Domain: mozdev.org
Stories and comments across the archive that link to mozdev.org.
Comments · 2,936
-
Re:WebExtensions in Firefox
The only extensions that didn't make the jump were either abandoned, or those whose authors preferred to loudly complain and join sone "anti-WebExtensions resistance" instead of trying to work out a solution.
This is a blatant lie.
There are plenty of extensions that are still waiting on updates to the WebExtensions framework so that they can be ported over. There are dozens or hundreds of bugs in bugzilla with requests for this. Just a couple that come to mind are around session management (there are no decent session managers for Nu-Firefox, and Michael Kraft's excellent Session Manager which was maintained and worked perfectly for years was left in the ditch) and tab management (Tab Mix Plus is only "dead" because Mozilla killed it).
This is only two among many others. Instead of waiting a year or so for WebExtensions to catch up, Mozilla in their rush to make Firefox become Chrome as fast as possible, threw the baby out with the bathwater without regret. It's what happens when people who don't actually care about a project or users take control.
Stop shilling for them.
-
List of extensions I use:"Broken extensions will no doubt anger many of Firefox's few remaining users."
Broken extensions will be EXTREMELY destructive to Firefox, in my opinion. Broken extensions will be as though Mozilla Foundation spent $100 million on advertising to kill Firefox. Extensions are the main reason I use Firefox and Pale Moon (Pale Moon had a 64-bit version before Firefox).
I installed Google's Chrome browser a long time ago. I discovered Chrome had installed 3 system services. So Chrome and Google had more control over my computer than I normally allow myself. Now, no more Chrome on any of my computers.
Why do software company managers become self-destructive? Firefox managers are EXTREMELY self-destructive, in my opinion. Google is rapidly traveling from "Do no evil" to "Do evil if it make money" if that initially makes money, in my opinion.
My Firefox and Pale Moon extensions
The first is a Pale Moon ad-blocker. Some Firefox extensions don't work in Pale Moon:- Adblock Latitude For Pale Moon browser only. Blocks display of ads. "Adblock Latitude is a direct fork of Adblock Plus made specifically for the Pale Moon browser."
- BetterPrivacy Deletes Local Shared Objects, LSOs. LSOs are files placed on your computer by the Adobe Systems Flash plug-in. Use of Adobe Flash allows web sites to track you, permanently even though your browser is configured to delete the files known as "Cookies" after each re-starting of your operating system.
- CanvasBiocker Prevents websites from using the Javascript <canvas> API to fingerprint them.
-
Classic Theme
Restorer Quoting 3 paragraphs:
"This add-on will stop working when Firefox 57 arrives in November 2017."
"This add-on will stop working when Firefox 57 arrives in November 2017 and Mozilla drops support for XUL / XPCOM / legacy add-ons. It should still work on Firefox 52 ESR until ESR moves to Firefox 59 ESR in 2018 (~Q2).
"There is no 'please port it' or 'please add support for it' this time, because the entire add-on eco system changes and the technology behind this kind of add-on gets dropped without replacement."
- Cookies Manager+
- Disconnect
- Facebook Blocker Prevents Facebook from following you everywhere there are Facebook "Like" buttons.
- Firebug "Firebug integrates with Firefox to put a wealth of development tools at your fingertips while you browse. You can edit, debug, and monitor CSS, HTML, and JavaScript live in any web page..."
-
Ghostery
DON'T UPDATE. New versions don't allow sufficient user control.
USE THIS: ghostery-5.4.10-sm+an+fx.xpi Link: Version 5.4.10
Ghostery sells data it collects. (Business Insider, Jun 18, 2013)
Ghostery web site - MozArchiver For Pale Moon browser only. Like Mozilla Archive Format that is used with Firefox. Saves web pages.
