Slashdot Mirror


Mozilla Announces Enterprise User Working Group

Lennie sends this quote from an announcement at the Mozilla blog: "Recently there has been a lot of discussion about enterprises and rapid releases. Online life is evolving faster than ever and it's imperative that Mozilla deliver improvements to the Web and to Firefox more quickly to reflect this. This has created challenges for IT departments that have to deliver lots of mission-critical applications through Firefox. Mozilla is fundamentally about people and we care about our users wherever they are. To this end, we are re-establishing a Mozilla Enterprise User Working Group as a place for enterprise developers, IT staff and Firefox developers to discuss the challenges, ideas and best practices for deploying Firefox in the enterprise."

156 comments

  1. LOL by Anonymous Coward · · Score: 3, Insightful
    1. Re:LOL by instagib · · Score: 2

      > we care about our users
      And he forgot to say: "The fact that we break your add-ons every few months is in your best interest!"

    2. Re:LOL by jojoba_oil · · Score: 4, Insightful

      Enterprise has never been (and I'll argue, shouldn't be) a focus of ours

      I wonder if that guy is still the community coordinator for marketing...

    3. Re:LOL by bbecker23 · · Score: 0

      You seem lost. This is slashdot. The Faux News forums are over there.

      --
      cat /dev/random > sig.txt
    4. Re:LOL by Anonymous Coward · · Score: 0

      I'd say he had it right.

      I don't know, of the Star Trek series, it was probably the worst.

    5. Re:LOL by GooberToo · · Score: 1

      Can you elaborate some on that statement? I've been a long time firefox user and have never had an add-on broken except when transitioning between major releases. And even then, it was because the pluin author simply hadn't ported it yet.

      For an enterprise, this is all standard operating procedure. Meaning, validation that everything is available and supported on a new release should happen every time. If it doesn't, someone either isn't doing their job of they don't understand what, "enterprise", means.

    6. Re:LOL by kevinmenzel · · Score: 1

      I think the reference might be to the current race to the next major version number borking plugins even when the plug-in API remains stable.

    7. Re:LOL by Anonymous Coward · · Score: 1

      Of course they do. Nothing's actually going to change, this is just a token effort by the non-Dotzler camp to try and reel back in the business users that he alienated. They have no intention of removing him from his post, or addressing any of the issues that enterprises face in rolling out Firefox. And you know what? That's just fine with us. Firefox is no longer the be-all-end-all of "alternative" browsers, if they think we're not important then we'll just abandon the Mozilla Foundation like they've abandoned us.

    8. Re:LOL by andydread · · Score: 1

      looks like some backpedaling on the part of Mozilla. lol

    9. Re:LOL by Shining+Celebi · · Score: 2

      The anti-enterprise position was never the official view of Mozilla; it was something expressed by a few employees of Mozilla. There are certainly plenty of others who feel quite differently about it, as you can see from reading Planet Mozilla. I don't think Mozilla has expressed a position on any of this.

      For example, here's a counterpoint view. There's some good points there. The main point: major Firefox releases that include important bugfixes were taking more than a year to come out. This was very bad for many groups of people. Point releases took 6-8 to come out, but without too many major changes (the idea that Firefox point releases never included new functionality is false - out-of-process plugins came in a point release.) Mozilla has now simply merged the two: the only releases will come out every 6-8 weeks and will include whatever's ready, like Chrome.

      There is, in fact, a stable extension API called Jetpack. The problem is that Firefox extensions can literally do anything at all to Firefox, access internal APIs and do whatever else they want. An external API like Jetpack is no good for that. There's a tradeoff. AMO bumps compatibility on most extensions automatically, but not all. So some extensions will be temporarily incompatible (personally, I didn't have any issues - about 15 extensions). On the other hand, users will get, for example, the massive memory improvements coming in Firefox 7 in a month or two rather than sometime in 2013.

    10. Re:LOL by GooberToo · · Score: 1

      But that means the complaint is entirely baseless. Which is why I was asking for clarification because everyone I look at, his post completely looks like an entirely baseless troll.

    11. Re:LOL by asa · · Score: 3, Informative

      "I wonder if that guy is still the community coordinator for marketing..."

      I'm not. I haven't been involved heavily in marketing since a year or so after I co-founded SpreadFirefox back in 2004. I'm currently the Director of the Firefox Desktop product.

      - A

    12. Re:LOL by kevinmenzel · · Score: 1

      It's not baseless, because Mozilla isn't backporting security patches to older releases, so if you want a secure browser, you have to upgrade to the latest major version. Because the major version changes every couple of months, and plugins have to check against browser version instead of an internal plugin API version, plugins, especially old but still working plugins, break across major versions when they shouldn't, and that means they're going to break often now.

      So if you're using a plugin, and the developer no longer updates it, even if it should still work, the plugin will break on the upgrade between 4 and 5, or 5 and the forthcoming 6, or the forthcoming 7, or the forthcoming 8 (all of which have builds available right now, and I'd imagine all of which will be rolled out as the latest stable version by the end of the year). Even if all that changes between 4 and 5 are minor security patches, or support for some new HTML element. Beyond that, Mozilla keeps changing the name of the setting that disables the compatibility check so you can run the tested and working plugin on a higher version - AND disabling that flag is global for all plugins, you can't just "run this one plugin anyway."

      In the old numbering system you wouldn't have had a problem, but the new numbers don't mean "Major version" they mean "Arbitrary different number"

      Hell, even Windows 7, which didn't change a lot of underlying API goodness, only changed the kernel number from 6.0 to 6.1 - it may have opened them up to be mocked by the community, but given the differences between Vista and 7 from a compatibility perspective, it was the appropriate thing to do (especially since the average user never sees that number.)

    13. Re:LOL by BlueToast · · Score: 1

      Where do public schools fit into this picture?

    14. Re:LOL by bunratty · · Score: 1

      The main point: major Firefox releases that include important bugfixes were taking more than a year to come out. This was very bad for many groups of people.

      Can you provide any specific examples?

      In any case, Firefox point releases were taking only a month or two to come out, and Mozilla could have easily fixed memory bugs in point releases. There would be no reason to wait two years for bug fixes.

      --
      What a fool believes, he sees, no wise man has the power to reason away.
  2. participants? by rbrausse · · Score: 3, Funny

    is Asa Dotzler part of this workgroup?

    1. Re:participants? by Anonymous Coward · · Score: 0

      If they had any brains, they'd fire his worthless ass.

    2. Re:participants? by jensend · · Score: 1

      Wouldn't that be kind of like having North Korea chair the Nuclear Disarmament Committee?

    3. Re:participants? by Anonymous Coward · · Score: 0

      Ass Dotzler's Worthless Ass Fired, News at 11

  3. In other words by OverlordQ · · Score: 4, Insightful

    To this end, we are re-establishing a Mozilla Enterprise User Working Group as a place for enterprise developers, IT staff and Firefox developers to discuss the challenges, ideas and best practices for deploying Firefox in the enterprise.

    In true Mozilla fashion, I'm sure that will mean "We'll pretend to listen while we continue to do whatever we want"

    --
    Your hair look like poop, Bob! - Wanker.
    1. Re:In other words by Bacon+Bits · · Score: 4, Funny

      In true Mozilla fashion, I'm sure that will mean "We'll pretend to listen while we continue to do whatever we want"

      See? FOSS software really is just as good as commercial closed-source software!

      --
      The road to tyranny has always been paved with claims of necessity.
    2. Re:In other words by JMJimmy · · Score: 0

      Pretty much. Mozilla stopped being about the user with the crapsome bar.

    3. Re:In other words by hedwards · · Score: 2

      You mean despite the fact that it works better than the previous URL bar and was a logical addition to the database that's now being used for bookmarks.

      I see a lot of hate for the awesome bar, but really, it beats the crap out of the previous URL bar.

    4. Re:In other words by bill_mcgonigle · · Score: 2

      Don't feed the "the fate of the entire organization hinges on the one (mis)feature I care about" troll. Especially one who can't set maxRichResults in about:config.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    5. Re:In other words by QuantumRiff · · Score: 4, Insightful

      How long have people been begging for an MSI based installer, and some Group Policy support that is "official".. sure there are scripts that can hack GPO support in, and 3rd party builds of the MSI installer.. but people have been asking since Firefox 2...

