bugmen0t

There are various ways to to do that with Firefox. You can use different profiles (completely new settings, add-ons, etc. everything back to default) or multi account containers (gives you different sessions per tab-group)

As soon as apple allows to ship an actual browser engine on the ap store. Until then Firefox for iOS - like every other browser on iOS - has to build on top of platform WebKit/WebView APIs

It's likely breaking lots of websites that do single sign-on and similar federated/multi-domain things

You can set Firefox to behave that way, though. Look for First Party Isolation.

It breaks federation, i.e., Single SignOn.

But there's a thing for Firefox which does it for all sites. Called First Party Isolation.

Can't stress this enough. Using outdates browsers is a liability. You're provoking harm to your network, your computer, your personal data.

why not cap'n'proto?

Bitfinex likes this comment!

ESR is 52. There is absolutely no good reason to use anything but ESR or the properly maintained version. It will only get you into trouble.

Secure against WHAT? I don't think you can get into lots of trouble using a recent and updated version of Firefox, Chrome, Edge. Just keep updating. I don't use Mac/iOS, can't say anything about Safari.

If you're concerned about privacy however, then that's a completely different story (that I'm happy to discuss, but probably in another thread).

Bet you didn't hear about Symbols either, then

No. It's an excellent conference about cryptography for industry practitioners (i.e., the real, non-academic world).

Funny how the first item in an exploit chain is always WebKit for.. those devices.

Someone actually that it was fun and valuable. Shocking, I know.

The criticism that is taken serious the least is the uninformed.

1) this was not an ad 2) Cliqz is not an advertising stunt. If there's ever a way to dismantle search engines monopolies it has to have support from a browser.

Click the cog icon, top-right for DevTools options. Available themes are Dark, Light, Firebug.

Yep, happens to me too.

I can't say that I drink much, maybe once or twice a week, but sometimes I have work to do on the evenings and can definitely feel the difference on focus and motivation for what I'm doing if I've had a couple of glasses of brandy. Also I feel like I get pretty good ideas on that state (which I wouldn't classify as drunk) - Maybe relaxed.

I wouldn't call myself very experienced, but software is really brittle and everything is built on top of something else, so an update triggers an update triggers an update..

What you call workspace is likely called profiles. Try running Firefox --new-instance -p

They optimize for Chrome, since this is where their users mostly are and where they want them to be. No tinfoil hat required.

This is your regular reminder that all your business relies on a service that may have outages.

Feel free to turn your individual crank towards further criticism of data silos, walled gardens, single points of failures and lock-in.

CORS is only for http requests.

The same origin policy for DOM access allows setting the location.href attribute (getting any attribute is still disallowed). Setting location.href also works with frames in both ways, e.g. frame.location.href as well as parent.locaton.href and top.location.href

What's Godot editor?

The browser exploits that sell well and deliver a good show are rated by impact. Thus, folks go for windows.

It's unlikely to be abused by am attacker, if it requires starting Firefox with a certain environment variable. Chrome has the same thing with a command line switch.

Useful for some internal unit/integration tests for release and test builds, but really dangerous when pointed to the web.

It is.

I know the American Dream story of somone small being big corporations is appealing, but s/Solopreneur/Team/.

I agree with Hanno here. There are great tools to make the CAs behave or at least make their mistakes being easily spotted: Name Constraints, DNS CAA records, Certificate Transparency and, if you must, HPKP and much more.

Funny that almost everyone in this threat seems to "get" Differential Privacy and thinks of it as a good tool. But when it was discussed for Mozilla Firefox everybody was appalled and enraged. (Thread at https://news.ycombinator.com/item?id=15071492)

That doesn't make it any less confusing in 2017

If you download a Mozilla build of Firefox into somewhere user-writable, like ~/opt/, it will update itself.