- Mozilla Archive Format For Firefox only. Saves web page
-
Re:Mozilla's MAFF addon is not e10s compatible
-
Mozilla's MAFF addon is not e10s compatible
v54 was still slow for me and I've been using the Developer version that had it enabled. I finally identified that e10s easn't enabled due to Mozilla's "Mozilla Archive Format" addon.
http://maf.mozdev.org/As far as I know, this is the only browser-based plugin that supports the MAFF archive format. It hasn't been updated whereas other developers were required to update their addons. I'm not sure if this means that MAFF is dead or if its just an oversight. (I've tried reaching out via email & Twitter over the past couple of months, but there's been no response.)
Out of frustration regarding browser performance & non-communication, I finally switched to Chrome.
-
"This add-on will stop working..."Posting this again: The reason I like Firefox is the add-ons.
- Classic Theme Restorer
"This add-on will stop working when Firefox 57 arrives in November 2017."
This add-on will stop working when Firefox 57 arrives in November 2017 and Mozilla drops support for XUL / XPCOM / legacy add-ons. It should still work on Firefox 52 ESR until ESR moves to Firefox 59 ESR in 2018 (~Q2).
There is no "please port it" or "please add support for it" this time, because the entire add-on eco system changes and the technology behind this kind of add-on gets dropped without replacement. - Cookies Manager+
- Ghostery DON'T UPDATE. New versions don't allow sufficient user control.
USE THIS: ghostery-5.4.10-sm+an+fx.xpi Link: Version 5.4.10 - Mozilla Archive Format
- NoScript
- Nuke Anything Enhanced
- Open link in...
- Print Edit
- Session Manager
- Snap Links Plus DON'T UPDATE. New versions don't have as many features.
USE THIS: snap_links_plus-2.4.3-sm+fx.xpi Link: Version 2.4.3 - uBlock Origin
- Video DownloadHelper
- Classic Theme Restorer
-
Why I like Firefox: Extensions (Add-ons) FIXED.FIXED: Extensions are the reason Firefox is popular with me. I'm happy to have any suggestions for improvements of the list.
- Classic Theme Restorer
- Cookies Manager+
- Ghostery DON'T UPDATE. New versions don't allow sufficient user control.
USE THIS: ghostery-5.4.10-sm+an+fx.xpi Link: Version 5.4.10 - Mozilla Archive Format
- NoScript
- Nuke Anything Enhanced
- Open link in...
- Print Edit
- Session Manager
- Snap Links Plus DON'T UPDATE. New versions don't have as many features.
USE THIS: snap_links_plus-2.4.3-sm+fx.xpi Link: Version 2.4.3 - uBlock Origin
- Video DownloadHelper
-
Why I like Firefox: Extensions (Add-ons)Extensions are the reason Firefox is popular with me. I'm happy to have any suggestions for improvements of the list.
-
Classic Theme
Restorer
"This add-on will stop working when Firefox 57 arrives in November 2017."
https://addons.mozilla.org/firefox/downloads/latest/classicthemerestorer/addon-472577-latest.xpi?src=dp-btn-primary - Cookies
Manager+
https://addons.mozilla.org/firefox/downloads/latest/cookies-manager-plus/addon-92079-latest.xpi?src=dp-btn-primary - Ghostery
DON'T UPDATE. New versions don't allow sufficient user control.
https://addons.mozilla.org/en-US/firefox/addon/ghostery/
USE THIS: y-5.4.10-sm+an+fx.xpi Link: Version 5.4.10 - Mozilla Archive Format
http://maf.mozdev.org/ - NoScript
https://addons.mozilla.org/en-... -
Nuke Anything Enhanced
https://addons.mozilla.org/firefox/downloads/latest/nuke-anything-enhanced/addon-951-latest.xpi?src=dp-btn-primary
- Open link
in...
https://addons.mozilla.org/en-US/firefox/addon/open-link-in/ - Print Edit
https://addons.mozilla.org/fir... - Session
Manager
https://addons.mozilla.org/en-US/firefox/addon/session-manager/ - Snap Links
Plus DON'T UPDATE. New versions don't have as many features.
https://addons.mozilla.org/en-...
