requires in 14 days or they kill ... by skinnymuch on Wednesday May 13, 2020 @02:53PM (#23170332)
Can you give a few examples of how Mozilla/Firefox have changed?

We all know about FF Quantum. Yeah it sucks what happened. Maybe there was an alternative, but any one saying Firefox should’ve just stuck to not being compatible with Chromium extensions is kidding themselves on how badly that would’ve continued hurting Firefox’s market share. The XUL powered extension I’m sure were powerful so the outcry in certain places was huge. Vocal minority.

The Pocket integration got lots of outcry which seemed pretty silly to me. It’s one product they own. Mozilla doesn’t have a ton of products. Yes that is Google like. Much like any synergy or integrating is Google like. Which is really just being a modern internet corporation. If this is one of the reasons. Why would Mozilla of 5 years ago not have done that vs the Mozilla of today and whenever they did do it. 1-2 years ago I think?

Re:Let's guess what Google requires in 14 days or they kill ... by mintplant on Wednesday May 13, 2020 @03:07PM (#23170517)
FWIW, killing XUL extensions wasn't even really about Chromium compatibility. The changes in the Quantum rearchitecting were going to break everything anyway; the decision was made to move everything onto an add-on system which wouldn't just break again and again with every architectural change (which, yes, did have the benefit of Chromium compatibility).
Re:Let's guess what Google requires in 14 days or they kill ... by tialaramex on Wednesday May 13, 2020 @03:19PM (#23170668)
Quantum wasn't even about Chrome compatibility. The XUL extension mechanism was permanent technical debt loaded onto the browser because of how it exposed features, basically welding things directly onto the browser's guts, which on the one hand is super-convenient for making radical changes in an extension and on the other hand is a nightmare to maintain.

The analogy I've used is the Amiga operating system design versus Unix when it comes to multi-core / multi-processor versus multiprocessing. Amiga welds everything to the hardware, the Unix design has a "system call" mechanism cleanly separating your programs from the OS and vice versa.

Because Unix has this relatively thick layer between the OS kernel and the rest of the world, you can just pick up your entire kernel, wrap it in a lock (in Linux this was called the Big Kernel Lock in some BSDs it was Giant Lock and other Unix systems gave it different names) and you've got a multi-processor capable system. Linux did this in about a year IIRC. For purely CPU bound software this minimal work gets you 99.9% of the performance of a custom built OS designed from the outset for multiple processors. Subsequent work to get rid of the BKL further improves performance on more sophisticated workloads, but you're off to a great start.

Amiga couldn't do that, every part of their system could interact with every other part as it liked, so if you tried to just add one lock to protect things the resulting system might randomly deadlock, maybe only on systems with specific hardware or software combinations, and you basically needed to reconsider everything from the ground up.

You need a degree of abstraction like this, the Chromium-style web extensions have it, the XUL extensions didn't, adding it to the latter would have been years of work only to deliberately be incompatible with both existing software on Firefox AND everybody else, madness.

There are definitely things we want in extensions. For example Firefox has a copy of the Public Suffix List baked inside it (all browsers should have this, in its absence you'll get weird security behaviour around how domains and sub-domains work) and I'd like to access their copy from inside an extension to make it behave how users expect. But obviously the extension can just ship its own copy of the PSL, and then keep that up-to-date it's just a waste of resources.

Re:Let's guess what Google requires in 14 days or they kill ... by smnthermes on Wednesday May 13, 2020 @07:43PM (#23173237)
> The XUL extension mechanism was permanent technical debt loaded onto the browser because of how it exposed features, basically welding things directly onto the browser's guts, which is a nightmare to maintain.

There is no evidence for this at all. Extensions can't modify the rendering engine.

Re:Let's guess what Google requires in 14 days or they kill ... by roca on Thursday May 14, 2020 @12:10AM (#23175178)
"guts" meant the XUL implementing the Firefox UI. tialaramex is absolutely right about that, extensions had total access to that XUL/JS state, which is why changes to the Firefox UI inevitably broke extensions.
Re:Let's guess what Google requires in 14 days or they kill ... by ocdtrekkie on Wednesday May 13, 2020 @05:59PM (#23172322)
DNS-over-HTTPS was the big one for me. Mozilla betrayed us here. They've pushed something browsers shouldn't do into the browser, and in my case, started to roll it out to my browsers despite my network device being set to block it.

