News for hackers. Stuff that matters.
Re:Cohort IDs can be collected over time to create cross-sit... by unicornporn on Thursday April 15, 2021 @09:43AM (#26820381)
Switch browser while you can. Firefox might not be perfect (or even getting slightly worse), but at least it's an alternative and I can easily say it's better than Chromium in most. At least ad blocking worka as it should.
Re:Cohort IDs can be collected over time to create cross-sit... by prezjordan on Thursday April 15, 2021 @10:13AM (#26820759)
I ignored this advice for several years but ~6 months ago switched to Firefox cold turkey and don't miss Chrome one bit. Even when doing web development (I thought I'd miss chrome's CSS/HTML/JS inspector and devtools in general but Firefox's are the same if not better)
Re:Cohort IDs can be collected over time to create cross-sit... by CyberFoxar on Friday April 16, 2021 @05:37AM (#26831680)
I find the dev tools of firefox even better. The ability to see XHR request content/header/responses directly in the Javascript console has been invaluable to me. It annoys me that chrome's console does not have this. You can only see when a request is made, but you have to hop on the network tab to see the actual content.
Re:Cohort IDs can be collected over time to create cross-sit... by bentcorner on Thursday April 15, 2021 @11:04AM (#26821336)
I stay on Firefox because of UBO and containers, but when I discovered tree-style tabs I'll likely never leave.

Edge has an ok-ish implementation of vertical tabs but it still has a ways to go to match tree-style tabs.

Re:Cohort IDs can be collected over time to create cross-sit... by unicornporn on Thursday April 15, 2021 @03:35PM (#26825160)
I've been a Tree Style Tab user for many years, but I have to confess I have a complicated relationship with this add-on. I've reached >600 tabs more than once. That's not only a feature.
Re:Cohort IDs can be collected over time to create cross-sit... by qwertox on Thursday April 15, 2021 @03:52PM (#26825361)
I used to use Tab Mix Plus on Firefox. Having three rows of tabs and the ability to scroll them vertically for more tabs was the absolute killer feature for me. I loved Firefox for this.

Once Firefox moved to the per-process approach and removed the ability to hack the UI, I saw no more reason to stay on what was a terribly slow browser back then, compared to Chrome. Startup times of 10+ seconds and such shenanigans.

Re:Cohort IDs can be collected over time to create cross-sit... by petepete on Thursday April 15, 2021 @05:57PM (#26826653)
When you have more than (say) twenty, what does having a tab open give you that bookmarking the page doesn't?
Re:Cohort IDs can be collected over time to create cross-sit... by unicornporn on Friday April 16, 2021 @02:49PM (#26837623)
I do well with Max Tabs set to 60 when researching something. Anything above that is just bad habits.
Re:Cohort IDs can be collected over time to create cross-sit... by eplanit on Thursday April 15, 2021 @10:10AM (#26820702)
I have noticed a recent decline in the debugging features of FF -- downright buggy. View source shows a form I used 3 pages ago, not the form rendered. I now switch to chrome just for debugging.
Re:Cohort IDs can be collected over time to create cross-sit... by foepys on Thursday April 15, 2021 @10:34AM (#26821016)
You don't deserve the downvotes. We are using mainly Firefox at work and sometimes, not often but sometimes, Firefox refuses to load the current file in the debugger. The only solution is to restart Firefox. I get why some are annoyed by this when they are in a debugging session. Although the last time it happened to me was one or two Firefox releases ago. Maybe it got fixed.
Re:Cohort IDs can be collected over time to create cross-sit... by worble on Thursday April 15, 2021 @06:44PM (#26827125)
I have a similar issue where very occasionally the debugger tab will just be empty, just absolutely no files in there at all. The fix is simple enough - just open the site in a new tab, although it's a little annoying.

I still do all my development in Firefox regardless, I'm sure if I switched to Chrome I'd quickly discover a set of equally annoying bugs and quirks there too. Better the devil you know.