USE THIS: snap_links_plus-2.4.3-sm+fx.xpi Link: Version 2.4.3
Explanation:
http://cpriest.github.io/SnapL... - uBlock Origin
https://addons.mozilla.org/fir... - Video
DownloadHelper
https://addons.mozilla.org/firefox/downloads/latest/video-downloadhelper/addon-3006-latest.xpi?src=dp-btn-primary
-
Classic Theme
Restorer
-
Why I like Firefox: Extensions (Add-ons)Extensions are the reason Firefox is popular with me. I'm happy to have any suggestions for improvements of the list.
-
Classic Theme
Restorer
"This add-on will stop working when Firefox 57 arrives in November 2017."
https://addons.mozilla.org/firefox/downloads/latest/classicthemerestorer/addon-472577-latest.xpi?src=dp-btn-primary - Cookies
Manager+
https://addons.mozilla.org/firefox/downloads/latest/cookies-manager-plus/addon-92079-latest.xpi?src=dp-btn-primary - Ghostery
DON'T UPDATE. New versions don't allow sufficient user control.
https://addons.mozilla.org/en-US/firefox/addon/ghostery/
USE THIS: y-5.4.10-sm+an+fx.xpi Link: Version 5.4.10 - Mozilla Archive Format
http://maf.mozdev.org/ - NoScript
https://addons.mozilla.org/en-... -
Nuke Anything Enhanced
https://addons.mozilla.org/firefox/downloads/latest/nuke-anything-enhanced/addon-951-latest.xpi?src=dp-btn-primary
- Open link
in...
https://addons.mozilla.org/en-US/firefox/addon/open-link-in/ - Print Edit
https://addons.mozilla.org/fir... - Session
Manager
https://addons.mozilla.org/en-US/firefox/addon/session-manager/ - Snap Links
Plus DON'T UPDATE. New versions don't have as many features.
https://addons.mozilla.org/en-...
USE THIS: snap_links_plus-2.4.3-sm+fx.xpi Link: Version 2.4.3
Explanation:
http://cpriest.github.io/SnapL... - uBlock Origin
https://addons.mozilla.org/fir... - Video
DownloadHelper
https://addons.mozilla.org/firefox/downloads/latest/video-downloadhelper/addon-3006-latest.xpi?src=dp-btn-primary
-
Classic Theme
Restorer
-
Re:More detail about problems with Flash:
The Flashblock extension apparently is not supported by Firefox v35. With the extension enabled, YouTube videos won't play. When the Flashblock extension is disabled, YouTube videos play immediately, without user permission. Is that a Firefox problem, or is Adobe checking for Flashblock and refusing to operate if the Flashblock extension is installed?
The problem is not with Flashblock. Flashblock works just fine with YouTube. I think you're running into an AdBlock Plus issue.
If you have trouble with YouTube on FF 35, then you need to go into AdBlock Plus, Filter preferences, Exception Rules, and add the following:
youtube.com###theater-background
-
More detail about problems with Flash:
The Flashblock extension apparently is not supported by Firefox v35. With the extension enabled, YouTube videos won't play. When the Flashblock extension is disabled, YouTube videos play immediately, without user permission. Is that a Firefox problem, or is Adobe checking for Flashblock and refusing to operate if the Flashblock extension is installed?
Adobe's Flash software is abusive to users, in my opinion. From the Better Privacy Firefox extension web page, re-written for clarity:
Some properties of Flash-cookies (LSOs):
1) They don't expire. They stay on each computer for an unlimited time.
2) By default they offer a storage of 100 KB. Normal cookies, 4 KB.
3) Browsers are not fully aware of LSO's, They often cannot be displayed or managed by browsers.
4) Using Adobe's Flash, companies store and access highly specific personal and technical information (system, user name, files, ...).
5) Flash sends the stored information to servers without the computer user's permission.
6) Some Flash applications are not visible to the user. Not all Flash applications display anything.
7) There is no easy way to tell which Flash-cookie sites are tracking you.