They actually managed to implement a policy that respects user choice and freedom less than Chrome, which only implements DoH if your set DNS provider supports it.

Re:Let's guess what Google requires in 14 days or they kill ... by WarOnPrivacy on Wednesday May 13, 2020 @08:53PM (#23173851)
> DNS-over-HTTPS was the big one for me. Mozilla betrayed us here.

Betrayal indicates some intent to harm users; the intent of DoH is clearly to safeguard users. However, the rollout was absolutely hamfisted & shortsided.

It's notable that the DoH deployment is about the only example here of Firefox harming users. Compare that with Google rewriting Chrome's code to hobble uBlock Origin & leave users more vulnerable to nefarious ad tech.

The former was Mozilla putting user safety first (in a poorly handled way) while the latter was clearly Google doing the opposite.

Re:Let's guess what Google requires in 14 days or they kill ... by ocdtrekkie on Wednesday May 13, 2020 @11:50PM (#23175068)
Don't get me wrong, I would always choose Firefox over Chrome, but I lament the lack of a major option that seems to not follow Google's plans and generally assume they know better than the user how to use the web.
Re:Let's guess what Google requires in 14 days or they kill ... by j_koreth on Wednesday May 13, 2020 @03:09PM (#23170538)
I don't think the Pocket was owned by Mozilla when they announced their integration. Looking it up, it looks like they bought it 2 years after the initial announcement so I can see it being controversial.
Re:Let's guess what Google requires in 14 days or they kill ... by Wowfunhappy on Wednesday May 13, 2020 @07:15PM (#23172983)
> The Pocket integration got lots of outcry which seemed pretty silly to me. It’s one product they own. Mozilla doesn’t have a ton of products.

I switched to Firefox after the Pocket thing happened, so I didn't follow the "outcry" and can't say if the tenor was justified.

However, as a new Firefox user not familiar with the history, the pocket integration just felt "icky", particularly in combination with the new tab page. Regardless of Mozilla's intentions, it seemed like another instance of Software A trying to push me toward unwanted unrelated Service B, as so many modern tech products are wont to do. Mozilla should be a sanctuary from that crap.

Luckily, I found out about the about:config flag to disable Pocket, and I've been happily ignoring it ever since. I just think it's an unfortunate experience for new users. Hopefully I'm wrong and Mozilla is right about what most new users want.

Re:Let's guess what Google requires in 14 days or they kill ... by Merem on Wednesday May 13, 2020 @03:52PM (#23171032)
Being in a country that was the last holdout for Firefox (majority usage) before it was also taken over by Chrome, I know that several others as well as I have issues with Mozilla. Personally, I've always used Firefox, without exception, and stayed with XUL, rather than switch to their new browser, as add-ons are the most important part of a browser for me. I don't care if one is half a second faster or not.

Not to mention that stuff like stupid redesigns of logos as well as the Pocket issue made me basically lose all trust in Mozilla. Privacy is a huge deal here after all. Those who switched regularly complain about design issues (apparently the desktop browser is becoming somewhat "mobile-like") and most recently the address bar problem which upset everyone except for one person who didn't care about that. (Meanwhile, I'm happy with my address bar being my address bar and my search bar (being just right of it) being my search bar.[1]) If you would ask the people still using Firefox here whether they would recommend it...they would most likely say "no" but then would go on that while it isn't good, the alternatives aren't either.

So the question of change in direction (which is obviously there) regarding Firefox begs the question which people they are actually targeting? It's certainly not your average Joe because Firefox will never be able to out-Google Google. They are also annoying the more advanced users who just want privacy as well as useful things (add-ons, proper baked-in features etc) with their shenanigans, so it can't be them either. The only people I see actually celebrating new releases all the time (regardless of negative changes) are the crowd on HN. So, to me, it seems like they are targeting some kind of tech bubble (no offense) while basically ignoring the users out there. This is, of course, also reflected in them continuously losing marketshare while all the back-patting is happening.

[1] https://abload.de/img/address-search3hjh4.png

Re:Let's guess what Google requires in 14 days or they kill ... by roca on Thursday May 14, 2020 @12:14AM (#23175201)
Mozilla has to target the mass market or they won't survive. They certainly have to target people who, unlike you, care about performance more than anything else, since that's most of the market. You can argue it's hopeless but you can't expect them just to give up, nor should they.
Re:Let's guess what Google requires in 14 days or they kill ... by fwn on Wednesday May 13, 2020 @03:06PM (#23170505)
I'm not the previous commenter, but on Android Mozilla is removing the ability to install extensions from third parties (think GitHub, etc.) and will trim the only left official extension store down to a few extensions. (I think it's below 20 right now.)