      --

      What are we going to do tonight Brain?
    6. Re:In other words by Microlith · · Score: 2, Insightful

      Yup. Why should an open source project be constrained to the demands of corporations that aren't involved or contributing to their effort? After all, the Linux kernel doesn't wait for anyone, but that doesn't seem to be a huge problem for corporations (well, except those wanting to deliver closed source drivers.)

      Now if they want to take those concerns into consideration (like it seems they're doing) then more power to them.

    7. Re:In other words by marcosdumay · · Score: 1

      Just popular FOSS is as good as commecial closed source software. That is probably why it becomes popular at the first place. (And no, Apache doesn't cut it. It is just popular in a ninche that is "people who run web servers". An important ninche, but still small in numbers.)

      What makes me wonder... I have really no idea on what goes on most people heads.

    8. Re:In other words by instagib · · Score: 2

      Or just

      browser.urlbar.autocomplete.enabled = false

    9. Re:In other words by Anonymous Coward · · Score: 0

      We're all missing the point here. Why does a web browser need to run a database for its bookmarks?

    10. Re:In other words by Anonymous Coward · · Score: 1

      I couldn't blame them if they said: "if the enterprise want stable APIs and software, there is debian or any other distro oriented towards stability. We're going to help by caring about the api, documenting bugs and code, to make it easy to backport fixes".

      I think debian stable is on iceweasel 3.6, while sid got 5.0

      Anyway I missed the news about the other browser makers listening to their users. Like, IE adopting web standards without always trying to differentiate in details of the implementation, Chrome letting users browse in complete privacy with real equivalents to noscript....

    11. Re:In other words by Isaac+Remuant · · Score: 1

      Thanks for being the voice of reason. Thank you. If I had mod points I'd spend them gladly.

      The key concept is customization.

      --
      "Science can amuse and fascinate us all, but it is engineering that changes the world. " - Asimov.
    12. Re:In other words by Seyedkevin · · Score: 1

      We're all missing the point here. Why does a web browser need to run a database for its bookmarks?

      Uh, what? It has to store data somewhere.

      You make it sound like firefox comes bundled with a full-on SQL server when in reality it just reads and writes to a SQLite database and some XML files. SQLite is basically just an indexed version of flatfile storage.

      Although, it'd be kind of cool if firefox could save its config in a centrally maintained SQL database like KDE.

    13. Re:In other words by Anonymous Coward · · Score: 2, Insightful

      For the same reasons they should listen to users who are neither involved or contributing to their effort. The whole point is to have a good product used by as many people as possible. Corporate users are still users. If you can add features that they want and get a larger distribution for your product, why would you ignore them?

      Firefox has had little corporate use because they are missing vital components that most corporations need (an easy way to roll out the program, updates, and a way to centrally configure and control it). IE is still the primary corporate browser because it has these features. Why would they not want to make a stab at a huge section of the market that so far no browser, other than IE, has cracked?

    14. Re:In other words by sourcerror · · Score: 1

      I guess most of these enterprises are using Firefox on Windows. Also, see MSI installer request.

    15. Re:In other words by Anonymous Coward · · Score: 0

      The difference for Linux is that they don't really put out compiled versions. They just do source. In addition, the people in charge of running Linux have a much better idea of how to do it. In addition, the Linux kernel is configurable. If you want, you can strip out the options you don't like and change just about anything. You can also create scripts that contain the configurations you want for easier setup later. And they do not change the default settings as often.

      With Firefox, not everything is configurable. In addition, many people who use it wouldn't know how to change many settings that are changeable. Firefox distributes compiled versions, that people just kind of install. Many people who use it cannot understand basic operating tasks. There is no way to do a centralized setup or configuration. Finally, they change the defaults on people all the time.

      Linux and Firefox are not really comparable, next to the FOSS factor.

    16. Re:In other words by Anonymous Coward · · Score: 0

      What's a ninche?

    17. Re:In other words by jellomizer · · Score: 4, Insightful

      Yes, It sounds like their are doing a lot of crazy work where all they need to do is back track and go with a normal version numbers to fix the problem.

      Mozilla JUST ADMIT YOU WERE WRONG! and go back to what was working before. Being wrong isn't a sin that is how we all learn, if you are going to bull headed and just make a lot of extra work just to cover your mistake, so you can save face, is plain stupid.

      --
      If something is so important that you feel the need to post it on the internet... It probably isn't that important.
    18. Re:In other words by 0123456 · · Score: 1

      You make it sound like firefox comes bundled with a full-on SQL server when in reality it just reads and writes to a SQLite database and some XML files.

      And SQLite has horrible write performance and Firefox keeps writing crap to the database that I don't care about, like the last time I visited a bookmark. If I remember correclty SQLite will call sync() three times every time it updates an entry.

      That does ensure that you don't lose all your bookmarks when Windows crashes anymore, but only at the cost of reduced performance all the time.

    19. Re:In other words by Anonymous Coward · · Score: 0

      And yet bookmark operations are still instant for me. You're whining about a performance problem that doesn't exist. And if it does - submit patches.

    20. Re:In other words by Culture20 · · Score: 1

      You realize that those options were added after the fact and were met with resistance from the devs? They wanted no way for end users to disable the awesome bar. Hiding the option in about:config was their belated compromise (and even then it didn't restore the exact URL bar functionality, thus the oldbar extension).

    21. Re:In other words by Chris+Mattern · · Score: 1

      Apache doesn't cut it. It is just popular in a ninche that is "people who run web servers".

      Web server software doesn't cut it because it's not popular with people who aren't running web servers? Hanh?

      Also, "niche".

    22. Re:In other words by Culture20 · · Score: 2

      How long have people been begging for an MSI based installer, and some Group Policy support that is "official".. sure there are scripts that can hack GPO support in, and 3rd party builds of the MSI installer.. but people have been asking since Firefox 2...

      People have been asking officially since at least 2000.
      https://bugzilla.mozilla.org/show_bug.cgi?id=52052
      https://bugzilla.mozilla.org/show_bug.cgi?id=231062

    23. Re:In other words by Lunix+Nutcase · · Score: 2

      You're whining about a performance problem that doesn't exist.

      O rly? They even have knowledge base articles about issues related to performance and corruption of hte SQLite file that stores bookmarks. So, no, he was not whining about something that didn't exist as a simple Google search would show you more examples.

    24. Re:In other words by 0123456 · · Score: 1

      And yet bookmark operations are still instant for me.

      It's not bookmark operations, it's general sluggish performance when Firefox decides it wants to write lots of data to the database. It's particularly horrible on filesystems like ext3 where fsync translates into 'write all pending data to the disk'.

      You're whining about a performance problem that doesn't exist. And if it does - submit patches.

      Sure:

      Patch - remove all SQLite code.

      Done.

    25. Re:In other words by BZ · · Score: 1

      The answer to your last question is, as always, opportunity cost.

      That is, they could take such a stab by not doing something else instead. And then you have to decide whether the something else is more important.

    26. Re:In other words by womprat · · Score: 1

      So? I think most new features, good or bad, are going to be met with resistance from devs.

      Besides, I remember being able to turn it off in the first full release that had the awesomebar. Maybe not the betas, but do you really expect every feature to be complete in a beta?

    27. Re:In other words by BitZtream · · Score: 1

      It's particularly horrible on filesystems like ext3 where fsync translates into 'write all pending data to the disk'.

      Basically you mean file systems that aren't broken.

      I've started dealing with ZFS and learned real fucking quick how BAD apps are about this sort of thing that I never noticed before because most filesystems don't actually sync when told to on desktops.

      Modern FSes will sync to the point of stable journaled recovery, but not actually get all the data on disk by the end of the sync.

      When you put shitty apps that think sync is free on top of these filesystems, all of the sudden you get completely asstastic performance.

      I never noticed this when using the standard ufs in FreeBSD because apparently ... sync doesn't actually sync by default, it ensures soft updates consistency but thats it, so all of the sudden what was a perfectly acceptable NFS server for virtual machines ... when switched to ZFS which actually DOES sync and not return until the sync is completed ... well, now NFS performance has become completely unusable. Want to make it usable? Just tell ZFS not to ignore sync requests that it doesn't generate itself internally ... oh look, right back to where we were pre-ZFS ... So much for a cheap NAS server, had to throw in a bunch of expensive battery backed controllers to make sync not suck ass.

