Slashdot Mirror


Firefox 3.6 Support Ends April 2012

An anonymous reader writes "Mozilla for some time after switching to the rapid release process talked about releasing Extended Support Releases that would give companies and organizations some breathing space in the race to test and deploy new browser versions. With the first ESR release (which will be Firefox 10), comes the Firefox 3.6 end of life announcement. Firefox 3.6 users will receive update notifications in April to update the browser to the latest stable version by then."

45 of 187 comments (clear)

  1. Group Policy by DCTech · · Score: 5, Insightful

    companies and organizations some breathing space in the race to test and deploy new browser versions

    I doubt this hardly matters to companies. The thing is, they *cant* deploy Firefox as it is. There is no group policy like with IE, and recently with Chrome. You can distribute it easily within your company. This is what Firefox has always lacked and I don't understand why they have been so ignorant about it. Yes, it does nothing to home users, but it's required for companies.

    1. Re:Group Policy by Billly+Gates · · Score: 2

      You can put it in an image and have the imaged version check for updates on its own servers. Infact I worked for a school district who did this for 30,000 machines

    2. Re:Group Policy by DarkOx · · Score: 3, Informative

      Right because it was so hard to script out the installer, and copy pre-crafted config file to the right place Actually if anything that ties corporate users more to a specific version because they have to actually invest some time into building their own deployment package which is certain to be somewhat version dependent.

      If you IT staff can't "deploy" Firefox they are worthless. I can completely understand them not wanting to chase the latest version, preferring to just replace the executable installer package with one that just has the security fixes in it but none of the new math. So all their pre-rolled configs and installation scripts don't have to change.

       

      --
      Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
    3. Re:Group Policy by Anonymous Coward · · Score: 2, Informative

      FrontMotion offers a customized version of Firefox (FrontMotion Firefox Community Edition) that supports lockdown via Group Policy. My company has been using it for years, and it meets our needs perfectly.

    4. Re:Group Policy by steelfood · · Score: 2

      That's where you're wrong. Many organizations use group policy, but it's certainly not mandatory for a product like a web browser. If that were true, programs like 7zip and textpad wouldn't be used in an enterprise environment either, and that's clearly untrue (especially among engineers and programmers).

      This is because most policy objectives can be enforced at a higher level. For example, blacklists integrated into the hardware firewall take care of most of the filtering for major companies. Smaller companies have software firewalls that do feature group policy support to do the same.

      Firefox has long been touted as a safer alternative to IE, even and especially in the corporate environment where one infected computer can spread to the entire LAN.

      So this does have an impact, as much as them moving to a rapid-release cycle that bumps releases irrespective of the amount of changes by a whole version number. Corporations are sensitive to Firefox's development and release cycles, even if it's marginal for most companies that deploy Firefox.

      And they're going to all be unhappy about this news. I'm certain once Mozilla ends support for FIrefox 3.6, all of the sysadmins burned by advocating switching their company's web browser to Firefox will voluntarily, if not forced to, write off all Mozilla products as enterprise-appropriate in perpetuity.

      In fact, you can even argue that it's a black mark on all non-enterprise open-source software. Firefox is very visible, and closely associated with both free as in beer and free as in speech. Many places are risk-sensitive, and this kind of behavior can make PHBs think open source, especially open source that does not come with contracted support, is too risky for deployment in an enterprise.

      --
      "If a nation expects to be ignorant and free in a state of civilization, it expects what never was and never will be."
    5. Re:Group Policy by Richard_at_work · · Score: 4, Informative

      Fine, script the installer.

      Now update the home screen, and add new bookmarks to already deployed installs.

      That's where GPO carries on and your solution ends.

    6. Re:Group Policy by hairyfeet · · Score: 3, Insightful

      Firefox has to run as admin to update, strike one. It doesn't have low rights mode like chrome and IE, strike two. Its crazy release schedule means zero testing before deployment, strike three and you're outta there!