An ecosystem where all extensions need to be channelled through one central power broker is pretty much the main requirement to allow them to do what Google is doing in the linked Pushbullet case.

edit: this is all factual, sadly downvotes won't change it.

Re:Let's guess what Google requires in 14 days or they kill ... by input_sh on Wednesday May 13, 2020 @03:59PM (#23171124)
They've rebuilt their browser from scratch and are re-adding the APIs. It makes total sense to prioritize the most frequently used ones now and expand to the other ones later on.

For me personally, Privacy Badger and uBlock Origin are already there. I don't think I need a third one at all.

Re:Let's guess what Google requires in 14 days or they kill ... by fwn on Wednesday May 13, 2020 @05:03PM (#23171806)
You're not challenging anything of what I wrote.

You seem to be more confident on their reestablishment of the extension ecosystem but didn't explain how you arrived at that conclusion.

Re:Let's guess what Google requires in 14 days or they kill ... by mintplant on Wednesday May 13, 2020 @03:10PM (#23170548)
This is temporary while the Android team builds out and stabilizes the add-on APIs supported in the new Firefox for Android. Otherwise it'd be a total crapshoot whether an add-on you tried to install worked or broke randomly (potentially in gnarly ways).
Re:Let's guess what Google requires in 14 days or they kill ... by fwn on Wednesday May 13, 2020 @04:55PM (#23171735)
If locking down on the extension ecosystem were only temporary they could just defer the nearing downgrade of their main line browser until their replacement is fully functional.

But that's not what they do. Instead we do have a clear announcement on a feature removal and a vague hint that they might add it again in the future.

It's absolutely not sure that disabling non-store extensions is only a temporary defect.

If you have evidence that suggests otherwise, feel free to add it.

It does not help that their marketing language feels designed to consistently avoid any meaning whatsoever.

Re:Let's guess what Google requires in 14 days or they kill ... by mintplant on Wednesday May 13, 2020 @05:13PM (#23171904)
> If locking down on the extension ecosystem were only temporary they could just defer the nearing downgrade of their main line browser until their replacement is fully functional.

The update is going ahead because the new Firefox for Android is such a dramatic improvement along all other axes, and because, from a development perspective, the incarnation it's replacing is saddled with legacy and technical debt. It never received most of the benefits from Quantum, for example.

Re:Let's guess what Google requires in 14 days or they kill ... by fwn on Wednesday May 13, 2020 @05:20PM (#23171961)
> The update is going ahead because Firefox Preview is such a dramatic improvement along all other axes.

...and even the extension axis, from a power-aware Mozilla position. That's what makes it suspicious in the first place.

A few years ago they had a bug that added seconds to every page load that they didn't fix for half a year, but once an update coincidentally consolidates power at Mozilla it needs to be pushed for all its supposed benefits and despite all its known drawbacks asap.

We wouldn't buy that if it were Google or Microsoft and we shouldn't buy it in Mozillas case either. ... If they even announced that they plan to reopen the extension system, which they (to my knowledge) did not.

Personally I don't notice any grave difference between Firefox and preview. Apparently scrolling should be different, but my mid-range phone scrolls just fine in both apps.

Re:Let's guess what Google requires in 14 days or they kill ... by roca on Thursday May 14, 2020 @12:15AM (#23175209)
> A few years ago they had a bug that added seconds to every page load that they didn't fix for half a year,

What are you talking about?

Re:Let's guess what Google requires in 14 days or they kill ... by msla on Wednesday May 13, 2020 @03:24PM (#23170713)
First of all, they deliberately destroyed my bookmarks.

https://drewdevault.com/2017/12/16/Firefox-is-on-a-slippery-...

> For a long time, it was just setting the default search provider to Google in exchange for a beefy stipend. Later, paid links in your new tab page were added. Then, a proprietary service, Pocket, was bundled into the browser - not as an addon, but a hardcoded feature. In the past few days, we’ve discovered an advertisement in the form of browser extension was sideloaded into user browsers. Whoever is leading these decisions at Mozilla needs to be stopped.