Re:Cohort IDs can be collected over time to create cross-sit... by swimming_elwood on Thursday April 15, 2021 @06:38PM (#26827061)
That's interesting. I have somewhat recently encountered the same thing with Chrome. I don't know what causes it but when it happens, the debugger hits and doesn't show me the context at all. But if I re-trigger the debugger again, it shows me everything just fine. :shrug:
Re:Cohort IDs can be collected over time to create cross-sit... by hosteur on Thursday April 15, 2021 @10:56AM (#26821238)
Did you report the problem?
Re:Cohort IDs can be collected over time to create cross-sit... by foepys on Thursday April 15, 2021 @01:39PM (#26823674)
No because I cannot reproduce it. It just happened randomly in the past.

As I don't like getting bug reports that boil down to "doesn't work", I don't create them myself.

Re:Cohort IDs can be collected over time to create cross-sit... by kevingadd on Thursday April 15, 2021 @03:23PM (#26825019)
When struggling with a persistent issue like this in FF devtools it can still be worth filing an issue on the bugzilla tracker. Worst case, it gets closed as not reproducible. In practice many of these issues will eventually get caught if enough people complain about them and someone manages to dig through all the reports and come up with theories about the issue.

You may get a helpful reply from someone on the team with suggestions on how to troubleshoot it, like enabling specific logging flags or pulling some info out of the console.

I've filed lots of bug reports against Firefox in the past and just because you don't have an isolated reproduction case for a devtools issue, that doesn't mean it can't be fixed.

Re:Cohort IDs can be collected over time to create cross-sit... by tomashubelbauer on Thursday April 15, 2021 @04:14PM (#26825581)
Try accessing the URL of the resource directly in its own tab and then restarting the tab where you're seeing the issue. That works for me.
Re:Cohort IDs can be collected over time to create cross-sit... by capitainenemo on Thursday April 15, 2021 @01:37PM (#26823648)
Re:Cohort IDs can be collected over time to create cross-sit... by eplanit on Thursday April 15, 2021 @04:27PM (#26825697)
That describes it exactly -- thanks for finding that.
Re:Cohort IDs can be collected over time to create cross-sit... by Semaphor on Thursday April 15, 2021 @10:02AM (#26820610)
> (or even getting slightly worse)

FWIW, it has only been getting better for me

Re:Cohort IDs can be collected over time to create cross-sit... by DoingIsLearning on Thursday April 15, 2021 @10:08AM (#26820680)
Yeah strong agree, apart from the mess up with Firefox on Android.

Both at home and work, Firefox desktop (with uBlock Origin) has been a pretty frictionless tool in terms of my browsing experience these past years, across Linux, Windows, and Mac machines.

Re:Cohort IDs can be collected over time to create cross-sit... by Mudface_72 on Thursday April 15, 2021 @01:11PM (#26823283)
Try firefox lite , you can get it on uptodown and apkmirror, its is not available in the play store for all regions.
Re:Cohort IDs can be collected over time to create cross-sit... by Groxx on Thursday April 15, 2021 @02:30PM (#26824401)
From a quick glance, this seems to be even further down the "messy" side of the firefox-on-android mess. I.e. its capabilities are even more restricted.

Which is not to say it's not useful, and TIL - I didn't know they had released this, so thanks :) But I don't think it particularly applies to this thread.

Re:Cohort IDs can be collected over time to create cross-sit... by Daho0n on Thursday April 15, 2021 @03:15PM (#26824938)
What is the 'messy' problem with Firefox on Android? I have moved those I help with tech to Firefox. My mother for example. They don't know the difference between "the internet" and "Firefox" but so far they run Firefox with UBO with no problems (well not anything new that wasn't there with Chrome too but that is a old people Vs tech problem not unique to Firefox).

Anything I need to know?

Re:Cohort IDs can be collected over time to create cross-sit... by Groxx on Thursday April 15, 2021 @04:33PM (#26825775)
The messy problem is that you used to be able to run uBO with no problems on Firefox on Android. And most other extensions, with some obvious limitations (e.g. desktop-only UI extensions didn't work, some UIs weren't mobile-friendly, etc).

Then they released a preview of a re-design which also broke all extensions. That's arguably fine for a preview, though a bit concerning. Many were raising alarms at this point.

Then they released the re-design to the stable release, with still-broken extensions. This pretty unambiguously is "a mess", if not earlier.