      As someone who used FF before it was even called FF and the suite before that i hated to see it go but go it had to as its performance has been getting worse it seems as far as CPU spiking and RAM leaking, extensions were breaking everywhere and the final straw was that XSS bug that allowed malware writers to spam yahoo mail accounts from FF. If you got a bunch of spam emails from friends with Yahoo accounts, all consisting of a single word or sentence and a driveby malware link? that was the FF XSS bug. With low rights mode its damned near impossible to pull crap like that since the browser runs even lower than a user it simply can't get the permissions to do a lot of nastiness. Low rights mode was released with vista in 2007 BTW and here it is 2012 and Firefox STILL doesn't have it. But hey they have personas right?

      I truly hope the FF devs will stop going Goatse at their users and get back to their original mission statement which was to build a small, fast, and light browser with good security because I do miss NoScript although I don't know if its really needed with low rights mode and sandboxing. But if you think IT are "worthless" for not deploying a less securable browser that requires admin rights to install and isn't easy at all to set up GPOs that can't be trivially bypassed by the user? Then I'd personally hate to see what the admins are like you'd consider competent, probably the type that just gives everyone admin rights and cleans up after the messes.

      --
      ACs don't waste your time replying, your posts are never seen by me.
    7. Re:Group Policy by Dagger2 · · Score: 5, Informative

      Firefox has to run as admin to update

      True for now.

      It doesn't have low rights mode like chrome and IE

      True.

      Its crazy release schedule means zero testing before deployment

      Well, other than the six weeks it's in "Beta" (i.e. release candidate) where the intent is to make no changes, and the six weeks it's in "Aurora" (i.e. beta), where only bug fixes are made. And the extra twelve weeks it's in certify/deploy state in the ESR proposal. But other than that.

      extensions were breaking everywhere

      Extensions rarely break with the new "major releases are now minor releases" model. As of Fx10, it will even stop claiming they're broken too.

      and the final straw was that XSS bug that allowed malware writers to spam yahoo mail accounts from FF ... With low rights mode its damned near impossible to pull crap like that

      OK, I'm not sure which bug you're referring to, but generally running the browser in a low-rights mode doesn't prevent XSS bugs, because XSS bugs happen inside the browser itself.

      that requires admin rights to install

      Wait, install? You said "update" earlier. But OK... I believe it installs fine as a non-admin user if you opt to install it to a directory the user has write permission to, which is what Chrome does by default. Firefox Portable certainly works fine as a non-admin user (updates included!), and that's just a wrapper around a vanilla Firefox.

      and isn't easy at all to set up GPOs that can't be trivially bypassed by the user

      True, as far as I know. Though if you're allowing the browser to be installed without admin rights, the user could presumably just overwrite it with a version that doesn't obey GPOs, so either this applies to Chrome too or you in fact don't actually want non-admin users to be able to install the browser.

      I dislike the new release schedule as much as the next guy, but I'd prefer it if you disliked it for reasons that were true, or at least not getting fixed before 3.6's EoL.

    8. Re:Group Policy by Richard_at_work · · Score: 2

      Thanks. That shows that you haven't administrated a decent sized corporate network.

    9. Re:Group Policy by UnknownSoldier · · Score: 2

      > As someone who used FF before it was even called FF and the suite before that i hated to see it go but go it had to as its performance has been getting worse it seems as far as CPU spiking and RAM leaking,

      Same. Firebird user here. (http://en.wikipedia.org/wiki/Firefox#Early_versions)

      FF is a PIG. It has become the bloated pig that replaced the original pig Netscape Navigator, er, Communicator.

      * I'm tired of extensions breaking because dev's can't plan ahead and stabilize the API design.
      * I'm tired of it sucking up 1+ GB of RAM*, even hours after you've closed the dam tabs.
      * I'm tired of a bookmark dialog box I can't fucking resize. This _used_ to be in the one of the native versions, then it got removed. You needed a plugin to restore functionality??
      I* 'm tired of the arrow keys not working properly in Tools, Page Info, Media on a Win XP + Win7 box. (Oddly enough arrow keys works in OSX 10.6 with FF 8 !?)