> Here’s a breakdown of what happened a few days ago. Mozilla and NBC Universal did a “collaboration” (read: promotion) for the TV show Mr. Robot. It involved sideloading a sketchy browser extension which will invert text that matches a list of Mr. Robot-related keywords like “fsociety”, “robot”, “undo”, and “fuck”, and does a number of other things like adding an HTTP header to certain sites you visit.

https://www.theverge.com/2018/5/7/17326184/firefox-ads-spons...

> Mozilla’s motto is “internet for people, not profit,” however the realities of having to fund all of its ventures are forcing the company into adopting one of the web’s less human-friendly aspects: sponsored content. Having acquired read-it-later service Pocket last year, Mozilla has been populating new tabs in Firefox with Pocket reading suggestions — and those are now going to include links that an advertiser has paid for.

Re:Let's guess what Google requires in 14 days or they kill ... by strken on Wednesday May 13, 2020 @02:53PM (#23170327)
I agree to some extent, e.g. the pocket integration and Mozilla burning cash on things that aren't related to Firefox, but Chrome's decision to limit/break key adblocking APIs across their whole ecosystem is much worse. I'd be willing to ignore almost any number of removed extensions to continue using a browser that's not owned by a glorified adtech company.
Re:Let's guess what Google requires in 14 days or they kill ... by smnthermes on Wednesday May 13, 2020 @07:51PM (#23173293)
Browser extensions are going to be turned into a web standard, and W3C is controlled by Google, so Firefox will probably lose its adblocking API: http://browserext.github.io/
Re:Let's guess what Google requires in 14 days or they kill ... by skinnymuch on Wednesday May 13, 2020 @02:56PM (#23170362)
What do they burn cash on? They’ve mostly stopped Phone stuff right? Is there other stuff?
Re:Let's guess what Google requires in 14 days or they kill ... by strken on Wednesday May 13, 2020 @03:26PM (#23170745)
Some of the previous discussion when they had layoffs earlier this year: https://news.ycombinator.com/item?id=22057737
Re:Let's guess what Google requires in 14 days or they kill ... by JTbane on Wednesday May 13, 2020 @02:53PM (#23170326)
Mozilla doesn't have the conflict of interest google does with ads...

That alone makes me use Firefox over Chrome.

Re:Let's guess what Google requires in 14 days or they kill ... by pbhjpbhj on Wednesday May 13, 2020 @05:46PM (#23172209)
Doesn't Mozilla get nearly all its money from Google; I've assumed that actions by Mozilla have been coloured by not wanting to ditch its multi-hundred-million dollar benefactor.

Google has apparently paid Mitchell Baker personally multiple millions of dollars too.

Seems Google know how to manage their risks.

Mozilla seem perhaps even more beholden to ad revenue than Google.

Re:Let's guess what Google requires in 14 days or they kill ... by roca on Thursday May 14, 2020 @12:15AM (#23175212)
> Google has apparently paid Mitchell Baker personally multiple millions of dollars too.

What are you talking about?

Re:Let's guess what Google requires in 14 days or they kill ... by pbhjpbhj on Thursday May 14, 2020 @04:50AM (#23177095)
Google fund Mozilla, it's not a secret, you can use a search engine and find such information.

Or did you mean to contradict me rather than ask a question?

Re:Let's guess what Google requires in 14 days or they kill ... by roca on Friday May 15, 2020 @08:22AM (#23191294)
I know that Mozilla has historically been paid by Google to make Google search the default search provider in Firefox. But you just claimed "Google has apparently paid Mitchell Baker personally multiple millions of dollars too" which is something different that I have heard nothing about. So, what is that claim about?
Re:Let's guess what Google requires in 14 days or they kill ... by msla on Wednesday May 13, 2020 @03:26PM (#23170739)
Re:Let's guess what Google requires in 14 days or they kill ... by bromonkey on Wednesday May 13, 2020 @03:42PM (#23170925)
Yep, the three clicks it takes to disable that really drives me nuts.
Re:Let's guess what Google requires in 14 days or they kill ... by smnthermes on Wednesday May 13, 2020 @08:04PM (#23173420)
They should not do it in the first place. Don't be so dismissive.
Re:Let's guess what Google requires in 14 days or they kill ... by the_jeremy on Wednesday May 13, 2020 @02:59PM (#23170423)
Who do you trust? Certainly not Chromium-Edge. That leaves "only browse the internet on a Mac with Safari" or browsers with such tiny market share that they'll never be tested against, and sites will routinely be broken for you. My company doesn't do any non-Chrome compatibility testing, so all our intranet sites require Chrome.
Re:Let's guess what Google requires in 14 days or they kill ... by derefr on Wednesday May 13, 2020 @03:18PM (#23170652)
> Who do you trust? Certainly not Chromium-Edge.