8) Shared folders allow cross-browser tracking, LSO's work in every flash-enabled application.
9) Adobe doesn't provide a user-friendly way to manage LSO's. Management is very cumbersome.
10) Many companies make extensive use of Flash-cookies.
Apparently Adobe develops software but doesn't check for flaws. There have been 24 new versions of Adobe's Flash software in one year, if I count correctly, since v11.9.900.170 in January of 2014. (The latest version is v16.0.0.257.) As the Slashdot story mentions, the flaws were found by other companies, not Adobe.
One purpose of the extremely frequent updating may be to push users to allow Adobe to do its silent updating, giving Adobe control over user's computers.
Now, apparently, Flash applications will not work unless the latest version of Flash is installed. That's apparently another way Adobe pushes users to allow Adobe to do silent updating, using the Windows operating system service Adobe calls ARM: "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
Apparently the former Adobe CEO, Bruce Chizen became tired of managing, because Adobe was, in my opinion, poorly managed for years before Mr. Chizen was replaced in 2007. Bruce Chizen is on Oracle's board of directors. Birds of a feather flock together?
The present Adobe CEO, Shantanu Narayen, is, in my opinion, a very poor manager. For example, an organization with which we are acquainted paid $2,000 to update to an Adobe CS6 suite. CS6 came with old versions of some Adobe programs, and an Adobe representative justified that practice. -
Re:Why I cut back on Firefox, why would I use just
It's not perfect but Multifox provides the ability to use seperate environments within Firefox. As an alternative you can manually create launchers for Firefox with the -P flag.
-
Still on Firefox 8...
Since Firefox has started their crazy version numbering, I've given up on upgrading. I use 27 different addons and perfectly configured to make my web browser do what I want. It is near impossible to do an upgrade without spending hours reconfiguring the addons, some of which need to be manually downloaded and have their "MaxVersion" incremented so they will install. Maybe in 6 more months when we reach Firefox 50 I'll give it a try, but until then. Firefox 8 all the way!
Application: Firefox 8.0 (20111104165243)
Total number of items: 27- Active Stop Button 1.4.10
https://addons.mozilla.org/firefox/addon/active-stop-button/
- Adblock Plus 1.3.10
http://adblockplus.org/en/
- BetterPrivacy 1.68
http://nc.ddns.us/extensions.html
- ColorfulTabs 7.1
http://www.binaryturf.com/free-software/colorfultabs-for-firefox/
- Cookie Monster 1.1.0
https://addons.mozilla.org/en-US/firefox/addon/cookie-monster/?src=api
- Copy Link Name 1.3.2
http://www.captaincaveman.nl/
- Download Statusbar 0.9.10
http://downloadstatusbarapp.com/
- DownloadHelper 4.9.14
http://www.downloadhelper.net/
- DownThemAll! 2.0.8
http://downthemall.net/
- Export Cookies 1.2
https://addons.mozilla.org/en-US/firefox/addon/export-cookies/?src=api
- Find Toolbar Tweaks 3.0.0
http://homepage3.nifty.com/georgei/extension/ftt_en.html
- Firebug 1.8.4
http://www.getfirebug.com/
- Greasemonkey 0.9.13
http://www.greasespot.net/
- HeaderControlRevived 1.1
https://addons.mozilla.org/en-US/firefox/addon/headercontrolrevived/?src=api
- Hide Caption Titlebar Plus 2.4.1
https://addons.mozilla.org/firefox/addon/13505/
- Menu Editor 1.2.7
http://menueditor.mozdev.org/
- Movable Firefox Button 1.4
https://addons.mozilla.org/en-US/firefox/addon/movable-firefox-button/
- NoScript 2.1.7
http://noscript.net/
- OptimizeGoogle 0.78.2
http://www.optimizegoogle.com/
- RequestPolicy 0.5.27
http://www.requestpolicy.com/
- Screen Capture Elite 2.0.0.23
http://www.grizzlyape.com/
- Searchbastard 1.5.5
http://searchbastard.rosell.dk/
- SkipScreen 0.6.1.2 -
Re:IMAP
I formerly used Thunderbird + http://sieve.mozdev.org/.
