News for hackers. Stuff that matters.
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by beebeepka on Thursday November 18, 2021 @12:52AM (#29262369)
Firefox is making it real easy to have new windows and tabs open about:blank.

For all the hate they get, FF is easily the best and most respectful browser around

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by skinkestek on Thursday November 18, 2021 @01:40AM (#29262673)
The dislike (not hate, at least in my case) is not against Firefox. I like Firefox a lot.

What I don't like is Mozilla using it as a dairy cow, and starving it on top of that.

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by dotancohen on Thursday November 18, 2021 @02:06AM (#29262843)

  > What I don't like is Mozilla using it as a dairy cow, and starving it on top of that.
I don't get the analogy. What exactly is Mozilla doing that you don't like?
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by neuromute on Thursday November 18, 2021 @03:00AM (#29263181)
They’re implying that Mozilla are milking Firefox for all it’s worth. Exploiting it and at the same time not treating it very well.
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by skinkestek on Thursday November 18, 2021 @11:07AM (#29267009)
Correct. I feel Mozilla is starving Firefox and using the money somewhat frivolously.

Mozilla have many interesting projects and several of them may be good, but none of them have had such impact or has such potential for the future as Firefox.

Edit: and I'm willing to pay $10 - $50 a month to someone who will create and maintain a patched version of the latest Firefox that fixes the worst problems like not being able to hide the standard tabs (in addition to any sponsored search deals they may get).

I suspect I'm not alone: for many(most?) of us our browser is one of our most important tools, the other being and IDE, an editor or some graphics tool.

Edit 2: Paid Chromium based doesn't count for me. A major point is to counter the Chrome monoculture.

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by marcosdumay on Thursday November 18, 2021 @08:45AM (#29265255)
Well, that's a really bad reason to use chrome or some other chromium based browser.

But if you are willing to fork Firefox, that's a very good reason. I just don't think any fork will be as long as the majority of users are on a chromium based browser, those are toxic to the ecosystem.

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by skinkestek on Thursday November 18, 2021 @10:38AM (#29266620)
> Well, that's a really bad reason to use chrome or some other chromium based browser.

Who said I do, I often have multiple months between every time I use a Chrome or Chrome based browser.

Edit, I use a multipronged approach:

- I use only Firefox - except once in a blue moon to verify if something is an actual Firefox bug or a general bug.

- and develop in Firefox. Bonus: Without testing in any other browsers most weeks I can count on one finger the times I have introduced cross browser defects

- I raise awareness that Mozilla is extracting money from Firefox, not funding it.

- I raise awareness about how Google is pushing to kill competition in the browser markets (besides here on HN and contacting authorities myself I have also urged a grumpy colleague today to contact relevant competition authorities)

- I rise awareness about the likely outcome of a Chrome monoculture: mostly that ad blocking will disappear, the web as a platform will stagnate and we will have to live with more nasty restrictions.

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by laurent92 on Thursday November 18, 2021 @12:57AM (#29262398)
Firefox opens new tabs saying “We care about your privacy, look, LOOK!” every time you start, sometimes two of those tabs (release notes + privacy). I wish I could just deactivate those built-in ads.
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by Semaphor on Thursday November 18, 2021 @01:02AM (#29262424)
Recently, they had this annoying modal ad (with no "close when clicking outside" feature) telling me that I can make my browser colorful. I care about web-health and containers is far too much of a must-have feature to make me switch, but I’m finally starting to get annoyed.

Without containers, I’d probably bite the bullet and start using some chrome fork that doesn’t show me useless ads.

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by ldng on Thursday November 18, 2021 @03:35AM (#29263372)
Recently they also changed the urlbar to do a search when you type anything... even localhost. INFURIATING. To stay polite. Messed with about:config but did not find a way to disable that crap.

So Chrome and FF are in the same boat: "UX" "designer" taking non-sensical decisions for the whimsical greater good.

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by pitay on Thursday November 18, 2021 @12:17PM (#29267876)
I do not have this issue, but I have a very customized about settings.