      Sigh ...

      --
      Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
    28. Re:In other words by BitZtream · · Score: 2

      After all, the Linux kernel doesn't wait for anyone, but that doesn't seem to be a huge problem for corporations

      Funny, if you look at who writes the code of the Linux kernel ... you'll find them ... working for big companies ... who use Linux.

      So whats actually happening even though you can't see it is that ... the linux kernel gets the futures companies want because MOST of the kernel devs actually work on Linux FOR some big company.

      You do know what Linus does to pay the bills, right?

      --
      Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
    29. Re:In other words by Anonymous Coward · · Score: 0

      What's funny is that nearly all the contributions to Mozilla come from corporations.. one corporation in fact.. one that has its own browser in development. Hmm.. uh-oh.

    30. Re:In other words by kangsterizer · · Score: 1

      actually it means go yell in the UG what you want them to do

    31. Re:In other words by antdude · · Score: 1

      Is there a reason why Mozilla doesn't do it? Is it money related?

      --
      Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
    32. Re:In other words by Anonymous Coward · · Score: 0

      You do know what Linus does to pay the bills, right?

      Yeah, he sits around being awesome. With penguins.

      The money just magically happens while he's frolicking in a wintry wonderland.

    33. Re:In other words by Anonymous Coward · · Score: 0

      See, when managing a fundamental core app (like the default webbrowser) for an ORGANIZATION, it really isn't much of a comeback to say "just set it in about:config". Yeah, I'll get right on that Chief. With the 4,000+ desktops my team would need to individually visit, you mostly sound like an ignorant ass.

    34. Re:In other words by yuna49 · · Score: 1

      After all, the Linux kernel doesn't wait for anyone, but that doesn't seem to be a huge problem for corporations

      You're joking, right? If I had to guess, I'd suspect that most corporate users of Linux in the server room are running some version of RH or CentOS 5.x. My CentOS 5.5 boxes are running 2.6.18 with backported security updates.

    35. Re:In other words by bill_mcgonigle · · Score: 1

      See, when managing a fundamental core app (like the default webbrowser) for an ORGANIZATION, it really isn't much of a comeback to say "just set it in about:config". Yeah, I'll get right on that Chief. With the 4,000+ desktops my team would need to individually visit, you mostly sound like an ignorant ass.

      See, you're not really in IT, that's why you're posting as AC. Real IT shops have deployment systems and configuration management systems. If a company wants to push out Firefox without the awesomebar, that's a near-trivial undertaking.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    36. Re:In other words by Culture20 · · Score: 1

      See, you're not really in IT, that's why you're posting as AC. Real IT shops have deployment systems and configuration management systems. If a company wants to push out Firefox without the awesomebar, that's a near-trivial undertaking.

      Sure, you can script a copy of userpref.js into every user's profile, but what if you want to restrict certain config options? You could restrict them all by making the file read only and owned by administrator, but that might not be the desired behavior. It might be better to have an overrideuserprefs.js that can be set to be read only and admin owned, but that takes a recompile. This enterprise forum might allow for suggestions like this which the devs ordinarily wouldn't consider.

    37. Re:In other words by styrotech · · Score: 1

      After all, the Linux kernel doesn't wait for anyone, but that doesn't seem to be a huge problem for corporations

      Not really, there are occasional long term support versions of the kernel - eg 2.6.32 is still getting fixes applied upstream. I think the previous long term support version (2.6.27?) is still being supported too.

      This is where the Firefox situation is different, they (currently) won't provide any fixes at all for their previous release which might only be six weeks old these days.

    38. Re:In other words by guanxi · · Score: 1

      Sure, you can script a copy of userpref.js into every user's profile, but what if you want to restrict certain config options? You could restrict them all by making the file read only and owned by administrator, but that might not be the desired behavior. It might be better to have an overrideuserprefs.js that can be set to be read only and admin owned, but that takes a recompile. This enterprise forum might allow for suggestions like this which the devs ordinarily wouldn't consider.

      It's been considered and implemented for a long time. There are several solutions.

    39. Re:In other words by fuzzywig · · Score: 1

      Ditto, it's what us sysadmins have been crying out for. And no need to re-invent the wheel, just pick up the same GP settings we use to configure IE (eg proxy settings, bookmarks etc.) and then we only need to configure once.

    40. Re:In other words by JMJimmy · · Score: 1

      It wasn't about a specific feature. Yes I did not like it, I found it distracting and it rarely brought up what I wanted or if it did it would be near the bottom or require me to type nearly the entire url anyway. That said, the reason I believe that was their break from what users wanted to what devs wanted is because it was the first major UI change that did not have customization options.

      As instagib points out you can now set a flag to turn it off but that removes the urlbar autocomplete entirely. From the start is should have had configuration options as to what you wanted included when you used auto-complete. Some users may just want urls, some may want to include bookmarks, others yet may not want bookmarks but they do want titles to be included. There is just no control over the feature, it's devs spoon feeding what they want to the masses. That's fine in the background/technical end where standards need to be met, UI and behaviour changes should always maintain customization options.

      From themes/personas, optional toolbars, addons, the ability to switch button sizes/positions, etc. Firefox has always been about personalization until that feature. Since then FF4 removed text menus affecting the visually impaired and less computer literate, removed small buttons as a UI option for UI minimizers, and removed much of the previous control users had over the UI.

  4. Don't bother by Anonymous Coward · · Score: 1

    Mozilla lost this race long ago. Chrome has the tools I need (MSI packages, GPO templates, etc.) to deploy it properly throughout my organization. Mozilla can go back to making Super-Duper(tm) bookmarks or whatever.

    1. Re:Don't bother by Toonol · · Score: 1

      I don't think it has lost. It's still ahead of Chrome in marketshare, and it's not like Chrome has a huge foothold in business.

      That said, I don't think current management has a chance of doing what is necessary to win. They've taken their enormous lead in quality and squandered it with marketing stunts and foolish decisions. Forcing the awesomebar, crippling the status bar, database driven bookmarks, marketing-driven version numbers...

    2. Re:Don't bother by Americano · · Score: 1

      Here's my enterprise anecdote: Corporate standard is IE 8; Firefox is also available as a corporate-sanctioned browser. Years ago, before they started supporting FF, the engineers all had Firefox, and everybody else used IE6, because the engineers knew how to find, install, and use Firefox.

      I see that same thing happening with Chrome today: most of the engineers I work with run Chrome as their "unofficial"-but-default browser; IE 8 & FF are installed too, but they are only used when necessary. And most of the engineers use IETab for Sharepoint and other IE-specific functionality, and simply avoid using FF unless something is completely unusable in Chrome, IETab, or IE itself. And sites matching that description are pretty few & far between these days.

      I think Mozilla is at very real risk of losing a lot of the inroads into enterprise that it has made over the past few years.

    3. Re:Don't bother by Anonymous Coward · · Score: 0

      I suppose I should clarify. FOR ME, Mozilla lost the race. I don't have time to hold my breath and Chrome is the best fit for the the needs we have now. Since Mozilla has been ignoring these requests since 2000, I'm giving them no benefit of the doubt. They can go do whatever the hell they want at this point - I'm not going to be supporting Firefox internally, ever. I'm an anecdote to be sure, but I wonder how many more like me there are?

    4. Re:Don't bother by Anonymous Coward · · Score: 0

      Ever try to view the web interface on a 5 year old dell switch with chrome? (Hint: it won't work, it even wanrrs you about "unexpected" results using firefox)

  5. Are you on the same planet? by Anonymous Coward · · Score: 2, Insightful

    Online life is evolving faster than ever

    No, it's not evolving faster than ever. Everything works with IE7. All innovations beyond IE7 are just sugarcoating, most of them invisible on the deployed web. The slow players still decide which features are widely available. The other players are falling over their own feet trying to outrun each other and the users are getting annoyed by an ever changing environment that doesn't let them do their work, for no benefit at all. The browser is a tool, you tools!

