Slashdot Mirror


Firefox 44 Arrives With Push Notifications (mozilla.org)

An anonymous reader writes: Mozilla today launched Firefox 44 for Windows, Mac, Linux, and Android. Notable additions to the browser include push notifications, the removal of RC4 encryption, and new powerful developer tools. Mozilla made three promises for push notifications: "1. To prevent cross-site correlations, every website receives a different, anonymous Web Push identifier for your browser. 2. To thwart eavesdropping, payloads are encrypted to a public / private keypair held only by your browser. 3. Firefox only connects to the Push Service if you have an active Web Push subscription. This could be to a website, or to a browser feature like Firefox Hello or Firefox Sync." Here are the full changelogs: Desktop and Android.

13 of 182 comments (clear)

  1. Great! by Motherfucking+Shit · · Score: 4, Insightful

    Who has a list of which configuration options I need to go into about:config and disable this time?

    --
    "BSD: Free as in speech. Linux: Free as in beer. Windows 10: Free as in herpes." --Man On Pink Corner in #52607549.
    1. Re:Great! by fahrbot-bot · · Score: 5, Informative

      Who has a list of which configuration options I need to go into about:config and disable this time?

      As buchner.johannes noted, just don't subscribe to anything, but from what I have read, set:

      • dom.webnotifications.enabled = false
      • dom.webnotifications.serviceworker.enabled = false
      --
      It must have been something you assimilated. . . .
    2. Re:Great! by Somebody+Is+Using+My · · Score: 4, Insightful

      Just don't subscribe to anything -- every page requires you to grant it permission.

      No, it requires more than that. According to Mozilla themselves, "Firefox maintains an active connection to a push service in order to receive push messages as long as it is open." Supposedly the connection is encrypted and anonymized, but you'll have to take their word on it and anyway, it's another potentially-vulnerable service running in the background. So it's not just a matter of "don't subscribe and you'll be safe"; there needs to be a way to disable this service entirely.

      Oh wait... there is.

    3. Re:Great! by fahrbot-bot · · Score: 5, Informative

      Who has a list of which configuration options I need to go into about:config and disable this time?

      As buchner.johannes noted, just don't subscribe to anything, but from what I have read, set:

      • dom.webnotifications.enabled = false
      • dom.webnotifications.serviceworker.enabled = false

      Other candidates seem to also be:

      • dom.push.connection.enabled = false
      • dom.push.enabled = false
      --
      It must have been something you assimilated. . . .
    4. Re:Great! by Nutria · · Score: 4, Informative

      Its called Chrome.

      Chrome has had push notifications for quite a while.

      --
      "I don't know, therefore Aliens" Wafflebox1
    5. Re:Great! by Anonymous Coward · · Score: 5, Insightful

      Find me evidence of unwanted behavior in Chrome.

      GoogleUpdate.exe

      Also the on by default "OK Google" eavesdropping, desktop notifications and search prediction crap.

    6. Re:Great! by jopsen · · Score: 5, Insightful

      but you'll have to take their word on it

      No, you can view the source... All of it... Both client and server side.

      https://github.com/mozilla-ser...
      If I'm not mistaken... There a lot of mozilla projects, but this one seems recent.

      there needs to be a way to disable this service entirely.

      At least look up about.config before complaining, it's right in there under "dom.push.enabled".

      But really, I don't see the point...

  2. The Description of this is Scary by cruff · · Score: 5, Insightful
    From the push notification link describing it:

    A website registers a Service Worker with the browser. Service Workers are small JavaScript programs with super powers like intercepting network requests or running even when their parent website is closed.

    What could possibly go wrong?

    1. Re:The Description of this is Scary by Anonymous Coward · · Score: 4, Insightful

      "or running even when their parent website is closed."

      This is all for ads and tracking you.

      Firefox is dead.

  3. Old timers don't bother to learn the simple things by Okian+Warrior · · Score: 5, Funny

    Who has a list of which configuration options I need to go into about:config and disable this time?

    You must be an old timer!

    Programs are configurable! Just go through all the apps and programs that you use on a daily basis and change whatever you want to make the system work to your liking.

    All these features are easy to change, and learning a mere handful of methods will get you anywhere you want to go.

    1) Go to about.config, click on the "I understand", type in "this.obscure.value", double click it to change value. The "this.obscure.value" is named in a transparent, easily understandable way such as "browser.cache.disk.smart_size.enabled". This enables the "smart size" feature of the caching system. It's obvious what it does, because it's name says it all.

    2) Go to start->run->regedit, navigate to "this obscure value", type in "add new value" in DWORD format and set it's value to 1. For instance, to disable the new volume control and go back to the old style, just navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion, create a new key MTCUVC, create a new DWORD EnableMtcUvc, and set its value to 0.

    Only old folks think that's not simple, and I don't for the life of me know why!

    3) Pick a random number, put "KB" in front of it, and do what's described there. For example, KB3035583 tells you how Microsoft has helpfully introduced "additional capabilities for Windows Update notifications when new updates are available to the user". It's just telling you how Windows 10 is now available. If you want to customize this behaviour, you can use task manager to stop the GWX.exe process. Or, you can go to programs and then click or tap on View installed updates, then scroll down until you see the KB3035583 update, select it, press "uninstall", and then confirm that you want to uninstall it.

    Nothing could be simpler, I just *don't get* where these old folks are coming from!

    4) Changing things in linux it's even easier! Just go to /etc as root and vi "some-random-file", and change the configuration manually. It's easy to do, because all the configuration files are in one place! For example, remote disks are called "shares", and the process that manages this is called samba, and the file to edit is thus /etc/samba/smb.conf.

    What could be easier? The .conf ending lets you know that it's a configuration file!

    If you don't know how to use vi, simply type "man vi" and you'll find all the information you need!

    Really, I don't understand why old folks don't understand these things - everything is so simple!

  4. Re:The next RSS by mbkennel · · Score: 4, Insightful


    And will be used for "One Weird Trick to a Titanic Penis" and "Firefox has detected a CRITICAL security problem. Click on _this link_ to eliminate the malware from your system"

  5. Re:And stupidly enforced mandatory extension signi by rastos1 · · Score: 4, Interesting

    This version is also the first to require signed extensions

    I'm confused. We are delaying the removal of this preference to Firefox 46

  6. Don't worry by ArchieBunker · · Score: 4, Funny

    Give Pottering a week and we'll have some spaghetti code that does the same thing in kernel.

    --
    Only the State obtains its revenue by coercion. - Murray Rothbard