Here is the relevant about:config settings I have these changed for the URL bar:

  browser.urlbar.suggest.searches false
  browser.urlbar.searchSuggestionsChoice false 
  browser.urlbar.showSearchSuggestionsFirst false
Also for your urlbar you want to change it so it always shows the scheme and every part of the URL.

  browser.urlbar.trimURLs false
Stop Firefox trying to help with incomplete urls and loading the wrong site:

  browser.fixup.alternate.enabled false
Setting the above about:config entries should stop URLS you type being sent to a search engine and also stop some other surprises in the URL bar.
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by Semaphor on Thursday November 18, 2021 @03:50AM (#29263467)
I do not have this change.
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by berkes on Thursday November 18, 2021 @04:45AM (#29263770)
Me neither. And this is the first time I've heard about it; such changes often raise a lot more havoc on the social media outlets.

I presume grandparent has either hit a bug, has some unusual/untested about:config combination, or, most likely, an addon that broken.

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by berkes on Thursday November 18, 2021 @04:42AM (#29263751)
The Settings have several checkboxes to switch of (or on):

* Tips and News from Mozilla and Firefox * Recommendations while surfing * Recommend addons while surfing

I'm not entirely sure what you saw that made you angry, but I'm pretty sure you can switch them off rather than abandon the entire browser.

That goes for a lot of Firefox hate, I find: quite often people are ranting online about some new or removed feature, which they can dis- or enable easily in the settings. Or -a tad harder- in about:config. Or even a tad harder, with an addon.

That makes me think those ranters don't really want their problem solved, but just want to vent some anger about X changing something that they are emotionally not ready to see changed.

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by Semaphor on Thursday November 18, 2021 @06:05AM (#29264158)
> Tips and News from Mozilla and Firefox

Was switched off.

All the others (according to the linked information) are irrelevant for intrusive pop-up ads. By all means, please explain to me which of those settings do something different from what they are supposed to do, or tell me about an about:config settings that tells Firefox to never show me pop-up ads.

What made me angry: https://i.imgur.com/s9hC23U.png which blocks the interaction with any part of Firefox until I click "Not Now"

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by eyeundersand on Thursday November 18, 2021 @11:27AM (#29267245)
Is this not a one-time thing that's shown after every update? Or is it recurring?
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by pitay on Thursday November 18, 2021 @12:21PM (#29267927)
It was one time for me. Although I do think what they advertised there and the way they advertised it was nonsensical and disrespectful to the user.
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by berkes on Thursday November 18, 2021 @11:25AM (#29267221)
Sounds like a bug then. Is there a bug-report for this?
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by egberts1 on Thursday November 18, 2021 @05:14AM (#29263914)
Firefox for iOS has NO about:config feature and a paltry amount of settings under Settings submenu.
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by zinekeller on Thursday November 18, 2021 @08:20AM (#29265054)
Weirdest criticism I've heard. Either someone know it's all Safari in a skin (due to Apple's restriction), or someone didn't heard of this limitation.
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by tzs on Thursday November 18, 2021 @10:44AM (#29266703)
How much does all iOS browsers being built on top of Safari actually limit what one can do?

Obviously the actual page rendering and JavaScript executing would be Safari. But 99% of the time when I hear people advocating for browser X over browser Y it is not because X has better rendering or a better JS engine. It is because of higher level things, like containers (Firefox over Chrome) or better profile handling (Chrome over Firefox) or better spell checking (everything over Firefox).

Does having to build on top of Safari on iOS also constrain those higher level things?

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by zinekeller on Thursday November 18, 2021 @11:06AM (#29266995)
> Does having to build on top of Safari on iOS also constrain those higher level things?

Yes!

> containers (Firefox over Chrome)

No, they can't install add-ons (https://support.mozilla.org/en-US/kb/add-ons-firefox-ios). Even if they could built this into the browser, they can't (see how the profiles are handled).

> better profile handling (Chrome over Firefox)

No, Chrome does not support this feature on iOS (https://support.google.com/chrome/answer/2364824?hl=en&co=GE...). iOS' WebKit limits this to only one permanent profile and one ephemeral profile. You can technically have multiple profiles in the iPad - that is, if you're a school, and that's really more of a OS-wide user account thing. (G did a hack over this by rewriting that profile when switching profiles - but it's not truly a multitask thing, and violates Apple Developer Guidelines).

> better spell checking (everything over Firefox)

No, and for more sensible reasons. Users do expect consistent spell checking because they use the keyboard to do that. Regardless, if you want to implement spell checking in-browser, that's impossible. If you want to do it outside of Safari, go ahead - it's just not integrated to those Apple things (more of a dedicated Grammarly interface rather than desktop spell checking).