Nowadays, I use mutt and haven't needed to edit my filters yet (mutt doesn't support sieve, regrettably).My server is dovecot.
Here's a more complete list of clients that support sieve: http://sieve.info/clients, since thunderbird's plugin wasn't too good.
-
Re:Why isn't there a whitelist-only mode?
http://forums.mozillazine.org/viewtopic.php?p=1586359&highlight=flashblock+noscript#1586359
http://flashblock.mozdev.org/faq.html#fbNojavascript
But anyway I think the real problem with noscript is the untrustworthy behavior of its author.
-
Re:I ditched Ubuntu a long time ago
Are you talking about how they removed Google from the search bar in Firefox? You can add it back really easily by going to http://mycroft.mozdev.org/ There are a bunch of other great search engines you can add too.
-
absolutely
I use it constantly on both linux and windows. Only time i use firefox is the rare case when something doesn't render properly in seamonkey.
Sometimes extensions will be nominally incompatible, but there may be workarounds, or you may just get a link to xpi file and it will just work. For example, this will make flashblock work with seamonkey:
I also use:
- flashgot
- ABP
- https everywhere
- noscript
They work with no changes.
From what I have seen seamonkey has not benefitted so much from the newer JS improvements in firefox. This may be accountable for some overall performance loss, as much of the mozilla interface is dependent on JS i believe. But my info may be out of date as I'm running behind a few minor revisions.
The number one reason I use seamonkey is retaining the status bar. That's where some of my permanent extension icons live, so I need it.
Also, linux users see here to fix middle click behavior.
-
Re:Too cool
His username is just a shortening of his full name.
-
E4F0EDDF374F2C50D473 5EC097833DC998EF9A49
-----BEGIN PGP MESSAGE-----
Charset: ISO-8859-1
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/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 /NH1IpCa6PhvhdDKTm93PmnFV5bSIIHhQ/FV9eafd1GEv9z/AvVbb4pw9zgpyK1L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=8z8H
-----END PGP MESSAGE----- -
Yes. I've been using PGP for a long time.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1Why, yes. Yes I do. At least for the few recipients that do too. And
all my messages are signed.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/iD8DBQFO8AWNUy30ODPkzl0RAr75AJ9qYq94sfL00DZxCb3e1tL/HX4uIACeLlbJ
RYRY0ZwfXoKwpyEJn0JzJ2Q=
=fy5a
-----END PGP SIGNATURE----- -
I DO, like every DD
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160
Like every of the ~800 Debian developer in this world, I do use
encryption, and know how to handle PGP keys. My private key is encrypted
in a dm-crypt partition of 2 of my laptop, and I have a revoke
certificate handy burnt on a CD. My GPG fingerprint is also written on
my business card, so that everyone who I met can fetch my private key
from any of the major key servers, and check its fingerprint. My public
key is signed by about a dozen different people, mostly other Debian
developers, which is a strong "web of trust". If everyone was printing
his GPG key on a business card, I could also send encrypted emails, but
I've seen only other DDs doing it.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEAREDAAYFAk7wBSAACgkQl4M9yZjvmklYVACfXYV3ncJnZuKosZJ8k0ZSzc3t
SpQAn0eYtQCIrQeTcBgA1b+Yz58OVqCJ
=EQHO
-----END PGP SIGNATURE----- -
Re:What?
If [Firefox] is set to Google it's a phenomenal PITA to switch--Bing isn't "built in" and you have to go to their "get more search engines" webpage, which has 17 "search providers" that noone cares about (and does not offer Bing). And to even get there you have to navigate through options under... wait, it's not in the options, you have to discover it under the small pull-down arrow at the left of the search field.
In all fairness, there is also a webpage for Firefox that provides a zillion search engines, but that is also an arcane secret you have to discover on your own.
-
Re:You know what would bring a lot of users back?