    1. Re:Are you on the same planet? by wolrahnaes · · Score: 0, Troll

      The problem you describe is caused by exactly the thing they're trying to solve here. Corporate users are stupid and think that deployment strategies which worked 10 years ago still make sense. Anything that touches the internet needs to be able to be updated rapidly, so the corporate "this version is the version we use for the next five years" idea needs to go away.

      If you have a web app you consider critical, testing it against a browser version is fucking retarded. Test it against standards, or failing that at least test it in multiple current-generation browsers. If it's good in either of those cases, you can feel comfortable that it won't be broken by a browser update, which then means you won't be risking your data security and pissing off web developers by dragging around shitty old browsers.

      As far as I'm concerned, IE8 is the oldest browser that anyone should care about. If you can't at least get to that, you are doing it wrong.

      --
      I used to get high on life, but I developed a tolerance. Now I need something stronger.
    2. Re:Are you on the same planet? by Microlith · · Score: 2

      No, it's not evolving faster than ever. Everything works with IE7. All innovations beyond IE7 are just sugarcoating, most of them invisible on the deployed web.

      So what you're saying is that Microsoft's fat-ass is still holding the internet back?

    3. Re:Are you on the same planet? by Anonymous Coward · · Score: 0

      I know, right? We should all test against standards, for example HTML5. Oops, that has become a moving target too, because the folks who make the browsers and the standards feel to constricted by having to make decisions that can be relied upon for a couple of years. Nevermind that testing against a standard is useless when there wasn't even one complete and correct implementation before they decided to abandon the concept of an actual web standard, least of all in currently deployed browsers.

      This isn't to say that a web-facing program doesn't have to have an update mechanism, but there are bug fixes and there is featuritis. Not too keen on the latter.

    4. Re:Are you on the same planet? by Lunix+Nutcase · · Score: 2

      Yeah, let's all be running continuously changed alpha quality code because only idiotic dinosaurs want to stick with stable, tested code instead. Oh and while we are at it let's rewrite all code that doesn't use a programming language that is older than 6 months. I mean jeez, if you aren't rewriting everything with the next latest toy language that is coming out you are just so dumb.

    5. Re:Are you on the same planet? by Culture20 · · Score: 1

      The problem you describe is caused by exactly the thing they're trying to solve here. Corporate users are stupid and think that deployment strategies which worked 10 years ago still make sense. Anything that touches the internet needs to be able to be updated rapidly, so the corporate "this version is the version we use for the next five years" idea needs to go away.

      You're misunderstanding corporate IT. They _want_ to update software that touches the Internet ASAP, mostly for security reasons. They don't want to allow end users to update software willy nilly however, and although you can update FF with some psexec fu, just a simple "update silently now" executable would do wonders for scheduled tasks, psexecs, or active directory updates ( without having to download a mar and map drives to copy directories).

    6. Re:Are you on the same planet? by BitZtream · · Score: 0

      Corporate users are stupid and think that deployment strategies which worked 10 years ago still make sense.

      Says some random moron on slashdot.

      You may think that its changed, but you clearly have no actual experience or business sense.

      Your entire post acts as if businesses have 0 operational costs and docking around with browsers all the time for no reason is something they are required to do.

      Old browser works on our stuff ... new browser might not ... why upgrade ... because a dude on slashdot says the old ways don't work anymore ...

      So what company are you leading with all your wisdom and insight and clearly highly advanced way of thinking about this stuff? Perhaps your company can show us the way? Whats the name of the company you own again? Okay, whats the name of the company that you CTO for, and are following your direction in this respect? Whats that? You're unemployed and mom wants you out of the basement?

      If you have a web app you consider critical, testing it against a browser version is fucking retarded. Test it against standards,

      Show me ANY WEB BROWSER that follows ANY STANDARD to the letter. Okay, I'll make sure my web apps are standards compliant ... too bad there isn't a fucking browser that actually complies to the standards anywhere on the planet.

      You're an ignorant idiot with no actual real world experience at all. I've seen high school kids with more knowledge about this than you seem to exhibit.

      --
      Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
    7. Re:Are you on the same planet? by lennier · · Score: 1

      Anything that touches the internet needs to be able to be updated rapidly

      No, anything that touches the Internet needs to be able to be security patched rapidly, but feature upgraded only when doing so won't break essential sites.

      Even better would be if programmers writing Internet-facing code never released security vulnerabilities in the first place, or at least had the ability to detect when they were writing code which was boneheadedly never-ever-do-this, this-shouldn't-even-compile wrong. But apparently that's utterly technically impossible.

      This is a little like saying "it would be nice if architects designing 50-story buildings in downtown urban areas refrained from rolling the dice and randomly packing load-bearing columns with new, untested mixes of dynamite, plutonium and asbestos.. That's why every week you see construction crews pulling truckloads of experimental explosive compound out of buildings and replacing it with new, also untested mixes. We'd all love to live in a world where dynamite and plutonium weren't the preferred structural building materials - but you gotta have progress, right?

      --
      You are not a brain: http://books.google.com/books?id=2oV61CeDx-YC
    8. Re:Are you on the same planet? by Lennie · · Score: 1

      Just say it, corporate users want: security-only updates.

      --
      New things are always on the horizon
  6. Wait a minute... by AngryDeuce · · Score: 1

    Didn't they just say, in so many words, that Business wasn't their focus? Is this doublespeak, or have they forgotten already?

    1. Re:Wait a minute... by Darth_brooks · · Score: 2

      No, one of the devs on one of the teams basically said "fuck enterprise", while several folks from the foundation showed up in the slashdot thread to say "He doesn't speak for all of us."

      --
      There are some people that if they don't know, you can't tell 'em.
    2. Re:Wait a minute... by Marc+Madness · · Score: 1

      I think they are acknowledging that enterprise is comprised of people. So they are not focusing on business as such, but the people involved therein (although how that's different from a practical stand-point is not apparently clear to me).

    3. Re:Wait a minute... by Anonymous Coward · · Score: 0

      And yet Dotzler is in charge of just that, speaking for the Mozilla Foundation and marketing for Firefox. Dotzler has ruined many people's plans to roll out Firefox precisely because of his remarks and nothing's being done about it.

      As usual, the Mozilla Foundation will pretend to listen to users and then do whatever the fuck they feel like doing because they know that for many Linux users the only other choice is Google Chrome, which doesn't have the same kind of great extensions that are available for Firefox (NoScript for example).

    4. Re:Wait a minute... by psyclone · · Score: 1

      They got a backlash of user feedback.

      Here's hoping they change back to a sane versioning scheme so add-ons won't have to be upgraded so often.

    5. Re:Wait a minute... by Anonymous Coward · · Score: 0

      There is also opera...

    6. Re:Wait a minute... by BZ · · Score: 1

      Where did "Linux" come into this, if I might ask?

      My general experience with Firefox on Linux is that Mozilla listens to the people who send them feedback (chiefly distros) too much. Unfortunately, these people are saying things that happen to be false (e.g. that Linux users really want Gnome theme integration more than, say, performance improvements; the two are mututally exclusive in many cases due to the way the Gnome theme system works).

    7. Re:Wait a minute... by asa · · Score: 1

      "And yet Dotzler is in charge of just that, speaking for the Mozilla Foundation and marketing for Firefox."

      Actually, I'm not marketing for Firefox. That was a long time ago (years.) Today I'm the Director managing the Firefox desktop product.

      - A

  7. Be sure to... by dreemernj · · Score: 1

    ...tune in next week for the continuing drama.

    --
    1 (short ton / firkin) = 89.1432354 slugs / keg
  8. Starting Point by Anonymous Coward · · Score: 1

    Don't release a buggy browser with new features only half implemented, and/or poorly tested just for the sake of a bigger version number.

    My advice to everyone? Don't use firefox anymore.

  9. Provide MSI and Support for Group Policy by Anonymous Coward · · Score: 1

    Our it department would be more than happy to roll out Firefox but the lack of msi and group policy support is just a plain no go for them in our field (banking it).

    1. Re:Provide MSI and Support for Group Policy by Anonymous Coward · · Score: 1

      Your field is banking it?

  10. Meanwhile by Anonymous Coward · · Score: 0

    MSI packages and Group Policy templates are available here: http://www.frontmotion.com/FMFirefoxCE/download_fmfirefoxce.htm

    1. Re:Meanwhile by denis-The-menace · · Score: 1

      Yes but until frontmotion==Mozilla corps will see it as a modified version of Firefox.