      Frankly, FF jumped the shark with 3.x. They don't give a shit about _usability_ instead focusing on "flash in the pan" that no one gives a rat's ass about. Oooh, I can theme the browser. Big Fucking Deal -- Stop hogging my screen real estate and changing how it looks from version to version without giving me an option to go back to the old screen layout OR show me a dynamic web page showing the UI transition from the old style to the new style!

      If it wasn't for NoScript + AdBlock I'd switch to another browser but what good alternatives are there that have my favorite extensions already written??

      * I'm doing a test on my new rig -- I have a hunch that the fucking memory leaks are due to flash videos so I'm not bothering with flash AT ALL. We'll see how it goes...

    10. Re:Group Policy by complete+loony · · Score: 2

      I've been an employee of a decent sized corporate network. There's nothing stopping you having an intranet page that the browser auto logs into using single sign-on, that shows different content to different users, or redirects users to more specific pages based on their roles.

      There's nothing stopping you from putting a bunch of internet shortcuts in a folder (perhaps in the start menu) that launch in the users default browser.

      Heck most of what group policy does is set registry entries. So commission a simple, tiny app that reads registry entries and generates a html-like page full of links and pretty pictures for the user to click on.

      Just because IE does things in a specific way doesn't mean that the problem can't be solved using any number of different methods that give very similar end results.

      If you don't think these solutions are adequate, explain your requirements in more detail. Note that "I can't add bookmarks via group policy" is not a requirement, it's an implementation issue.

      --
      09F91102 no, 455FE104 nope, F190A1E8 uh-uh, 7A5F8A09 that's not it, C87294CE no. Ah! 452F6E403CDF10714E41DFAA257D313F.
    11. Re:Group Policy by smash · · Score: 2

      Because that is easy to roll out to my existing 500 PCs /sarcasm. No group policy support = no way it is getting deployed on most corporate networks.

      --
      I run: Windows, OS X, Linux, FreeBSD. Just because you have a hammer, doesn't mean everything is a nail.
  2. Re:rapid-release by Anonymous Coward · · Score: 3, Informative

    They're releasing less versions now then they did during 3.x if you look at the total quantity of updates rather then the version number.

  3. And PowerPC? by Anonymous Coward · · Score: 2, Informative

    Does this mean FF 10 will support PowerPC?
    (probably not)

    One less supported browser for my old PPC boxes...

    1. Re:And PowerPC? by SiMac · · Score: 3, Insightful

      Because Camino is still based on Mozilla 1.9.2, which is the base of Firefox 3.6 and will probably be EOLed along with it. TenFourFox is a port of Firefox 9 to PPC. It should work.

    2. Re:And PowerPC? by Nimey · · Score: 2

      Why would it? FF4 and later don't support it.

      Someone else is doing TenFourFox, a port: http://www.floodgap.com/software/tenfourfox/

      --
      Hail Eris, full of mischief...

      E pluribus sanguinem
  4. Re:rapid-release by Billly+Gates · · Score: 2

    Hell

    There are some who are whining IE 6 is no longer supported after 10 years and refuse to upgrade. I guess its assumed the web hasnt changed at all on 10 years so why update?

  5. quoting original document by Luckyo · · Score: 3, Insightful

    The ESR is specifically targeted at groups looking to deploy it within a managed environment. It is not intended for use by individuals, nor as a method to mitigate compatibility issues with addons or other software. Mozilla will strongly discourage public (re)distribution of Mozilla-branded versions of the ESR.

    They essentially admit that the problem is major enough for people to want to get this "corporate world only" release, and they actually want to prevent people from getting it as much as possible. Disgusting.

  6. Attorneys can't update. by crankyspice · · Score: 3, Informative

    Sigh. As one of the Righthaven tools[1] found out the hard way ... the CM/ECF system used by all Federal District Courts has been tested to work with FF 3.5; from extensive personal experience it also works fine with FF 3.6. It does not work at all with FF 4.0+ (in that you can't use FF to upload PDFs, which is all you'd use the Electronic Case Filing system for (document retrieval is done through PACER, though they overlap).

    For some stupid reason, ECF specifies an ACCEPT parameter of “image/*” for the PDF upload forms, which of course is incorrect (PDFs are MIME type “application/pdfper IANA; see also, e.g., RFC 3778).