-
Re:"not nearly as well realized as with Flash"
MAFF is similar to what you're looking for (zip storage), but it's really only supported by Mozilla's browsers.
http://maf.mozdev.org/maff-file-format.htmlAnd then there's Microsoft's original MHTML (MIME HTML) that uses a mime format like e-mail.
http://en.wikipedia.org/wiki/MHTMLIt looks like Safari on Macs have the Webarchive format, but they mention that most people just use PDFs:
http://en.wikipedia.org/wiki/WebarchiveePub has some similarity as Thomas mentions.
http://en.wikipedia.org/wiki/EPUB -
Re:"bounce" in Mail.app
MailRedirect may do that for Thunderbird: http://mailredirect.mozdev.org/ and https://addons.mozilla.org/en-us/thunderbird/addon/mail-redirect/ though comments sound like it doesn't work with the recent Thunderbird build.
-
Re:A few things
What trouble and expense? TLS (SSL is obsolete) is only expensive if you need to get your certificates signed by a commercial CA i.e. if you are interacting with random people who are not affiliated with you or your organization. If you are only deploying TLS for internal purposes, just maintain your own internal CA and deploy your internal signing key to all of your organization's systems.
Having your own CA raises the distribution problem, which is different or at least flaky for virtually every browser / OS combination, and you're still running on what may as well be a compromised system so TLS is irrelevant since the attacker can just root the system and grab keypresses.
The best solution short of buying laptops and putting epoxy in the ports is mastering a Knoppix CD. You can get a kiosk-style browser loaded with only your org's CA and a TLS client certificate. If you can distribute your own CA certs, you may as well also distribute client certs. You can disable storage drivers except for ramFS. You can block everything but 443 outgoing. You can verify your server before launching the browser.
You now have a simple procedure to force users to access your site properly. There is no possibility of a MITM by creating a fake site from a misspelling, and rather than clicking through security warnings, you can display a dialog telling them that something is seriously wrong and who they need to call, with no way of just clicking through the warnings.
You have two factor authentication; the client cert on the CD and password are separate factors. You have honest to god protection from CA fraud since only the CA you created is loaded. The only ways (I know of...) to compromise this setup are a hardware attack, user completely bypassing you by booting in a VM, or a rootkit in BIOS or the hypervisor.
-
Platypus and Aardvark let you edit ugly pages
That's what the Firefox extension, Platypus is for... unfortunately, it's no longer maintained, but Aardvark can produce similarly readable web pages without out too much work. Combine that with the Greasemonkey script, Autopagerize to join those multi-page articles designed to make you look at a whole new set of advertisements for each paragraph, and you come a little closer to having the experience that Tim Berners-Lee had in mind for the world wide web in the first place.
-
Re:Happened to me
I say that if you're going to encrypt, encrypt everything or at least as much as possible. If the authorities want to come after me with a five dollar wrench so be it, anything that important wouldn't be in my email anyway.
And email encryption is not easy? Install Thunderbird, GnuPG and Enigmail. You can even set rules to encrypt emails to specific people by default. I've gotten my family, close friends and coworkers using Enigmail and they love it. Even better, and my ulterior motive from the start, is that I now have a good-sized web of trust.
-
Re:Wouldn't play
https://www.mozdev.org/bugs/show_bug.cgi?id=23213 was my report. Only vimeo.com does this.
-
Oeone did the Mozilla Office Suite already
Oeone took a shot at a Mozilla Office Suite before, well more of an everything suite home appliance.
http://www.linux.com/archive/feed/24499They wrote the guts of Calender and donated it to Mozilla. The word processor part embedded Abiword http://abimoz.mozdev.org/index.html
-
Java Vulnerabilities Patched in 1.6.0_22
You don't have to be vulnerable. The listed exploits were patched in Update 22, last spring.
DoublePlusKarmaWhoreGoodness: For best protection, run a Mozilla browser with the NoScript add-on. (AdBlockPlus and RemoveItPermanently make great complements to NoScript, too.)
