News for hackers. Stuff that matters.

Tell HN: Twitter/X is inaccessible to all Firefox users by default

Twitter has started changing over its URLs to X.com as the default URL now.

However, this has left Firefox unable to access the site by default.

You will instead get a message about "Something went wrong, but don’t fret — let’s give it another shot."

This seems to be due to the manual allowlists FF has as part of the "Enhanced Tracking Protection" feature. It doesn't know that X.com should have access to the Twitter image distribution URLs and other non X.com URLs, so the page load fails. X access can be restored by turning off Enhanced Tracking Protection.

The Twitter engineering lead is asking for anyone who has a direct line to FF staff: https://x.com/cambridgemike/status/1790615764736913557

( 9 comments | on HN )
Re:Tell HN: Twitter/X is inaccessible to all Firefox users b... by raverbashing on Wednesday May 15, 2024 @04:23AM (#40364422)
I'm using it on FF right now. I don't see the issue with any url (X or twitter)
Re:Tell HN: Twitter/X is inaccessible to all Firefox users b... by pestatije on Wednesday May 15, 2024 @04:44AM (#40364558)
if it aint broke...
Re:Tell HN: Twitter/X is inaccessible to all Firefox users b... by postingawayonhn on Wednesday May 15, 2024 @05:59AM (#40364945)
I'm getting the same error in Edge.
Re:Tell HN: Twitter/X is inaccessible to all Firefox users b... by yareal on Wednesday May 15, 2024 @10:18AM (#40367287)
This seems to be working as designed, a website is loading cross origin material and not setting up the proper systems in advance. Twitter shouldn't get a pass on doing something unusual and suspicious just because.

Serve the images from the same domain.

I know Twitter probably fired the people who knew this entirely predictable outcome was likely, but like, they should have seen this coming.

Re:Tell HN: Twitter/X is inaccessible to all Firefox users b... by litzaghitzalau on Wednesday May 15, 2024 @05:41PM (#40372737)
You're all just a bunch of pathetic haters. If you look carefully, you'll see that abs.twimg is responding with "access-control-allow-origin: *".

The reason you see CORS errors in the Network tab in Firefox when Enhanced Tracking is enabled, is because Firefox sux and can't render a correct error message. They simply have manual hardcoded lists for blacklisting, just because they have it (and probably they implement it by faking a CORS failure).

Re:Tell HN: Twitter/X is inaccessible to all Firefox users b... by yareal on Wednesday May 15, 2024 @07:37PM (#40373635)
Do you work on Twitter? I'm confused why you would react so strongly and angrily out the gate.
Re:Tell HN: Twitter/X is inaccessible to all Firefox users b... by gamer191 on Thursday May 16, 2024 @02:38AM (#40375793)
It doesn't say anything about CORS in the networking tab: https://i.imgur.com/yeH6bGi.png

It correctly identifies that Twitter is trying to load a tracking site, which Firefox blocks by default (with an allowlist). Instead of hating on Firefox, hate on Chrome and other browser vendors that don't go to the effort of maintaining a blocklist to protect their customers privacy (or implementing support for an existing blocklist, in the case of Brave)

Re:Tell HN: Twitter/X is inaccessible to all Firefox users b... by solardev on Wednesday May 15, 2024 @12:24PM (#40369034)
> The Twitter engineering lead is asking for anyone who has a direct line to FF staff

lol

"Hey browser vendor, our owner woke up one day and decided to change our name for the lulz and then fired most of the company... now we don't know what to do. Halp?"

Re:Tell HN: Twitter/X is inaccessible to all Firefox users b... by slimebot80 on Thursday May 16, 2024 @12:18AM (#40375156)
This is a test of your browsers protections, and FF is shining.