Then they released built-in support for a couple dozen Mozilla-selected extensions (uBO included, I believe). This is still a mess, and rightfully raises a few eyebrows.

... and we're still there now, after over a year of "this will be fixed soon". I believe you can install nightly + manually tweak config and still install other extensions, but Firefox for Android does not support extensions right now. That's A Problem™, and not a good sign for extension-longevity that it was ever allowed out of preview. It broadly implies extensions are very low on their priority list, which is concerning, as extensions have been the clear leaders on preserving privacy and user control in general. Browsers overwhelmingly follow popular extension behaviors, not the other way around - cripple extensions and you also cripple advancement and experimentation.

Re:Cohort IDs can be collected over time to create cross-sit... by Daho0n on Thursday April 15, 2021 @07:17PM (#26827370)
Thank you :)
Re:Cohort IDs can be collected over time to create cross-sit... by DoingIsLearning on Friday April 16, 2021 @03:16AM (#26830599)
To add to this they also blocked access to about:config on Android.

No access to extensions and blocking about:config was to me just heretic. Those two are the raison d'être of Firefox.

Nightly build thankfully reverted this babysitting of users but indeed we are still stuck with 'vetted' add-ons downgrade in the official Firefox release for Android.

Re:Cohort IDs can be collected over time to create cross-sit... by iggldiggl on Friday April 16, 2021 @06:47AM (#26832206)
Even on Nightly, the procedure to install non-whitelisted-by-default add-ons is somewhat arcane though, and AFAIK even after following it you can only install the current version of add-ons that have been officially published on AMO, i.e. no installing a different add-on version or manually installing an XPI (not even a signed one).

Also lots of other little papercuts: https://news.ycombinator.com/item?id=26470454

Re:Cohort IDs can be collected over time to create cross-sit... by alert0 on Thursday April 15, 2021 @10:21AM (#26820836)
I switched to Firefox for container tabs a few years ago and love it.
Re:Cohort IDs can be collected over time to create cross-sit... by qwertox on Thursday April 15, 2021 @03:48PM (#26825308)
Please educate me: I am a Chrome user and I do rely on browser syncing my tabs and some passwords.

I know that Firefox also has a syncing feature ("Sign into Firefox", "Continue to Firefox Sync").

My problem is that I don't trust Mozilla's ability to keep this data secure. I believe that sooner or later they are going to get hacked, and that data will leak. The same might happen to Google, but I also believe that no other company has the degree of expertise of Google to protect that data.

Am I wrong in this assumption? Does Firefox Sync end-to-end encrypt the data, without knowing the key, like Google's Sync Passphrase feature?

What are your experiences with Firefox Sync? Does it work just as good as Chrome's, or even better?

Re:Cohort IDs can be collected over time to create cross-sit... by DenseComet on Thursday April 15, 2021 @03:53PM (#26825376)
I've had a pretty good experience with Firefox Sync, although I don't use it for passwords. Firefox Sync has E2E encryption to ensure that Mozilla doesn't have the ability to view any of your data.

https://hacks.mozilla.org/2018/11/firefox-sync-privacy/

Re:Cohort IDs can be collected over time to create cross-sit... by klondike_ on Thursday April 15, 2021 @03:51PM (#26825351)
You can actually self host Firefox Sync on your own server if you want.
Re:Cohort IDs can be collected over time to create cross-sit... by chillydawg on Thursday April 15, 2021 @03:50PM (#26825341)
it's encrypted, they store the blob and ship it to any browser that auths correctly. sync works just fine.
Re:Cohort IDs can be collected over time to create cross-sit... by Ayesh on Thursday April 15, 2021 @10:40PM (#26828771)
Tl;Dr: Extremely satisfied and using on three devices.

The sync server is open source and free, so you can host an instance yourself if you'd like.

Firefox accounts have 2FA support, and passwords are end to end synced anyway, so even if your Firefox account is compromised, nobody can recover data without the key.

For about a decade in the working, there were zero breaches in mozilla AFAIK.

I use Firefox sync in my Windows laptop, Firefox on Android beta. There is also an app called Lockwise that can work as a standalone app and a password fill feature for other apps as well.