-
Re:Hey, krulgar-
FF native sync would be fine for those forced to use IE sometimes if they could bring back that IE Tab add-on.
I don't know that IE Tab ever left, although it has changed names.
-
Re:Not hard to beat at first glance.
True enough. My brother uses FF and AdBlock+ but won't install NoScript. Flat out refuses to, saying he hates having to whitelist everything. I've tried explaining that over (reasonable) time the sites you visit are all categorized and you rarely need to add exceptions. Even newly visited sites are fine much of the time.
Use PrefBar.
Cost: One horizontal toolbar's worth of vertical space.
Benefit: User-configurable single-click access to toggle checkboxes that control not only Javashit, Flash, and Java, but also automatic geolocation reporting, image loading (tired of seeing 10 copies of an almost-NSFW 300x480
.gif of bouncing boobs that some idiot used as a .sig when all you want to do is read about how his turbocharger install went?), colors (hate that web designer who put red text on a blue swirly background?), cookies, send-Referrrer-ID, a dropdown to select a user-agent (lookin' at you ExpertSexChange, who hides the answer from everyone but the Google Crawler), and more. -
Re:Finally!!!
Or use the multifox extension for Firefox. It adds an option to the File menu to open a window with a "new Identity Profile", which doesn't share cookies with the main window. Works fine for me.
-
Re:They are 'anonymising' the data then selling it
Also, Eric Jung is on their 'Advisory board': http://abine.com/team.php If you don't know who he is, he is a board member of Mozilla Add-Ons governing board.
Wrong. Eric Jung is on the board of Mozdev, and independent organization dedicated to hosting Mozilla-related projects (like a specialized Sourceforge). He is not part of the Mozilla Add-ons team.
I'm in charge of the add-on review process at Mozilla, and I personally reviewed and approved the TACO update due to its complexity. I have no relationship with Abine whatsoever.
-
Re:Opera users didnt have a problem
You can also install a new search engine plugin / search provider from the Mycroft Project: http://mycroft.mozdev.org/search-engines.html?name=google+ssl
-
Re:Change it in the Firefox search box:
Someone also already created a google ssl search plugin on mycroft:
http://mycroft.mozdev.org/search-engines.html?name=google+ssl
Don't need to edit any config files or install any extra plugins.
-
Re:This will have interesting results for webmaste
You could disable send referrer (network.http.sendRefererHeader). I use PrefBar extension in Mozilla's SeaMonkey v2.0.4. However, some Web sites hate the no send referrers.
:( -
Re:Change it in the Firefox search box:
That works for the location bar. For the search bar you can add a Mycroft search plug-in: http://mycroft.mozdev.org/search-engines.html?name=google+ssl and demote/delete the built-in google search plug-in. I guess this is the non-hacker / lazy-ass method
:). -
Re:Firefox search bar with ssl?
http://mycroft.mozdev.org/search-engines.html?name=google+https
The Mycroft Project provides plugins for almost every site out there. -
Re:Can it display PDFs?
Oh, I just noticed this:
(mozplugger changelog)
Version 1.13.3 adds functionality to allow possible working around mozdev bugs 22065, 22715 and 22723 by adding a new flag needs_xembed. The flag needs to be added or removed from mozpluggerc to allow application keyboard focus for the combination of browser and application used. The default mozpluggerrc does not use the flag so add were required.
Have you tried setting the needs_xembed flag? I think that is linked to why it works correctly in Chromium, so it must be set.
See this bug:
-
Re:Thats ok , as an XP user
Wonderful thing about firefox is the addons. Go find yourself a copy of Coral IE Tab and Greasemonkey. Any site that won't run correctly in non-IE browsers will load fine in an IE tab (and with the ability to sync cookies and use Adblock plus), and all those sites with "IE specific" code can be rewritten with a Greasemonkey script to correct their bad behavior (for sites you visit frequently and don't want to run in an IE Tab). There really isn't much excuse to be loading internet explorer by itself these days unless you really feel the need to isolate your IE pages from your firefox pages, you're incredibly lazy, or ignorant of your options.
