Remix.run Logo
GeekyBear 7 hours ago

Firefox is also the only browser that vets uBlock's code on every update to make sure the developer hasn't inserted spyware or malware into the extension.

They don't do it for every extension, but they do so for a wide selection of popular options.

> Recommended extensions differ from other extensions that are regularly reviewed by Firefox staff in that they are curated extensions that meet the highest standards of security, functionality and user experience. After receiving Recommended status, safety standards are maintained through automated checks, monitoring, and periodic technical reviews

https://support.mozilla.org/en-US/kb/recommended-extensions-...

gurjeet 5 hours ago | parent | next [-]

Complete, authoritative list of Firefox extensions officially recommended by Mozilla.

https://addons.mozilla.org/en-US/firefox/search/?promoted=re...

Some quite informative discussion on Firefox subreddit when I discovered and posted the above list there a few months ago.

https://www.reddit.com/r/firefox/comments/1pyvx2v/complete_a...

The Recommended Extensions program description: https://support.mozilla.org/en-US/kb/recommended-extensions-...

benatkin 4 hours ago | parent [-]

I seem to remember TamperMonkey being on there but not ViolentMonkey, which I didn't agree with. However, I see neither of them on there. Both are available but not recommended. I wonder what is going on with that.

culi 2 hours ago | parent [-]

Probably just resources. Mozilla has to vet each update to give them the "recommended" badge and so they probably focus on the most popular extensions

benatkin an hour ago | parent [-]

They should have vetted ViolentMonkey instead of TamperMonkey the last time around.

big_toast 6 hours ago | parent | prev | next [-]

That's pretty cool. Thanks for pointing that out. I don't see where it says 'on every update' unless you're referring to the automated checks?

I've always wished extensions had more granular permissions though (a la phones, but more so). I think automated ai security checks sound promising soon.

elashri 6 hours ago | parent | next [-]

Automated checks are done for every extension on every update. But their recommend extensions they feature on the Extension store, they do other extensive checks for each update.

socalgal2 4 hours ago | parent | prev [-]

what permissions do you suggest?

swed420 6 hours ago | parent | prev | next [-]

> Firefox is also the only browser that vets uBlock's code on every update to make sure the developer hasn't inserted spyware or malware into the extension.

They could save themselves the trouble if Firefox simply baked in its own ad-blocking, but since Google basically owns them, we all know that will never happen.

Ladybird browser is going to be awesome.

dralley 5 hours ago | parent | next [-]

Websites already can barely be assed to care about supporting Firefox users, doing adblocking by default is a great way to get websites to start putting up banners that say "our website does not work with your browser, please switch to Chrome" en-masse.

And Mozilla did develop anti-fingerprinting tech, but they can't enable it by default because it breaks lots of websites and when a website doesn't work they're not going to appreciate Mozilla for protecting them, they're going to be pissed that it doesn't work.

Grom_PE 27 minutes ago | parent | next [-]

Websites blocking Firefox because of ad blocking has happened before:

https://web.archive.org/web/20070817224229/http://whyfirefox...

swed420 5 hours ago | parent | prev [-]

The level of mental gymnastics in this thread denying the extent to which companies like Google (and their puppets like Mozilla) control the internet is too damn high.

Fortunately if projects like Ladybird gain enough momentum, websites might be forced to cater to it. Time will tell.

inigyou 4 hours ago | parent | next [-]

You know you can make a browser based on Firefox's core and don't need to make a new one from scratch that'll never get past Cloudflare?

swed420 4 hours ago | parent [-]

> You know you can make a browser based on Firefox's core

If you want to inherit all of Firefox's flaws, I suppose.

> and don't need to make a new one from scratch that'll never get past Cloudflare?

Considering Cloudflare is a sponsor of Ladybird, something tells me they're going to grant an exception for it.

chironjit an hour ago | parent | next [-]

Sadly Cloudflare's browser detector is the main barrier to using Servo for most websites, so they're not the angel they seem

Larrikin 2 hours ago | parent | prev [-]

What flaws exactly?

People on here love to moan about Firefox because Mozilla did one thing at some point in the existence of the company they didn't like. But then just cede the Internet to Google and chromium clones because at some point when they were a crappy junior JS dev, Chrome had some better tooling over Firebug so they just got used to testing in one browser. Maybe they also like to remember how Firefox, a decade ago, couldn't handle 1000 tab sessions.

I hope Firefox keeps up the fight but HN loves to crap all over them for not being perfect.

tombert an hour ago | parent [-]

Can’t speak for all users, but at least as of about six months ago, there appears to be a bug in Firefox in NixOS where the shader cache doesn’t appear to be able to write properly, and as such video acceleration doesn’t work. It became most evident when I was trying to watch 360-degree videos in Immich.