Re:Cohort IDs can be collected over time to create cross-sit... by why_Mr_Anderson on Thursday April 15, 2021 @10:33AM (#26821011)
The only thing that keeps me using Chrome from time time is the in-place translation feature. If anything comparable was added to Firefox (which I mainly use), I would be more than happy to get rid of Chrome once and for all.

And yes, I'm aware of the extensions that offer similar functionality, but unfortunately they still have some way to go before they can reach parity with Chrome translator.

Re:Cohort IDs can be collected over time to create cross-sit... by fomine3 on Thursday April 15, 2021 @11:50PM (#26829236)
In-place translating is the feature that really missed on other browsers. Edge also works well with Bing translate. I wish DeepL provides translate extension.
Re:Cohort IDs can be collected over time to create cross-sit... by barbazoo on Thursday April 15, 2021 @11:36AM (#26821747)
What do I, as an end user, have to do to be protected? Is it sufficient to use Firefox with its default settings?

Honestly I don't know and I think I should. I have uBlock Origin, Privacy Badger, ClearURLs installed on Firefox, I'm running pi-hole at home, it's just so much.

Re:Cohort IDs can be collected over time to create cross-sit... by surround on Thursday April 15, 2021 @11:49AM (#26821948)
Don't sweat it. All you really need is Firefox + uBlock Origin. And even without uBo, Firefox blocks some trackers by default.

Privacy badger is largely useless ever since they got rid of heuristics. ClearURLs is useful, but you'd probably be fine without it. And pi-hole doesn't block anything that uBo doesn't in Firefox (but is still useful for applications outside of the browser).

On the other hand, maybe you're like me and want to squeeze as much privacy out of your browser as you can, even if it means breaking some websites. If that's the case, check this website out. Just remember that the tweaks listed here are nice, but not entirely necessary.

https://privacytools.io/browsers/#about_config

Re:Cohort IDs can be collected over time to create cross-sit... by HDMI_Cable on Thursday April 15, 2021 @03:19PM (#26824965)
With uBO, I would also disable things like Third-Party Cookies. I also have No-Script, but that's mainly for making sites easier to load (Though it does block ad-tracking js-files, like uBO).
Re:Cohort IDs can be collected over time to create cross-sit... by barbazoo on Thursday April 15, 2021 @12:11PM (#26822329)
Thank you, I'll have a look!
Re:Cohort IDs can be collected over time to create cross-sit... by heavyset_go on Thursday April 15, 2021 @04:24PM (#26825676)
Under Enhanced Tracking Protection, select the Strict option. Firefox also has native HTTPS-only and ESNI features.
Re:Cohort IDs can be collected over time to create cross-sit... by tinus_hn on Thursday April 15, 2021 @01:41PM (#26823700)
It’s a fine browser and it is really important to make sure the landscape is not dominated by one engine.
Re:Cohort IDs can be collected over time to create cross-sit... by waheoo on Thursday April 15, 2021 @10:04AM (#26820639)
What? I switched a couple years ago, chrome is a mess whenever I'm forced to use it.
Re:Cohort IDs can be collected over time to create cross-sit... by InvOfSmallC on Thursday April 15, 2021 @11:01AM (#26821301)
Firefox Focus is the best.
Re:Cohort IDs can be collected over time to create cross-sit... by theshrike79 on Thursday April 15, 2021 @04:39PM (#26825853)
I use Safari as my primary browser on MacOS, Chrome is only used for the developer mode.

Dunno if it's better than the one in Firefox, but it's the one I know =)