      I say Mozilla has about 3-6month before what small Corporate street cred they have is gone.
      After that it won't matter. This story will hit the trade magazines and the hype towards Chrome will be against them in Corps' minds.

      The only card Mozilla will have left is that Chrome makes it easier to track its users. And if they play that card, Google will pull the plug on their cash flow.

      --
      Obama's legacy: (N)othing (S)ecure (A)nywhere and (T)error (S)imulation (A)dministration
    2. Re:Meanwhile by Anonymous Coward · · Score: 0

      Who wants to open their IT infrastructure to some third party software company in Lubbock, Texas. If anything were to hit the fan and the powers that be find out you used a freepackager off the internet from a third party - kiss your job goodbye.

      Frontmotion has been around for a while and is probably fine, but your opening yourself up to reprisal if anything goes up in smoke.

  11. "Re-establishing" by dreemernj · · Score: 3, Interesting

    This was the story in 2007 when they first tried this: New Mozilla working group aims to simplify enterprise Firefox deployment

    --
    1 (short ton / firkin) = 89.1432354 slugs / keg
    1. Re:"Re-establishing" by rbrausse · · Score: 5, Informative

      in total three "meetings". and - history repeats itself - the same problems with Firefox in enterprise environments:

      * Packaging (MSI)
      * Settings Management (GPO)

      And the blog with the meeting notes is deleted. as I expected: This was a _really_ important project for Mozilla...

    2. Re:"Re-establishing" by pspmikek · · Score: 5, Informative

      The previous EWG was my effort and yes I believe it it failed because of a lack of interest by Mozilla.

      The old information is here:

      https://wiki.mozilla.org/Enterprise/Old

      And yeah, it is sad that the blog came down with the meeting notes.

      It looks like the wayback machine caught my back though

      http://web.archive.org/web/20080608175739/http://e2pt0.blogspot.com/2007/08/firefox-ewg-meeting-2.html

      At least for some posts.

  12. Hope 1 Expectations 0 by Darth_brooks · · Score: 4, Insightful

    I'll follow and contribute as much as I can, hoping that something changes, but having the cold expectation that nothing will. On the windows side, FF essentially needs three things:

    1. MSI for deployment.
    2. GPO management.
    3. Mozilla branding and support for the above, so I can automatically update the browser.

    That's the peanut butter and jelly for enterprise. I can get the first two from other people, why not you guys? Why it has taken this long to get to this point is beyond me. Seriously, the 'battles' between chrome, opera, and firefox are like watching soccer moms fight to the death over the last tickle me elmo at a Walmart when there's a toy store next door with aisles full of the same toy, cheaper. Seriously, do you guys want to keep scratching with each other over grandma's machine, or do you guys want people like me to push your product to 50 machines at once, and let 50 people *see and use* your browser, learn for themselves that it's better, and take it home with them?

    --
    There are some people that if they don't know, you can't tell 'em.
    1. Re:Hope 1 Expectations 0 by Anonymous Coward · · Score: 0

      All your hopes and prayers have already been answered:

      http://www.frontmotion.com/Firefox/

    2. Re:Hope 1 Expectations 0 by Darth_brooks · · Score: 1

      Read that list again:

      "1. MSI for deployment.
      2. GPO management.
      3. Mozilla branding and support for the above, so I can automatically update the browser.

      That's the peanut butter and jelly for enterprise. I can get the first two from other people"

      Auto update of the browser does not work with FM for obvious reasons. I can re-push via GPO, but then I get the Frontmotion branding back (getting rid of icons is trivial, but it's still a pain in the ass. FM 3 required some reg hacks, 4 at least seems to be sane enough to just dump a shortcut in All Users.) Is it really that hard for mozilla to say "damn, these guys have their shit together. Maybe we should be doing exactly this."

      --
      There are some people that if they don't know, you can't tell 'em.
    3. Re:Hope 1 Expectations 0 by VortexCortex · · Score: 1

      Seriously, do you guys want to keep scratching with each other over grandma's machine, or do you guys want people like me to push your product to 50 machines at once, and let 50 people *see and use* your browser, learn for themselves that it's better, and take it home with them?

      Nah, we'll just make half-hearted attempts to quell unfounded "enterprise" FUD and let all the end users at home or in school enjoy our product's benefits, then take it to work with them -- You know, like BBSs, the Internet, Cellphones then Smartphones, etc, etc.

    4. Re:Hope 1 Expectations 0 by Darinbob · · Score: 1

      Only old luddites still use computers in the enterprise! The new hip kids are all unemployed and on the streets with their smart phones!

  13. Active Directory Integration? by BlueToast · · Score: 2

    Does this finally mean that there will eventually be complete Active Directory integration or something similar of a sort? Having a centralized way to manage Firefox clients would be brilliant.

  14. The real plan? by mrjatsun · · Score: 3, Insightful

    o stop supporting enterprise deployments (by rapid release, no bug fixes only)
    o start an enterprise working group
    o profit! (charge for support)

    1. Re:The real plan? by Anonymous Coward · · Score: 0

      For similar reasons, I have been expecting a Chrome enterprise edition because of the rapid changes. Many places like to pay for support as an option, just to have that insurance in case of a problem. I mean, you can buy support for many otherwise free things, just look at Linux and IE.

    2. Re:The real plan? by Kalriath · · Score: 1

      Just get a Google Apps account. Even having one GA user license gives you the ability to call Google (on the phone!) and get support for Chrome.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
  15. Re:Mozilla for the Enterprise by Anonymous Coward · · Score: 0

    wtf is a faget anyway?

  16. Re:Mozilla for the Enterprise by Anonymous Coward · · Score: 1
    What the hell is a faget? Oh wait I found it:

    This hideously misspelled derivation of 'faggot' is primarily used by uneducated rednecks who fail to see the irony of calling someone a derogatory name but having no idea how to say the word.

  17. You don't need anything particularly fancy. by Millennium · · Score: 5, Insightful

    1) Throw the MCSEs a bone: give them their MSIs and GPOs. Alternatively, bless FrontMotion's MSI and GPO projects as the "official" ways to get these things for businesses that need them.

    2) From time to time (but no more frequently than once every two years), tag a release as Long-Term Support. This is exactly what it says on the tin: this release gets official support from Mozilla, including security fixes, until the next Long-Term Support release.

    3) Support for a non-LTS release is not dropped until there have been at least two major releases since then. Under the current situation, that means FF5 support would not be dropped until the release of FF7, which in turn would not be dropped until the release of FF9.

    I realize that long-term or even mid-term support is not sexy. Techies always want to live on the bleeding edge. But not every person or business is willing, or even able, to do that. They also need to be taken care of.

    1. Re:You don't need anything particularly fancy. by Anonymous Coward · · Score: 0

      FF5 support would not be dropped until the release of FF7, which in turn would not be dropped until the release of FF9.

      So... support should be dropped sometime next week?

    2. Re:You don't need anything particularly fancy. by Lieutenant_Dan · · Score: 1

      Agree 100%. It's to their benefit, while many companies will most likely not contribute anything, there will be some that will do in order to provide functionality that they need or merely to address existing bugs/limitations.

      I would add a 4th item though:
      - Hire/assign an Enterprise Marketing Droid. I appreciate Mozilla is an open and free-thinking org, but some stuffthat comes out of it sometimes freaks the hell out of risk-averse senior IT management. Call it "damage control".

      --
      Wearing pants should always be optional.
    3. Re:You don't need anything particularly fancy. by BZ · · Score: 1

      So your proposal #2 + #3 is basically that Mozilla spend a bunch more engineer time on support than they ever have, right?

      Are you planning to provide those engineers, their management structure, training, etc?

      Or are you hoping they'll magically appear? What do you suggest Mozilla _not_ work on to do that?

    4. Re:You don't need anything particularly fancy. by Anonymous Coward · · Score: 0

      Where's the +7 save your business rating?

    5. Re:You don't need anything particularly fancy. by Toonol · · Score: 1

      What's strange is that there is no doubt that you're exactly right. Your suggestions have been repeated by numerous other posters in this and other threads. There's nothing, really, to discuss. There's no issues for a user group to delve into. It simply is a case of waiting for the powers-that-be to commit to making those changes.