-
Re:But it is still blocked in Denmark. Workaround?
Tor is the obvious answer, combined with Foxyproxy for Firefox to redirect traffic through the tor network only when needed to contact the piratebay site. The Tor website provides a convenient prepackaged browser bundle you can download to see if you like it.
-
Re:I will never upgrade my IE6.
Actually I'm really glad they changed the interface, as it has helped me tremendously with getting folks off of IE and onto Firefox! Thanks IE Team! Oh, for those having trouble convincing an older relative to switch, old hairyfeet has a little trick that seems to work everytime. Don't bother talking about security, their little eyes will just glaze over, what you need is a juicy carrot, or in this case ForecastFox! Just install ForecastFox with their Zip Code at the top (menubar) and you'll find that having the 3 day forecast and weather alerts makes FF sell itself.
Now as for your problem, I'm sorry but IE8 is pretty much IE8. What I CAN do is point you to the page that will let you make Firefox look like IE6. It is an experimental, but if you really want the IE6 look without running an out of date insecure browser this is probably your best bet. Good luck!
-
Re:What nonsense
If you are too stupid and/or lazy to do this then you should just [b]get foxyproxy.
At least if you're "lazy". It is a lot better than having to bounce in and out of the advanced options
-
OpenPGP = "Acutally Perfect" Spam Blocking
We use Thunderbird with the Enigmail (OpenPGP) plugin at my office to cryptographicly sign and/or encrypt our email.
Our SPAM filter consists of simply rejecting all unsigned e-mail messages.
One exception is that external e-mail addresses can be whitelisted (with approval) to allow for email from companies with no email authentication in place.It's a bit of a pain at first, but everyone at work agrees that it's a small price to pay when you consider the alternative (inboxes full of spam).
I've never recieved a spam e-mail message at work.
New employees create PGP keys during orientation (or else they can't send any e-mail).One by one I'm convincing my friends and family to cryptographicly sign their messages (tech-savy ones love the Idea).
Soon I hope to get zero spam at home too.[sigh]... If only the rest of the Internet authenticated their email we could all have Zero spam in our inboxes.
-
Re:Wrong. Extensions can use native code.
Even pure Javascript extensions aren't "secure". They can access all the usual XPCOM interfaces to do nasty things like overwrite all your files, and in later versions, they can use the Javascript foreign function interface to call any code C++ could.
It is essential to look at Javascript extensions as having the same security properties as native code ones.
However, plugins can be safer because their more clearly delineated NPAPI interface allows them to be run out of process, where in principle, they can be sandboxed.
-
Re:So what was the code from?
I have a prehistoric Moz sitting on an old distro that I have kept since it picked up my webcam before the next release started ignoring it. Back then it wasn't 'self aware' to phone home and check for updates. Didn't see the point as I was using the distro less and less, but the Moz skin http://themes.mozdev.org/themes/negativemod.html sure is beyond compare, and I've kept it that way since.
Hmmm considering one poster below said to stick to 'browsers of that era' if your RAM is 'of that era', I think I'd get FF 1.0+
:) just to make this skin work again (and out of spite). -
Re:What Does It Need?
I want to use Emacs for my editor boxes in Firefox, notably.
Have you tried mozex?
-
Re:No Flash
Here ya go: Flashblock, also available in fruity ie and minty chrome flavors.
-
Scroogle.org
I use scroogle.org
.. it's a proxy between me and google.. and they claim to erase all logs within 48 hours. (I understand it's just a claim.. still it's another entity sitting between me and google). I've always hated the way when search results in google make you think they go straight to link (the hover URL is the site abc.com), but when you click on the item, some javascript converts it to google.com?redirectsomething=abc.com. That is just plain devious in my eyes.You can also find the search addon at http://mycroft.mozdev.org/search-engines.html?name=scroogle which adds scroogle as default to the firefox search bar.