    As of FF 4.0 (https://developer.mozilla.org/en/HTML/Element/input), that 'accept' parameter is honored and FF filters the file selector box to only permit image filetypes to be uploaded. End result? #massivefail

    Yes, ECF is broken. But try getting not one, but 89, Federal bureaucracies to fix their tech in a timely fashion... (Each district court runs its own ECF system.)

    Sigh.

    [1] Declaration of Shawn A. Mangano, Esq., Righthaven LLC v. Democratic Underground, LLC, No. 10-cv-01356-RLH-GWF, docket entry 127-1 (Dist. Of Nevada, June 29, 2011)

    --
    geek. lawyer.
  7. Re:rapid-release by million_monkeys · · Score: 3, Interesting

    So should we expect that six weeks later firefox 4 support ends? followed six weeks later by the end of firefox 5 support? etc...? etc...?

  8. System requirements by sirdude · · Score: 3, Insightful

    It's interesting looking at how the minimum requirements for 3.6 and 9 compare. In just under 2 years, the recommended hardware for FF has effectively quadrupled in Windows. Macs have odd changes and Linux doesn't warrant minimum/recommended requirements.

    Looking at the recommended requirements from a different angle, you need at most a 12 year old system to run FF on Windows and a 6 year old system for Macintosh. Linux's restrictions are solely software dependencies.

    Weird.

    1. Re:System requirements by 0123456 · · Score: 3, Funny

      That IS weird, considering they've rolled out only minor updates and UI problems since 3.6. I'm puzzled that the requirements would have changed at all.

      I believe you'll find the new randomly-positioned status bar takes a lot more RAM and CPU than the old one because it has to continually work out which part of the screen you're trying to read and then ensure it always pops up on top of it.

    2. Re:System requirements by BZ · · Score: 4, Informative

      I believe the 3.6 requirements just hadn't been updated in a few years and were more or less totally bogus. When 4 shipped, the requirements were updated to reflect reality.

  9. Re:FF3.6 is starting to look like IE6 by expert464 · · Score: 2

    Except FF3.6 doesn't suck.

    Say that again 11 years past it's release date in 2020 and we'll have a fair comparison.

  10. Greeaaat by wiedzmin · · Score: 2

    I can think of at least half a dozen enterprise applications (Avaya UCM, TripWire Enterprise, Juniper Netscreen WebUI, etc) off the top of my head, latest versions of which require Firefox 3.6 to run (with disclaimers, warnings, broken functionality an all). They sort of work with FF9, sometimes, and absolutely don't with IE. This is going to suck.

    --
    Bow before me, for I am root.
  11. Re:My support for Firefox ended 2011 by Luckyo · · Score: 4, Insightful

    I think the main reason for emotional response like yours (and mine, which largely mirrors yours) is because many of us in IT actively advocated firefox as a replacement for IE in corporate world, and actually got it pushed through. Which is one of the biggest reasons why firefox took off, people like using the same browser at home and at work.

    And then, they essentially gave everyone in corporate IT a very public finger, especially when you have to explain to your bosses why firefox cannot be supported anymore and you have to switch to something else if that was your primary browser in the company. Not only do you end up feeling used, but your reputation (and potentially career) get stained.

  12. Byob and Wpkg by gQuigs · · Score: 4, Informative

    They just relaunched Build your own browser, (byob.mozilla.com), which should help customize the settings. (I haven't tried it yet as we customized it manually)

    We deploy with WPKG and find it works quite well. Not all companies use the MSI deployment tools...

  13. Re:PPC Mac by Merk42 · · Score: 2

    Realize that as part of running a business you might have to upgrade software/hardware at least once in seven years.

    You could also try Camino

  14. Why support Mozilla? by Caerdwyn · · Score: 2

    Someone tell me why any enterprise should ever donate Mozilla a single penny of support ever again? Mozilla has aggressively and loudly snubbed enterprise users (after having courted them), has refused to listen to anything other than their politically-driven BS, and have told people to change their way of dealing with upgrades just to accommodate Mozilla. Looks like an abrupt about-face after those "evil corporations" stopped contributing. So when's the next ideologically-motivated "fuck you" change coming?