      They aren't committing, which makes me suspect that this group is simply a bone thrown to divert criticism.

    6. Re:You don't need anything particularly fancy. by BitZtream · · Score: 1

      Well, they could cut exec salaries and easily hire more people.

      But yes, people want Mozilla to do things they never have instead of continuing to be a shitty half baked OSS project which, impressive as it is, has always been 'not quite ready to release'.

      --
      Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
    7. Re:You don't need anything particularly fancy. by Millennium · · Score: 1

      Currently they have enough resources to keep four versions in the air at once: Current, Beta, Aurora, and Nightly. This is actually up from the previous structure, where they had up to three versions in the air at once: current, one back, and (sometimes) Beta.

      It's also worth noting that the people taking care of Current already have a lighter load than the other three teams, because their product has already gone through multiple rounds of QA and isn't getting any new features. My thought, therefore, is to augment the transform the Current team into a Maintenance team that handles one version back and the LTS. This will probably require some augmentation, but not nearly as much as two entirely new teams, and likely not even as much as one. There's also a number of large OSS projects out there which can be tapped for advice on how they maintain older products.

      Bottom line: while it might require some augmentation, it is nowhere near "way more than it will ever have."

    8. Re:You don't need anything particularly fancy. by jalefkowit · · Score: 1

      Perhaps these "enterprises" that so dearly want these things could put some money together and give it to Mozilla to cover the added costs. That way the cost to any one company would be minimal, and they'd all get what they want. And "enterprises" are supposed to be huge businesses anyway, so the cost of a developer or two should be chicken feed to them.

      Oh, who am I kidding? It's cheaper to just make demands.

    9. Re:You don't need anything particularly fancy. by BZ · · Score: 1

      You don't even have to cut exec salaries to hire more people. But:

      1) Hiring more people may not move the work faster (c.f. mythical man-month).

      2) Hiring people is not that simple. Mozilla has been actively hiring for years, and just can't find enough people so far.

      3) By your argument, the same people could be hired to work on something more important, if something else seems to be more important.

    10. Re:You don't need anything particularly fancy. by Darth_brooks · · Score: 1

      What do you suggest Mozilla _not_ work on to do that?

      The 15 different iterations of the search / address bar that we've had in the last couple months would be a nice start. They could also merge existing projects such as Frontmotion's work into their own rather than reinvent the wheel....

      --
      There are some people that if they don't know, you can't tell 'em.
    11. Re:You don't need anything particularly fancy. by BZ · · Score: 1

      Currently there is one version actively being developed, a testing version which fixes may need to be backported to, a release candidate (requires basically no resources, more or less by definition) which is misnamed "Beta", and a release version which only gets a fix in extraordinary situations (actively-exploited zero-day). So there are only two versions to really support, and they're very similar to each other so most of the time the same patch applies to both.

      With LTS, you lose that last benefit; backporting patches to 3.6 and 3.5 during 4.0 development was a huge production; they often had to be redone from scratch because the code had changed so much.

      Note that I didn't say you need to double the number of people or anything, but based on workload in the past I'd guess we're taking 20% more work. And not just for the new people, because code reviews are spread out over existing module owners and are a large part of the time commitment.

      Now this is all doable; if one is willing to slow down new work by 20%. That's how other projects do it, after all, and how Mozilla has done it in the past. But it's not clear that this is necessarily a good tradeoff. Maybe it is, maybe not.

      > nowhere near "way more than it will ever have."

      That's not what I said. I said "way more than they ever have" (past tense, not future; significant difference in meaning).

    12. Re:You don't need anything particularly fancy. by BZ · · Score: 1

      What would be useful would be providing people, not money. Mozilla _has_ money if you look at financial statements; what they have a hard time doing is finding good people and working them into the organization (c.f. mythical man-month for the problems with the latter).

    13. Re:You don't need anything particularly fancy. by BZ · · Score: 1

      > The 15 different iterations of the search
      > / address bar that we've had in the last couple
      > months would be a nice start.

      Which of the people working on that would have been able to write core security fixes for stable branches?

      > They could also merge existing projects such as
      > Frontmotion's work into their own

      That would involve Frontmotion wanting that, no? Do they?

      Seriously, this has been discussed literally for years, pretty seriously. It's not like the people involved are dumb. It's just that the problem is harder than it seems, assuming you have goals other than legacy suppor...

    14. Re:You don't need anything particularly fancy. by lennier · · Score: 2

      What do you suggest Mozilla _not_ work on to do that?

      Oh, ask me! Ask me! I have lots of ideas! For starters hw about:
      * all of WebGL, because I don't need another gaping security hole in my browser and WebGL was the first thing that crashed Firefox 4 on our work computers
      * the entire 'personas' architecture, because why does anyone need fifty 'Harry Potter' skins that make it harder to see where the buttons are?
      * all of HTML5 until some adult enters the room and actually writes a standard for it

      In fact, how about not adding any 'features' at all until you fix all the security bugs. All of them. As a user, I really don't care about if CSS Acid Test 15 renders SpinningFlywheelWidget 1 or 2 pixels to the left. All the websites I go to already work just fine. I just want to not get my bank account hacked and all my money stolen because you left fifteen use-after-free errors inside the coolshinywidget.geewhiz library five years ago and never ran any tests on that section of code.

      Can you give me security? Please? That's the only feature I want. Everything else is just window dressing.

      --
      You are not a brain: http://books.google.com/books?id=2oV61CeDx-YC
    15. Re:You don't need anything particularly fancy. by lennier · · Score: 1

      Which of the people working on [any feature] would have been able to write core security fixes for stable branches?

      Um. This is a trick question right? All of them. Because if your programmers can't write secure code, why are they writing Internet facing code?

      See, the mere existence of a question like this ought to put the heebie-jeebies into every programmer in existence. This is the 2010s now! All your code is Internet-facing, security-critical code, all the time! No exceptions! If you can't write secure code, you are getting your computer and all your clients' computers pwned by LulzSec script kiddies! Bad programmer! Stop doing that! I mean it! Step away from that keyboard right now, it is a deadly weapon and you just failed your ownership licence! You are a public health hazard! You are infectious and need to be quarantined!

      But I don't blame the programmers really, I blame the language designers. It should not even be thinkable, in 2011, for any programmer working on an application to even consider writing "insecure" code. The language should just automatically take care of all known security vulnerabilities, because it's actually impossible for human brains to handle this. We invented garbage collection in the 1960s, right? And array bounds checking? Why are programmers still having to juggle this stuff manually?

      Grr. Bad language designers. You are why the Internet can't have nice things!

      --
      You are not a brain: http://books.google.com/books?id=2oV61CeDx-YC
    16. Re:You don't need anything particularly fancy. by Anonymous Coward · · Score: 0

      Fuck you.

    17. Re:You don't need anything particularly fancy. by westlake · · Score: 1

      Perhaps these "enterprises" that so dearly want these things could put some money together and give it to Mozilla to cover the added costs.

      Moz lives and dies by the add click.

      Show me some evidence that Moz is acrtively pursuing alternative sources of funding and is willing to make the concessions needed to get there.

    18. Re:You don't need anything particularly fancy. by BZ · · Score: 1

      > Because if your programmers can't write secure
      > code, why are they writing Internet facing code?

      The location bar, which is the context here, is NOT internet-facing, actually.

      But that's not the point. Writing security fixes doesn't just require writing secure code but also an understanding of what the security model is, why it failed, and how to fix it. This is much harder than writing code to start with.

      > The language should just automatically take care
      > of all known security vulnerabilities

      The language can take care of mechanism (and yes, C++ falls down here, say), but it can't do _policy_. The language has no idea that sending one file (the one the user selected in the file input) to the web site is secure but sending some other file (/etc/passwd, say) is not.

      > We invented garbage collection in the 1960s, right?

      Yep, and have been fixing it to not suck ever since. We're getting pretty close. At this point, with custom hardware specially designed for it, you can more or less get a GC system that doesn't hurt either throughput or latency too much. Too bad normal people aren't running this hardware...

      > And array bounds checking? Why are
      > programmers still having to juggle this stuff
      > manually?