Why not? Chromium (= Blink, plus some other stuff like a network request stack) development happens in the open, just like WebKit development. It might be steered by Google to such an extent that there's always the possibility of it going in a bad direction; but it's not like you're not going to hear about it if something privacy-violating is introduced into the Chromium codebase (rather than the downstream Chrome codebase.) And you can switch away from the browsers that use it if/when that happens.

For that matter, if upstream Chromium ever did start "going bad", those browsers that rely upon it would also likely switch away from it, either cooperatively forking it into a new community-maintained project, or switching over to WebKit (with which it is still mostly ABI-compatible.)

> browsers with such tiny market share that they'll never be tested against, and sites will routinely be broken for you

Even if you don't want to use anything based on Blink, WebKit is also a large ecosytem, and minor WebKit-based browsers can "inherit compatibility" from developers targeting (mostly Mobile) Safari. Several Linux browsers (GNOME Web, Falkon, Midori) use WebKit, for example. They render everything just fine (i.e. just like Safari does.)

Re:Let's guess what Google requires in 14 days or they kill ... by wayneftw on Wednesday May 13, 2020 @03:42PM (#23170931)
I wanted to like Edge but...

> The browser also sends unique hardware identifiers to Microsoft, which is a "strong and enduring identifier" that cannot be easily changed or deleted.

https://www.bleepingcomputer.com/news/microsoft/research-fin...

Re:Let's guess what Google requires in 14 days or they kill ... by derefr on Wednesday May 13, 2020 @03:54PM (#23171050)
Oh, ah; I thought the above meant "why not Chromium and/or Edge" rather than "why not the Chromium version of Edge."

Yes, I can see why you'd avoid Edge specifically, same as avoiding Chrome specifically.

But that's not an argument against using upstream Chromium (which is, in fact, a browser all on its own, stadnalone downloadable and shipping with several Linux distros); or against other Blink/Chromium-based browsers (e.g. Brave), no? Either choice would get you compatibility with anything Chrome itself is compatible with (in terms of websites; not necessarily in terms of extensions—though the difference is just in the legacy Chrome extension APIs; WebExtensions work fine everywhere.)

Re:Let's guess what Google requires in 14 days or they kill ... by roca on Thursday May 14, 2020 @12:16AM (#23175217)
It's Chromium that's hobbling the content-blocking extension API.
Re:Let's guess what Google requires in 14 days or they kill ... by laumars on Wednesday May 13, 2020 @03:11PM (#23170556)
Plus any smaller browser likely just another Chromium or Blink fork. There is very little out there these days that is truly independent.
Re:Let's guess what Google requires in 14 days or they kill ... by smnthermes on Wednesday May 13, 2020 @09:23PM (#23174087)
Unless you frequently use spyware websites that are too lazy to do server-side scripting, using a browser with a less used engine is fine.
Re:Let's guess what Google requires in 14 days or they kill ... by SahAssar on Wednesday May 13, 2020 @03:17PM (#23170638)
Why not firefox?
Re:Let's guess what Google requires in 14 days or they kill ... by the_jeremy on Thursday May 14, 2020 @11:17AM (#23180555)
I use firefox. The parent comment said they didn't trust firefox or chrome.
Re:Let's guess what Google requires in 14 days or they kill ... by colejohnson66 on Wednesday May 13, 2020 @04:01PM (#23171145)
In the past, it used to be (at least for me) because of Gecko. Websites didn’t render the same as in WebKit.
Re:Let's guess what Google requires in 14 days or they kill ... by SahAssar on Wednesday May 13, 2020 @04:42PM (#23171604)
Not sure when that was but I have no rendering issues with firefox. As a webdev I can say that FF's rendering these days is pretty much spot on.
Re:Let's guess what Google requires in 14 days or they kill ... by MattGaiser on Wednesday May 13, 2020 @02:54PM (#23170334)
Have they done it or is it just an uneasy feeling?