    It's very disappointing. I worked at Netscape back in the 1994-1996 timeframe, and I knew some of the people who did very well in the Netscape IPO then went on to Mozilla. They've apparently changed. I guess it's okay to be enterprise-hostile after the enterprises have landed them a huge paycheck...

    --
    Everybody gets what the majority deserves.
    1. Re:Why support Mozilla? by Billly+Gates · · Score: 2

      Mozilla didn't re-enact the enterprise working group until August of last year. At that point it was too late. Just read the comments from slashdotters using FF at work?

      Corporations listening to ASA in press releases from zdnet (which owns PCMag and various other I.T. magazines) made corporations want to go back to MS. Microsoft responded by a written letter of assurance promising 10 years of obsolete browser support. Many corporate clients have downgraded based on Asa's big mouth and the constant change.The letter made IE look like a much better choice not to mention IE 9 is tolerable and is current with the other latest generation browsers. FF 3.6 has last decades javascript compiler which is an order of magnitudes slower than even IE 9s.

      You can't change a proxy setting via a GPO. You can with an image but employees do not want to have their desktops re-imaged for something so silly as an updated PAC file. This not an option either if you have hundreds of employees as it would require physically going in each desktop to boot from the LAN to do this. Still running FF 4.0 (an example) is not actively supported and has no security fixes. This makes corporations uneasy. They are in the business of making widgets and doing all the processes of making a widget and selling it. Not upgrading browsers.

      I used to love FF and be a big advocate. If I were the CIO or CEO of Mozilla I would fire Asa and hire a new marketing team to brand FF enterprise edition with GPO offer a letter of support and name it after a year like FF 2012 edition based on a particular version of FF like like version 10 etc. With the 300 million from Google and more from Bing they now have the money to do the QA that people like. I bet many slashdotters would prefer such as myself. The quality of FF is not too my liking anymore.

  15. Mozilla Unclear on the Concept by rubycodez · · Score: 3, Insightful

    They're talking about x weeks after y weeks....what business need is z YEARS, with z>=2, with only bug fixes and security updates. This pandering to out of control bloat, bugs, eye candy and gee-whiz nonsense needs to stop. Business and many people like myself want a stable, secure, predictable, and useful browser, not a petri dish for every brain fart a mozilla developer has.

  16. just one thing I hate about FF by epine · · Score: 2

    In all the versions I've used, FF offers you an upgrade without first checking how many of your existing extensions won't come along for the ride. After one bad experience, I decided no upgrade was preferable to a negative upgrade, on the suspicion that one or more of my plug-ins would bonk.

    The simple technical advisory function was MIA.

  17. Re:FTFY: NotScript by revealingheart · · Score: 5, Interesting

    You'll have to provide sources for Firefox's alleged instability. Here's a link to Mozilla's Firefox crash statistics. If you can link to a report about Chrome's stability, it would be very useful.

    As for memory, Mozilla have been working on reducing memory in Firefox with the MemShrink project. Nicholas Nethercote's blog has the latest reports on improvements to the upcoming versions. Even then, it's been established before in testing that Chrome is a relative heavyweight when it comes to memory.

  18. So.... by kehren77 · · Score: 2

    So I should probably think about updating all the machines I have running Firefox 2.0.0.20?

    We have a bunch of older Mac running 10.3.9 that can't even update to Firefox 3.6 because it requires 10.4.

    I thought the whole point of Firefox was that it was supposed to have lower system requirements than IE.

  19. Re:rapid-release by icebraining · · Score: 2

    Why? Firefox 4 wasn't released six weeks after 3.6.

  20. Re:My support for Firefox ended 2011 by WrongSizeGlass · · Score: 4, Insightful

    Did you see the link above that says "Extended Support Releases"? What exactly is wrong with that proposal?