Re:Cohort IDs can be collected over time to create cross-sit... by knalum on Thursday April 15, 2021 @10:56AM (#26821245)
Switched to Brave on mobile. Never looked back. You can see how many mb of data saved due to blocking of trackers.
Re:Cohort IDs can be collected over time to create cross-sit... by Mudface_72 on Thursday April 15, 2021 @01:14PM (#26823345)
Try firefox lite , get the apk from uptodiwn or apkmirror, because ff lite is region locked in the playstore.
Re:Cohort IDs can be collected over time to create cross-sit... by Brian_K_White on Thursday April 15, 2021 @02:59PM (#26824771)
Dude wtf, not interested in your Watchtower or whatever.
Re:Cohort IDs can be collected over time to create cross-sit... by prepend on Thursday April 15, 2021 @11:53AM (#26822022)
I only use Chrome for Google stuff and everything else is split across Brave, Safari, Edge, and Firefox.
Re:Cohort IDs can be collected over time to create cross-sit... by sedatk on Thursday April 15, 2021 @08:10PM (#26827744)
Is FLOC going to be integrated into Chromium or is it just going to be a Chrome feature?
Re:Cohort IDs can be collected over time to create cross-sit... by sneak on Thursday April 15, 2021 @12:25PM (#26822554)
The security sandboxing of Chromium-based browsers is sadly unmatched, however.
Re:Cohort IDs can be collected over time to create cross-sit... by julianlam on Thursday April 15, 2021 @12:58PM (#26823091)
I'm a huge proponent of Firefox on desktop, but the new Firefox on mobile is just awful awful awful.

I've switched to Vivaldi and it's just much snappier and doesn't have the papercuts FF mobile is currently struggling through.

Total rewrites are cool, but they're real rough around the edges at first.

Re:Cohort IDs can be collected over time to create cross-sit... by CivBase on Thursday April 15, 2021 @01:35PM (#26823621)
> I'm a huge proponent of Firefox on desktop, but the new Firefox on mobile is just awful awful awful.

I strongly disagree. There are certainly issues, many of which are a result of the recent redesign, but I still find it a much better experience than Chrome on mobile and I think calling it "awful" is hyperbolic. Here are some examples of why I think FF > Chrome on mobile:

Firefox mobile supports extensions which I consider necessary at this point, such as uBlock Origin.

I can put the address bar at the bottom, where my fingers are.

The reader features makes many websites much easier to read - particularly on mobile.

Chrome defaults to opening things in tab groups now, which I find to be much more finicky to use than normal tabs. Bookmarks are for saving pages long-term, not tabs.

Re:Cohort IDs can be collected over time to create cross-sit... by heavyset_go on Thursday April 15, 2021 @04:27PM (#26825698)
I've been using Firefox on Android for several years, and I like the new Firefox for Android.
Re:Cohort IDs can be collected over time to create cross-sit... by vharuck on Thursday April 15, 2021 @03:13PM (#26824902)
I'm with you. I preferred the previous version of Firefox on Android. Since switching to the new version:

- I've noticed it crashes much more.

- It still doesn't support all the extensions I used to have, like uMatrix.

- All my bookmarks disappeared when it updated to the new version. I know syncing bookmarks would've let me recover, but I didn't realize it'd happen on the first place. And it seems like an easy problem to Amos even if a user didn't sync.

Re:Cohort IDs can be collected over time to create cross-sit... by kiwijamo on Thursday April 15, 2021 @06:52PM (#26827199)
I've not noticed a crash in the several months I've been using the new version. Have you tried the usual things like clearing cache/data, reinstalling, etc? It took me a while to get used to it (especially the move of the address bar to the bottom) but I'm quite happy with it now. It also supports uBO which blocks pretty much all the ads. I agree it's disappointing what they have done with extensions though. Syncing to Firefox on my laptop is quite good though and very useful for looking up history e.g if I remember finding a good website I don't have to worry about recalling whether I was using my mobile or my laptop when I found it. All my history across all devices are there so I'll easily find whatever it is I was looking for.
Re:Cohort IDs can be collected over time to create cross-sit... by Mudface_72 on Thursday April 15, 2021 @01:16PM (#26823371)
Try firefox lite on android, you can dl the apk on uptodown or apkmirror, its region locked in the playstore.
Re:Cohort IDs can be collected over time to create cross-sit... by Mudface_72 on Thursday April 15, 2021 @01:12PM (#26823306)
Try firefox lite, get it on uptodown or apkmirror. Its has a region lock an the ppay store.
Re:Cohort IDs can be collected over time to create cross-sit... by 55555 on Thursday April 15, 2021 @12:11PM (#26822318)
What's the most frictionless page language translation plugin?