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by ComputerGuru on Thursday November 18, 2021 @01:34AM (#29262628)
Yes, I got that one too and was extremely perplexed that it didn’t close when I clicked outside it and I had to hunt the tiny x instead.
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by nyanpasu64 on Thursday November 18, 2021 @02:11AM (#29262874)
I found the colored browser cool, but the infuriating part is that Firefox is deliberately only offering features for a limited time. And if I didn't want to pick a color, not being able to click outside to close would be annoying.
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by Semaphor on Thursday November 18, 2021 @02:28AM (#29262980)
Unlike many here, I don’t mind FF giving their browser more mass-appeal (here in Germany it’s still a major browser), so adding that color feature is fine. I just don’t need intrusive advertisement about it. It’s even worse for me, because I use FF on multiple machines and with several profiles, so I saw the ad over 10 times in total.
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by beebeepka on Thursday November 18, 2021 @01:30AM (#29262586)
Baffling. You replied to my statement that you can easily change those with a rebuttal that you don't like the defaults
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by oefrha on Thursday November 18, 2021 @02:40AM (#29263048)
Can I easily disable the post-update splash page telling me how great the latest Firefox is (or something like that)? I use developer edition to test Firefox compatibility of my webapps, I seem to get that a lot, and I really don’t care about that marketing.
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by laurent92 on Thursday November 18, 2021 @02:26AM (#29262966)
On the contrary, there is no option that says “Stop bugging the user with ads for Mozilla.” They keep coming back with another form of showing up (button in the top bar, label on the new tab experience, new tab experience itself, Mozilla login…) and you have to disable it again. It’s like spam when they use several Mailchimp accounts, reupload your email and tell you “but it’s easy to unsubscribe!”
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by jiscariot on Thursday November 18, 2021 @03:08AM (#29263232)
Does Firefox actually get hate? I don't think I've seen people actually make digs at FF.

For me it would be Edge that gets the most laughs but I find is a better performing browser, at least in terms of UI than FF or Chrome. Side-bar tasks, grouping, integrated screen-shot, etc.

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by willvarfar on Thursday November 18, 2021 @03:15AM (#29263276)
Mozilla management gets hate. They have had a string of controversies, policy upheavals that have bad optics and layoffs etc. They are often on HN for all the bad reasons.
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by nothatscool on Thursday November 18, 2021 @04:15AM (#29263593)
Maybe not Firefox itself but Mozilla’s “We need more than deplatforming” blog post burnt a lot of good will towards them. I think that kind of censorial ethos is at odds with the majority of people who would specifically choose firefox over chrome.
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by xvector on Thursday November 18, 2021 @01:14AM (#29262486)
Firefox is significantly less secure than Chrome, though it may be more private.
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by aquir on Thursday November 18, 2021 @02:37AM (#29263024)
We need facts tho prove this
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by xvector on Thursday November 18, 2021 @02:46AM (#29263091)
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by aquir on Thursday November 18, 2021 @03:43AM (#29263425)
Interesting article but the issue is that it's mashing together the Chromium Browser and Google Chrome. I'm sure that Chromium itself is safe but the prvacy concers arise from the "Google bits" rather that the browser engine itself.
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by xvector on Thursday November 18, 2021 @05:06AM (#29263877)
Right, which is why the article mentions that it is focusing on security and not privacy.

With a bit of effort, you can get a similar level of privacy to Firefox in Chrom[e/ium].

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by qPM9l3XJrF on Saturday November 20, 2021 @04:06AM (#29286609)
>With a bit of effort, you can get a similar level of privacy to Firefox in Chrom[e/ium].

What specific effort?

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by bugmen0t on Thursday November 18, 2021 @04:36AM (#29263716)
Some of the statements in this article are just not true. The post seems to get frequent edits and always looks new/recent when I visit it, though I’ve seen and rebutted it several times over the last years. Yet, apparently nobody made the effort to verify the claims with more recent analyses.

A real shame.

Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by xvector on Thursday November 18, 2021 @05:06AM (#29263881)
Could you point out some untrue statements? The claims seem to be well-sourced.
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by aquir on Thursday November 18, 2021 @02:54AM (#29263144)
Thank you
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by beebeepka on Thursday November 18, 2021 @01:30AM (#29262589)
Please elaborate
Re:Dangerous bug in Chrome’s ‘New Tab’ page bypassed securit... by xvector on Thursday November 18, 2021 @02:46AM (#29263092)