Entirely possible that this is an issue specific to NixOS or my machine, but because of that issue I switched over to Brave.

I would like to go back to Firefox at some point. Maybe I’ll see if I can make a patch to fix video acceleration on NixOS.

fouc 21 minutes ago | parent [-]

the obvious thing to do is keep using firefox as your daily driver, and load up the other browser as needed for the video etc.

I'm being tongue-in-cheek here because it seems most people just give up on safari/firefox if one thing doesn't work and go to some chromium-based browser as their default driver. That's sad.

Plont 4 hours ago | parent | prev [-]

They literally didn't deny that. They made a separate point you appear not to have actually read.

Regardless, I don't want baked-in Firefox adblocking in part because I don't trust Mozilla with that task either. They'd absolutely end up allowing their own "acceptable" telemetry and ads. Even if they didn't, it would be unlikely to ever be as effective as Ublock Origin. Much like how Chromium browsers' built-in adblocking is barely anything in comparison, even on Manifest V2.

And yet, for now, Firefox and Mozilla is by far the lesser evil. I like a few of the Chromium browsers well enough, but they are ultimately at the mercy of Google.

I hope Ladybird does well, too.

swed420 4 hours ago | parent [-]

Their separate point was ignored because it was an irrelevant tangent.

> Regardless, I don't want baked-in Firefox adblocking in part because I don't trust Mozilla with that task either.

This is in a thread about how we should be happy that FF is vetting code for us. Do we trust them or don't we?

> And yet, for now, Firefox and Mozilla is by far the lesser evil.

I'm instinctively tempted to agree, but the difference is so negligible at this point that the only sign I would is the fact I'm still using FF due to momentum (as well as Ladybird not being ready from prime time yet).

FF/Mozilla has proven itself to be controlled opposition, so I'm not very interested in games of "lesser-of-two-evils" abuser logic that has infected politics and many other spheres in a race to the bottom.

aaplok 3 hours ago | parent [-]

> Do we trust them or don't we?

GP trusts them for reviewing external extension code, and ensure that it does not contain malware, but not for not inserting exception to their own telemetry if they wrote the code themselves.

Or, more likely, they feel that having two independent actors collaborating on the extension (one by writing and the other by reviewing) yields a more trustworthy outcome than either actor on their own.

swed420 3 hours ago | parent [-]

That was a rhetorical question.

Mozilla have given us plenty of reasons to not trust them, which makes it hilarious that anybody would think it's noteworthy they're reviewing the code of Raymond Hill of all people.

WorldMaker 3 hours ago | parent | prev | next [-]

Admiral and several other of the more obnoxious ad networks already claim that Firefox is an ad blocker simply because of its out-of-the-box blocking support for third-party cookies and those ad networks nag you to use another browser. If Firefox added actual ad blocking out of the box I can't imagine the havoc that would cause and how many more websites would claim that they don't work at all in Firefox.

cuu508 30 minutes ago | parent | prev | next [-]

In one of the monthly update videos Andreas mentioned that although they are working on a basic built-in adblocker for Ladybird, long-term they want extension support and the adblocking functionality to be in an extension.

epihelix 4 hours ago | parent | prev | next [-]

That's like suggesting that someone using LLMs to assist coding, could save themselves the trouble by writing the code by hand.

Yes, Firefox could do everything, but then it'd turn back into Mozilla. The whole point of the extensions framework is to allow modular extensibility. And it's much easier to vet for malware than to code afresh and maintain.

What stuns me is that most people still use browsers that cannot block ads, seem genuinely annoyed by ads, but don't want to even try switching to a browser that will easily block those ads. It's amazing how much crap people are willing to wade through when the alternative is trying something new.

swed420 4 hours ago | parent | next [-]

> That's like suggesting that someone using LLMs to assist coding, could save themselves the trouble by writing the code by hand.

No it's not.

> Yes, Firefox could do everything, but then it'd turn back into Mozilla. The whole point of the extensions framework is to allow modular extensibility. And it's much easier to vet for malware than to code afresh and maintain.

No, quite the opposite. FF has a history of adopting extensions as baked-in functionality if they prove useful/popular enough. There are tons of examples of this from the past for various features, which is great.

But that fact makes it even more absurd that they refuse to do the same for what is likely their most popular extension of all time: uBlock Origin

oblio 2 hours ago | parent | prev [-]

> Yes, Firefox could do everything, but then it'd turn back into Mozilla.

It's been 20+ years, nobody cares about that anymore.

firefax 3 hours ago | parent | prev | next [-]

>since Google basically owns them

Google has been trying to kill them since they moved the Chrome team into the same building as the now defunct SF office.

