HerbManic 3 hours ago
I do fear for a future were even Firefox ends up caving in. Ladybird browser might be our only hope until something legal comes along to block functionality.
lelanthran 32 minutes ago
I'm tired of all the (mostly technical) people whining that they need Chrome, and only Chrome can browse the internet. Then you ask them for a site that doesn't work and conveniently "it was some time back and I don't remember the details".
I've been using FF since before it was called Firefox. In the last 10 years I've not come across any site that doesn't work with Firefox - online shopping, social media, banking, custom line-of-business internal apps, ERP apps... you name it.
And, TBH, if I did, I'd just visit that one site with Chrome, and still use FF daily.
rwmj 3 hours ago
> https://about.google/company-info/philosophy/
> 1. Focus on the user and all else will follow.
> 6. You can make money without doing evil.
chinathrow 3 hours ago
totetsu 3 hours ago
sunaookami 2 hours ago
dotcoma 4 hours ago
grishka 3 hours ago
derideor 2 hours ago
Balinares 3 hours ago
metalman 4 minutes ago
Here is the guy who builds the browser I use https://www.stoutner.com/about/
git https://gitweb.stoutner.com/?p=PrivacyBrowserAndroid.git;a=s...
download https://www.stoutner.com/privacy-browser-android/changelog/
geysersam 3 hours ago
danslo 2 hours ago
In what way? I've never noticed a difference.
jameson 2 hours ago
orwin an hour ago
zerr an hour ago
Any other browser with uBlock Origin: Chrome is dead.
austin-cheney an hour ago
ggm 4 hours ago
nullbio 3 hours ago
topsykrates 3 hours ago
fab13n 2 hours ago
But that was before LLM-driven development, I think that now the game has changed, and maybe Google hasn't got the leverage it thinks it has.
userbinator 3 hours ago
Havoc 2 hours ago
AltruisticGapHN an hour ago
People just like to rage against Google.
https://chromewebstore.google.com/detail/ublock-origin-lite/...
It's even available on iOS, I have it running in Safari
Stevvo 2 hours ago
JamesTRexx 2 hours ago
Only need Firefox ESR for a handful of websites giving me no option when specifying a Linux/Mozilla user agent instead of the native one for those doesn't work.
RockstarSprain 2 hours ago
damnitbuilds 3 hours ago
m-schuetz 2 hours ago
apimade an hour ago
This change is good for the majority of users, but is actually bad for large enterprise customers and highly-regulated customers. It puts more control and onus of responsibility on to Google, rather than the end-user. So, we will expect to see better enforcement of controls from Google for the lowest-hanging-fruit that some aspects of MV2 exposed.
What's that, you say? MV2 changes? Well there's 3 things.
1. Remote code execution. The ability for someone to just yeet commands into your browser. A little harder to do directly.. Still very possible, just with extra steps.
2. Removing the ability for extensions to access network requests directly, which is what adblockers often relied on. It also means malicious extensions could snoop on your requests. They still can, just with extra steps.
3. Background persistence, an extension could stay alive, maintain state, run timers, keep connections open, and coordinate across tabs. So this shuts off the "background persistence" piece -- but helps with ensuring better isolation. Still possible, but now requires yeeting your data to an external provider instead of keeping the state contained locally.
Those 3 changes are incredibly powerful, and will impact many, many Enterprise security tools. Tools that now instead will result in products like "Island Browser", and "Enterprise Chrome" being rolled out to supplement the functionality that MV2 gave us.
This change goes against the US and Australian government's hardening advice, and reduces the overall efficacy of security controls we're able to implement within our web browsers natively.
CISA's own guidance on this is pretty straightforward (aptly named Securing Web Browsers and Defending Against Malvertising for Federal Agencies): https://www.cisa.gov/sites/default/files/2023-09/CISA%20CEG%...
Here's the Australian Government's control relating to it:
> Control: ISM-1485; Revision: 1; Updated: Sep-21; Applicable: NC, OS, P, S, TS; Essential 8: ML1, ML2, ML3 > Web browsers do not process web advertisements from the internet.
And if you're wondering about what incentives there are that led to this change, you can read this letter written to the Chairman of the FTC by a US Senator back in 2020. This letter is linked to from the same CISA document I shared earlier.
You should read it in full, and consider what incentives the Senator was referring to -- and how they also apply in this scenario.
https://www.wyden.senate.gov/imo/media/doc/011420%20Wyden%20...
Those Enterprise Chrome products I mentioned earlier? Chrome's change has now put some of this functionality which was previously possible with an extension, behind the Enterprise Chrome Premium SKU: https://chromeenterprise.google/products/chrome-enterprise-p...
spwa4 2 hours ago
bronlund 3 hours ago
curiousgal an hour ago
You know what else is a security concern? Ads. The amount of mental gymnastics is insane. It's honestly insulting.
jon_adler 2 hours ago
zuzululu 2 hours ago
smiling smugly from planet firefox
Ecko123 2 hours ago
Comment deletedrvz 2 hours ago
TiredOfLife 3 hours ago
itskamran 3 hours ago