      Because the languages that handle it for you have some drawbacks. It's being worked on (Go, Rust, that sort of thing) and I really hope that problem will be in our past soon. Then again, there were hopes for that with Java, and that got screwed up (startup time too slow, etc).

    19. Re:You don't need anything particularly fancy. by Anonymous Coward · · Score: 0

      "waiting for the powers-that-be to commit to making those changes"

      Uh. Wait a second. Firefox is a community project. So stop complaining and start coding.

      Seriously. If you want this MSI thing or improve or introduce specific features that make sense in an enterprise environment then make an investment. Write code. Dedicate a resource. Spend a little money on it. Whatever.

      Must be possible in this time where companies IPO for billions of dollars. No?

      I bet Mozilla is more than willing to have constructive talks with people who want to contribute.

      This is not rocket science. Just do it.

    20. Re:You don't need anything particularly fancy. by guanxi · · Score: 1

      Boris - Charge for LTS? The people who need it can and will happily pay the cost, which should be minimal per user. Heck, you could even make a profit to support additional enterprise features (msi, gpo) and other FF development; I don't think anyone would complain.

      I suspect I'm not the first to suggest this hybrid model, which as you know has been used by many open source organizations. What happened in prior discussions?

      guanxi

    21. Re:You don't need anything particularly fancy. by guanxi · · Score: 1

      What would be useful would be providing people, not money. Mozilla _has_ money if you look at financial statements; what they have a hard time doing is finding good people and working them into the organization (c.f. mythical man-month for the problems with the latter).

      Other software organizations hire, integrate, and are productive with many more developers than Mozilla. It's hard to believe Mozilla's problem is human resources.

    22. Re:You don't need anything particularly fancy. by BZ · · Score: 1

      > Other software organizations hire, integrate, and are
      > productive with many more developers than Mozilla.

      Yes, but they also typically took their time growing to that point.... Mozilla Corp has grown by at least a factor of 3 in size over the last few years. That's always pretty difficult.

      Note that the problem is not just hiring people, but hiring people who actually get open source (and don't get upset when they don't get checkin privileges their first day on the job, will actually work well with non-employee contributors, etc). Ending up with an "open source" project like Android or various other "throw the source over the wall every so often" cases is not a goal here.

    23. Re:You don't need anything particularly fancy. by BZ · · Score: 1

      I think the upshot in previous discussions was that Mozilla needs the core people working on the things they're actually working on more than it needs the money.

      Or put another way, nothing is stopping other organizations from just paying people to do LTS (and Debian and Red Hat have done just that, with Mozilla providing the bug database, version control setup, some code reviewer bandwidth, etc). Presumably if people want _Mozilla_ to do LTS and pay for it (as opposed to paying a third party) that means they want something more than than those things... the question is what.

    24. Re:You don't need anything particularly fancy. by guanxi · · Score: 1

      Thanks for explaining. I would be concerned about software whose security patches are produced by a 3rd party. Some things need integration with the organization's knowledge, processes, etc, and aren't good candidates for outsourcing. Maybe that is the concern of others, too; I don't have experience with Debian and Red Hat's patches, however.

      Thanks again; it's great that Mozillians are engaging the public on this issue.

  18. security additions by Anonymous Coward · · Score: 0

    Please discuss the security additions I hope the security interest additions

  19. lock down by Anonymous Coward · · Score: 0

    user based add ons / extensions / plugins under their own profile directory is the #1 problem for deployments.

    It is almost as bad as giving every user admin privileges on their machine.

  20. Hey, that's great! by pionzypher · · Score: 1, Insightful

    Too bad we dumped your sorry asses a few weeks ago. -An enterprise user.

    --
    I'll believe in corporations having personhood when Texas executes one... - advocate_one
    1. Re:Hey, that's great! by Anonymous Coward · · Score: 0

      Yay, Patellar reflex!

  21. Stability by rossdee · · Score: 1

    "have never had an add-on broken except when transitioning between major releases."

    Thats fine and all when 'major releases' happen once a year or so. Nowdays its about once a fortnight or so.
    Can you imagine Scotty and Spock having to upgrade the ships software every other episode (or Geordi and Data if you prefer TNG)

    For myself I will probably continue using FF5.x for a while while I try out the competition. I certainly won't be upgrading Thunderbird .

    1. Re:Stability by GooberToo · · Score: 1

      I honestly don't mean to offend, but our society is completely screwed up when we now are being politically correct about the most mundane things, such as which scifi reference is acceptable; ST vs ST:TNG. I'm most definitely getting on my soapbox now.

      If someone was offended by the selection of one, regardless of which one, would we really care? I mean, wouldn't we have identified a serious loser who likely should be marginalized anyways?

      I'm sure you honestly didn't give it a second thought when you wrote that, but that's entirely the point. Many (most?) have been brainwashed into being hyper politically correct at all costs.

      I'm sorry, but had you selected one over the other and anyone was offended, they can go fuck themselves. And if you don't care about my soapbox, *I choose* to not be offended. More power to you!!! Good for you! I completely support that! But then again, I've not been brainwashed.

    2. Re:Stability by Anonymous Coward · · Score: 0

      This guy should get moded up. I was just about to write the exact same thing. Updates every week are bad enough, but I can live with that. But 3 to 4 to 5 in less than a year and screwed up add-ons unsupported hardware every time.
      I went back to try Opera again and found it absolutely beautiful. It has become everything I'd hoped FF would be. Chrome has too many holes yet and is not friendly to user controls. I don't want everyone in the office, airport lounge, or coffee shop checking my most visited sites every time I open a browser. IE 9 looked good at first, but then it just quit working after a MSE update. So I stayed with FF till the Issue of 5 with too many things not working. I did reload FF4 and IE 8, but only use them when I need a separate browser.
      Thank goddess for Opera!

  22. Business Speak by Akima · · Score: 1

    "Enterprise". Hate that word! It feels like one of those [many] vague and esoteric business speak words that managerial-types throw around meeting rooms to try and look clever.

    I thought I'd quickly check Wikipedia before posting this in-case there is some precise and useful meaning of the term and straight away I notice there is a section on the page titled "Definitions" not "Definition". The first sentence of that section is: "While there is no single, widely accepted list of enterprise software characteristics, this section is intended to summarize definitions from multiple sources"

    So nice to be doing freelance programming now and not having to receive instructions from managers. I use the word "instructions" loosely.

    1. Re:Business Speak by Anonymous Coward · · Score: 0

      Enterprise technology done right simply means multi-layered and maintainable. The reason there are so many bad connotations is because shops using Operating Systems that don't provide access all the way down confuse what they do with Enterprise.

      Enterprise without granular access all the way down is a myth no matter how large you become. Due diligence is not just a legal concept, but a design concept. You can't perform due diligence on something you can't see.

      Best yet, real Enterprise means real geeks in real basements doing real technical evaluations and implementations. Just because there are so many bald faced liars out there that jump on the train of technology doesn't mean we need to give up words like 'Enterprise' with generations of history relating to the effective meeting of the future by humanity.

    2. Re:Business Speak by lennier · · Score: 1

      "Enterprise". Hate that word!

      Here's a definition. "Enterprise" means "it just works, it installs, upgrades and uninstalls cleanly, it patches its security holes without breaking other unrelated stuff at the same time, it does all of this in a silent, automated manner on 10,000 workstations at once, and it doesn't spend all its development budget on animating a flashing monkey in a million pixels and chasing the fickle consumer market instead of just doing its job."

      Most "Enterprise" class software isn't (so very much isn't), but at least it's a goal to shoot for.

      You'd be amazed at how many software companies can't seem to write installers that work in a standards-compliant manner, or at all. My personal theory is that installation and deployment is the Siberia of app development: when a programmer does something so unbelievably stupid that they're even an embarrassment to the teams who created atrocities like the Microsoft Office Ribbon, they get shunted into building the MSI package, so that when they stuff up the worst that can happen is that they merely cause the software to be uninstallable and unmaintainable on thousands of machines all over the world, instead of doing something really bad like making the fifth icon from the left be the wrong shade of mauve.

      A bitter sysadmin? Yes, just a little. Why do you ask?

      --
      You are not a brain: http://books.google.com/books?id=2oV61CeDx-YC
    3. Re:Business Speak by Akima · · Score: 1

      As long as there is add-on support so the flashing monkey can be added later, both the corporate machines and the humans can be happy!

