Most active commenters
  • fnrslvr(3)

←back to thread

1318 points xvector | 13 comments | | HN request time: 0.278s | source | bottom
1. fnrslvr ◴[] No.19824683[source]
Mozilla doesn't seem to have communicated the issue well. I could imagine a lot of unsavvy users have tried some wild things in an attempt to fix the problem, and maybe made a mess in the process. Doesn't Mozilla have a mechanism for blasting out a message to all Firefox browsers? Also I have a Firefox account, why haven't I been inboxed about this?

Otherwise I'm not bothered. I won't be switching as long as this gets resolved within the next few days.

replies(5): >>19824714 #>>19824763 #>>19824776 #>>19824785 #>>19824978 #
2. witten ◴[] No.19824714[source]
Even if there's no way to blast all Firefox users, there are blue links to standard Mozilla-hosted "help" web pages within the Firefox add-ons config, links that a non-insignificant number of confused users will probably click. Those web pages could easily be updated with info about the cert expiry snafu.
3. saulrh ◴[] No.19824763[source]
> Doesn't Mozilla have a mechanism for blasting out a message to all Firefox browsers?

The cynical side of me says that it must not have this feature because if it did I'd have seen someone complaining about the browser "phoning home" or "forcing Mozilla's opinions into my eyeballs".

replies(3): >>19824802 #>>19825058 #>>19825451 #
4. mirimir ◴[] No.19824776[source]
https://twitter.com/mozamo

https://discourse.mozilla.org/t/certificate-issue-causing-ad...

replies(2): >>19824820 #>>19825071 #
5. nydel ◴[] No.19824785[source]
the only extension that failed in a waterfox is tampermonkey which stopped working but did not get removed the way it did in a firefox.

as for a system to push messages to firefox users, is there anything like this in place? a standard? if so could it notify waterfox or icecat etc users at the same time as firefox users?

if there is no specification for this, is there a similar floss project that could be forked and molded into that of which we’re in need?

6. Karunamon ◴[] No.19824802[source]
...unlike the mothership breaking all addons, and the browser being designed intentionally in a way that prevents me from working around the breakage?

This isn't just a petty snipe borne out of annoyance. Ads being the malware vector that they are, and the degree of tracking and data mining out there, all of those countermeasures being turned off overnight is an exposure that should be treated with the same degree of seriousness as PII breach at a company you have an account with.

God forbid you use FoxyProxy or Tor Browser or something else that masks your connection source - this could have legitimate, real-life consequences if you don't notice the change.

replies(1): >>19824897 #
7. pinjiz ◴[] No.19824820[source]
> 429 Too Many Requests

Mozilla's discourse forum is now offline :)

8. saulrh ◴[] No.19824897{3}[source]
On the one hand, I understand the point you're trying to make.

On the other hand, I'm going to be honest, I have trouble reading your post without thinking things like "If you are literally trusting your life to FoxyProxy, you might want to rethink your entire internet safety strategy." Another favorite was "Defense in depth."

I've had dozens of different experiences where my extensions silently and unexpectedly malfunctioned. Configurations getting erased, new extension releases with breakage or different behaviors, maximum compatible versions in the manifest, new permissions, botched keystrokes in the extensions page, profile corruption, incompatibilities between extensions, internal bugs that cause them to crash-loop without doing anything, the works. Like, I run a ton of addons, some of which are a bit esoteric and a couple that I compile from head every few days, but even taking into account my outlier-sized surface area it's a bit silly.

I'm not going to claim that this isn't a problem. That said, blaming Mozilla for a life-threatening failure of FoxyProxy, of all things, is like blaming Cessna because a journalist flew one of their planes into a combat zone. There just wasn't any way it was going to end well.

replies(1): >>19824937 #
9. Karunamon ◴[] No.19824937{4}[source]
If the nature of this problem didn't also break turnkey distributions like Tor Browser (this kills Noscript, which means your identity can be leaked), I'd agree with you.

There's only so much defending you can do against a failure like this (running Tor Browser is already pretty uncommon) and the blame for it has to be laid squarely at the feet of Mozilla for the way they chose to centralize their plugin architecture.

This is one of those low likelihood/high impact events that tend to catch everyone by surprise.. if you spend all your time as a user thinking about these failure modes (you don't.. nobody does), you'd be unable to get much else done. I'd wager the fact that the browser would suddenly gimp itself is not something the average user (even the average Tor Browser user) thinks about or plans for.

10. ngokevin ◴[] No.19824978[source]
I imagine it's a weekend so no one's on hand.
11. fnrslvr ◴[] No.19825058[source]
Yeah, I guess I could see people coming in with that take. Personally I'll gladly accept a tether to the mothership if they offer the choice.

That said, I regularly get thinkpieces from Mozilla about the open internet, privacy, requests for donation (which I often oblige), etc., in my inbox. They also drop notifications under the address bar and in a "Message from Firefox" bar at the bottom of the new tab page, which I got the impression they had some live control over.

But maybe not, and/or maybe there's a long runway on preparing correspondence by any of these channels for some reason. If anything, I hope that when they do get around to getting some wide-reaching messaging out there, they indicate that they plan on doing the work to shorten the runway on emergency messaging in future.

12. fnrslvr ◴[] No.19825071[source]
lol, both pivotal sources that I'll swiftly consult when something in my browser goes haywire.

Seriously though, when I checked the Mozilla and Firefox twitters (and I don't use twitter, so even going that far was a stretch for me) just before I wrote the parent post, they hadn't gotten around to tweeting a notice about this there, either. The Mozilla Add-ons twitter account is not the highest-level place that should be talking about this situation.

13. MikusR ◴[] No.19825451[source]
They have. How do you think they pushed that Mr. Robot add extension?