    The problem is it starts with version 10. Those of us who have avoided the "version number race" aren't using 4, 5, 6 ... 10 for a reason. ESR for version 10 really offers us nothing. The ESR roadmap in the article already goes up to version 24 (which should be out by Christmas at this rate). And who knows how long they'll "extend" it for? Their roadmap shows version 10 supported until version 17, which will be a shorter duration than 3.6 was supported.

  21. Re:FTFY: NotScript by tlhIngan · · Score: 2

    Going to Chrome because of version bloat on Firefox seems a trifle funny. There may be reasons to go to Chrome, but protesting version bloat isn't one of them.

    Chrome makes it so you don't care what version you use.

    Updates are applied transparently in the background (no admin needed), which happen when you start the browser. Extensions stay working and AREN'T version-dependent. (Firefox is supposed to have a stable extension API so new versions don't break extensions, but...).

    And no funky UI changes that keep tweaking the way stuff acts.

    And when will they add low integrity mode support that IE and Chrome have, and the ability to do no-admin updates.

    I'm lucky in that migrating to the rapid release is possible now I figured out al lthe crap - using the new profile manager (a separate download, but it's stable now), which extensions are required to keep a "traditional" look and feel (and how to move stuff like NoScript back t othe bottom-right corner) and what extensions are outdated and what the new extensions to use are. But it's a huge PITA.

    And requiring admin means I basically have to physically go into my parent's computer periodically and update firefox. Bleh. (They don't have passwords, so RDP doesn't work, and RDP'ing into the admin account does a force-logoff for them (can't figure out how to get around this - I have fast user switching on and it's win7 enterprise...)).

    Considering the past holiday season was the call to "upgrade and update your parent's browser"...

  22. Ubuntu 10.04 LTS by CyDharttha · · Score: 2

    I wonder what version Ubuntu 10.04 LTS will move to? It's still on FF 3.6. There's just over a year of support left for the desktop LTS version.

    1. Re:Ubuntu 10.04 LTS by Nimey · · Score: 2

      I could see them maintaining their own patches for it. They did that with previous LTSes (definitely 6.06) once the bundled version of Firefox had gone EOL.

      --
      Hail Eris, full of mischief...

      E pluribus sanguinem
  23. Firefox offers support? by TheSkepticalOptimist · · Score: 2

    For what?

    --
    I haven't thought of anything clever to put here, but then again most of you haven't either.
  24. Re:My support for Firefox ended 2011 by Luckyo · · Score: 3, Insightful

    "Too little, far too late".

    They already took the PR hit, and they already hit their supporters in corporate world. The damage is done. Half-assed damage control (which is what these ESRs are) is not going to bring firefox back to corporate world, nor remove the huge stain from reputation of both FF itself and IT professionals who were pushing for firefox acceptance in their workplace.

  25. Re:My support for Firefox ended 2011 by afidel · · Score: 2

    Yes, and supporting a release for 6-12 months is no support at ALL. Seriously the other day people were (incorrectly) calling out MS for only supporting an OS for 10 years but you're giving Mozilla a pass on possibly less than 12 months? No, I need a browser that will have security fixes for at LEAST 3 years, but prefer 5. When we upgrade a major piece of software like our ERP platform or content management system it takes 6-12 months to do full regression testing, with FF we would now be out of support by the time we were ready to go to production.

    --
    There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
  26. Well then.... by smash · · Score: 2, Interesting

    It looks like Firefox 3.6 is going to become the IE6 of the 201Xs.

    --
    I run: Windows, OS X, Linux, FreeBSD. Just because you have a hammer, doesn't mean everything is a nail.
  27. Re:Dropping support for what works. by Skuto · · Score: 2

    This is a problem that Mozilla has failed to address

    Because it's not actually their problem. They can't update every add-on or extension ever written to the newer versions themselves. Many of them aren't even open source.

    If you installed crappy extensions onto the base product, it is not the problem of the base product if they don't work.

  28. Re:FTFY: NotScript by Skuto · · Score: 2

    The crashes aren't uniformly distributed. Far from it. If you hit a problem case, it'll crash 10 times a day. If you don't, it'll run for months without an issue.

    As you already observed, extensions are the main problem makers, and that's true for all browsers.