  23. Mozilla bleeding from the eyeballs? by swordgeek · · Score: 1

    I just don't get it. When Firefox was known as mozilla 0.3, they were doing this sort of crap. For several years now though, they've _mostly_ got the development and release models right. Now over the last year, they've totally gone off the rails.
    FF4 is buggy, clunky, and has new UI elements that apparently came from the mind of a blind and retarded monkey--and in some cases, no way to turn them off! FF5 is...mostly identical. Same UI, and still buggy.

    But hey--FF4 isn't supported anymore, and presumably FF5 won't be in another ten weeks or so when FF6 comes out. GREAT!

    Here's a clue for this newly (re)formed enterprise group which, if followed, will be invaluable for the regular users as well: Quick trying to reinvent the fucking wheel, and spend more time rounding off the edges. Fix the bugs. Streamline the existing code. Quit adding random new features, quit throwing away versions that are a quarter-year old, quit moving stuff around for the sake of it. In short, quit making every browser update a training exercise.

    --

    "People who do stupid things with hazardous materials often die." -- Jim Davidson on alt.folklore.urban
    1. Re:Mozilla bleeding from the eyeballs? by bunratty · · Score: 1

      FF6 won't be out in ten weeks. Don't be silly. Major Firefox releases are now six weeks apart. FF6 will be out in four weeks.

      --
      What a fool believes, he sees, no wise man has the power to reason away.
    2. Re:Mozilla bleeding from the eyeballs? by Ant+P. · · Score: 1

      quit making every browser update a training exercise

      It's a browser. It works the same as every other browser. Upgrades keep the exact same toolbar layout you used in the previous version. If you need "training courses" to figure out what a new button is for because you lack the initiative to click it yourself and find out then, no offense, but you're a fucking moron. Go use IE.

  24. Why Mozilla should support non-paying corps by markdowling · · Score: 1

    Because people are exposed to Firefox at work and are thus encouraged to use it at home, for instance with Firefox Sync.

  25. At least Windows users get some sort of installer by rklrkl · · Score: 1

    Whilst an msi would be better than an exe installer, at least Windows users get the latter. Mozilla has never provided a natively-packaged (.deb or .rpm) Firefox of any sort for Linux, never mind any official 64-bit builds. Yes, distros can and do provide both, but they aren't always updated timely, particularly if you're on an LTS release.

    Mozilla should, if they're trying to catch any Linux admins, provide repos for the most common Linux distros (Ubuntu and Fedora to start, maybe others later) - it can't be too hard to automate the process? And to solve the "enterprise" angle, simply have an LTS repo that's updated infrequently and only for security/critical bug fixes. At the moment, I actually have a straightforward shell script to create RPMs of Firefox, Thunderbird and Seamonkey from the downloadable .tar.bz2's because apparently it's too tricky for the Mozilla dev to write such a script :-(

  26. You mean, just like the Operating System? by fallen1 · · Score: 1

    Did I not hear a projected release date for Windows 8 as the end of this year? Hmmm, I'm pretty sure NO ONE WANTS A NEW WINDOWS ENVIRONMENT.

    Please excuse the caps, but putting out a new Windows environment when the vast majority of corporate environments - both large and small - are probably still fragmented between XP SP2, some Vista, and a good bit of Windows 7 is just plain fucking stupid. How many have upgraded all of their internal systems to work with 7? I've been in IT in various guises for nearly 20 years and I'm getting tired of shorter and shorter releases between new versions. It is getting to the point that even the "sheeple" are starting to notice and say "What the hell do I need a new version of Windows for? My computer works just fine." Plus, small businesses and even corporations are getting tired of shelling out cash for new releases in short time frames and many of these companies - especially small business - CANNOT afford the upgrade cycles.

    I am not sure but I predict that this will be Windows XP vs Vista again, with Windows 8 being the major loser. Windows 7 works just fine, thank you very much.

    --

    Dream as if you'll live forever.
    Live as if you'll die tomorrow.
    ~Anonymous~

  27. Re:At least Windows users get some sort of install by Anonymous Coward · · Score: 0

    Whilst an msi would be better than an exe installer, at least Windows users get the latter. Mozilla has never provided a natively-packaged (.deb or .rpm) Firefox of any sort for Linux, never mind any official 64-bit builds. Yes, distros can and do provide both, but they aren't always updated timely, particularly if you're on an LTS release.

    This thinking is part of the problem from the 'Enterprise' point of view. In environments with highly defined workflows and resources - even HR or Accounting type depts. - standardizing on a web technology means investing in tweaking and massaging across all resources/processes vital to that environment.

    Given that network segregation/gateway security/code signing technology goes hand in hand with 'Enterprise,' it is not surprising that many would be willing to slow progress in the name of stability.

    The ideal Enterprise web platform would be delivered in source complemented by build script repositories, with only security updates merged into main for at least two years. Anything faster than that will simply contribute to network convulsions designed to keep stable technology separated from the modern Net at large... Making web tech the perpetual stinky goat in the room.

    If you are already managing package distribution centrally, which is easy even for home users with a few readily available scripts, setting up a cross-compilation environment to generate the bins from one machine is all you need to add.

    I haven't checked out the LFS cross-comp book, but that might be a good place to start. You can really end up with a cherry set-up provided you don't have to upgrade constantly or physically compile on every target architecture.

  28. Re:At least Windows users get some sort of install by lennier · · Score: 2

    it is not surprising that many would be willing to slow progress in the name of stability.

    Indeed. What many in the web development sub-industry don't seem to grasp is that progress that breaks existing stuff isn't progress, it's just random unmotivated thrashing around, aka, destruction. Progress means going forward, and that means adding features - not breaking existing ones.

    In the software industry, we've somehow internalised a false idea, which is that all new development necessarily means changing the way we used to do things. But that's not actually true. If we did things right in the first place, and used extensible protocols, we shouldn't need to break anything; just add new stuff.

    The unexamined implication of the "old is bad, all progress requires destruction" meme is that everything you are currently doing, you are doing wrong - because today's "new hotness" will always be tomorrow's "old and broken".

    But it should be possible, at least in theory, for us to do things right the first time - or at least to know when we're doing them better than worse - and then stop changing it once we've got it right.

    Conversely, if whenever we invent a technology, we have no way of telling if we're doing it right rather than wrong -- then sheesh, we shouldn't even be in the technology business, because we obviously don't know what we're doing, and we're going to just hurt ourselves.

    The Latin alphabet, for instance, is around 2000 years old, and we're still using it, give and take a few tweaks. Is it bad because it's old? No. So why should a technology get outdated just because it's five or ten years old?

    tl;dr: Quit breaking stuff, just get it done right, then stick with it. It's not broken because it's old, it's proven and trustworthy.

    --
    You are not a brain: http://books.google.com/books?id=2oV61CeDx-YC
  29. Hope they get it right by Anonymous Coward · · Score: 0

    We're on the edge of deciding to keep Firefox in our corporate setting, based on the same old chestnuts from years ago. Before people say "Pro MS" - just give me an installation that respects if a user has permissions or not (yes, FF will install to userdata\ if it can't write to program files); and a way to lock down or centrally manage add-ons. Without this, we run licensing risks (yes, add-ons can include the "free for home but paid for corporate"), data validity (yes, add-ons and version changes have caused interesting results within standards-tested applications (browser changed to a sandboxed approach and was a minor point release apparently - snuck past testing and caused problems). If users or PC's retrieve these updates in an unmanaged way, it's Ops who will get it in the neck because it wasn't tested to the business standards before it was released to the business.

    I would prefer an MSI and GPO integration option (we actually use ZENWorks for deployment, but MSI/MST is always nice and standard), but truly, having the application respect some registry settings would be a nice start. Without it, it's too much of a risk ultimately to the business units that want to try and use it. Security pushing constant patching, and not enough time/money to keep up with the constant rounds of updates/testing = decision time.

    Your environment may be different, you may have patching auto-enabled from the vendors directly with no intervention. You may never test any updates coming down, and only respond to faults if they arise. It's always an option. But some of us other ICT folk are not so lucky, and are accountable to business (and very public inquiry) if it all goes wrong. Try looking after 5000+ workstations and you'll see what I mean.

    Murphy always catches up...