(Apparently they offered people a lot of money? There are some words I could use to describe people who do things they think are unethical for cash I'll leave unsaid.)

stubish 4 hours ago | parent | prev | next [-]

If Firefox baked in ad blocking, they would have to then deal with the financial incentive to make it worse. Sponsored ads, 'good' ads, government announcements, election propaganda... there is a slippery slope they are better off not getting on. A trusted 3rd party from the wider community seems a better option in many ways. The alternative is starting a web browser with a manifesto welded on that essentially states 'death to all advertising', and until that can be crowd funded I can't see that happening in today's world.

What I am surprised about is that none of the browsers or forks have created a specialist plugin API for adblocking and maybe other filtering. Provide what is needed and only that (keeping the surface tiny), and then evolve the general purpose API in the way they need. I don't think we need V2 of the API any more, except for keeping this one absolutely critical plugin working, do we?

3371 an hour ago | parent | prev | next [-]

People believe ublock because it's reputable and not affiliated with browsers IMO.

deweywsu 6 hours ago | parent | prev | next [-]

See, this is the kind of thing that makes Firefox cool. They have not only just as good of developer console tools as Chrome, they have forward thinking, truly user-oriented policies. They have had trouble in the recent past at securing funding, but something tells me their user philosophy might save them when all the others turn completely to corporate greed as their main operating mechanism (if they already haven't).

swed420 6 hours ago | parent [-]

Your reply makes no sense. To the original point, if they had user-oriented policies, they'd have ad-blocking baked in by now. But they don't, and likely never will.

bigbadfeline 4 hours ago | parent | next [-]

> Your reply makes no sense. To the original point, if they had user-oriented policies, they'd have ad-blocking baked in by now.

It's not black and white, and your inability to see the larger context is disturbing.

You could, by the same logic, criticize Mozilla for not serving you coffee which is certainly a "user-oriented policy" "baked-in" or rather "brewed-in". But we must be realistic about how far UOPs can be stretched, Mozilla is better than the rest, which includes large corps with far more money than them. If you can do better than Mozilla, I'm all ears.

Next, an ad-blocker needs continuous maintenance - someone started a good one long time ago and apparently loves to improve it and maintain the various lists it uses - why should Mozilla strain to compete with one of their best contributors? - that would be both rude and dumb, and they'd be wasting resources too. There's absolutely no upside to your proposition but you keep insisting.

swed420 4 hours ago | parent [-]

> Next, an ad-blocker needs continuous maintenance - someone started a good one long time ago and apparently loves to improve it and maintain the various lists it uses - why should Mozilla strain to compete with one of their best contributors? - that would be both rude and dumb, and they'd be wasting resources too. There's absolutely no upside to your proposition but you keep insisting.

One would hope that's one of the more useful things an LLM could assist with if not now, very soon. In the meantime, there's no reason they couldn't have uBlock kept as an extension but bundled by default like they've done with other functionality over the years. Wait, never mind. There's one rea$on why they wouldn't, and it's already been $tated.

ruckcbek 6 hours ago | parent | prev [-]

You're absolutely right.

cyberrock 3 hours ago | parent | prev [-]

After watching them butcher their own side tabs implementation, I don't know if we really want that, unless they're actually hiring the uBO team directly.

Beijinger an hour ago | parent | prev | next [-]

Also for youtube download plug-ins. yt-dpl does not work for youtube anymore.

culi an hour ago | parent [-]

Still works for me. The occasional 403 has always been an issue

Beijinger an hour ago | parent | prev | next [-]

I recommend two more:

1. pass paywalls clean.

2. Social Fixer

armadyl 7 minutes ago | parent | next [-]

Rather than introducing additional attack surface and privacy risks with yet another extension you can just use archive.is/archive.ph instead of Bypass Paywalls Clean.

Or, just pay for journalism since it’s not free to do.

culi an hour ago | parent | prev [-]

You mean Bypass Paywalls Clean? It's illegal and it's not even on the Firefox extension store. You have to download it from some Russian Github alternative and manually install it.

I will say however, it works remarkably well. I haven't seen a paywall in years!

Beijinger an hour ago | parent [-]

Why should it be illegal?

_ZeD_ 6 minutes ago | parent [-]

It's not. Op is wrong

einpoklum 5 hours ago | parent | prev [-]

> Firefox is also the only browser that vets uBlock's code on every update to make sure the developer hasn't inserted spyware or malware into the extension.

Why, are they worried it might interfere with the spyware they bake into Firefox themselves?

https://www.howtogeek.com/557929/how-to-see-and-disable-the-...

culi an hour ago | parent [-]

I don't like telemetry being defaulted to opt-in but relax. It's anonymized and it's far and away the least intrusive of the major browsers