Firefox 57 Brings Better Sandboxing on Linux (bleepingcomputer.com)
Catalin Cimpanu, writing for BleepingComputer: Firefox 57, set to be released tomorrow, will ship with improvements to the browser's sandbox security feature for Linux users. The Firefox sandboxing feature isolates the browser from the operating system in a way to prevent web attacks from using a vulnerability in the browser engine and its legitimate functions to attack the underlying operating system, place malware on the filesystem, or steal local files. Chrome has always run inside a sandbox. Initially, Firefox ran only a few plugins inside a sandbox -- such as Flash, DRM, and other multimedia encoding plugins.
I dread updating to Firefox 57, because it will break all of my plugins.
Year of the Windows desktop!
http://ftp.mozilla.org/pub/fir...
Is it called "Firefox 57" because that's how many users are left?
I've calculated my velocity with such exquisite precision that I have no idea where I am.
No Tab Mix Plus? It's not Firefox, it's Cripplefox. Fuck the crips.
Why does Slashdot always compare Firefox with proprietary Chrome when all the mentioned features does provide already Free Chromium?
The BleepingComputer article adds nothing of value over the original blog post.
including some used for security
Like what? uBlock Origin works in Firefox 57, so does Adblock Plus, so does Ghostery, so does Privacy Badger, so does HTTPS Everywhere, etc. The only one missing from AMO at the moment is NoScript but that will be released soon.
The author of Adblock Plus stated that the significant changes introduced here are unfortunate but sadly unavoidable. Thankfully Adblock Latitude, ABP's fork for Pale Moon doesn't have to apply such unfortunate changes.
I don't see any major problems in that list, and in any case they say improvements are already in the works. The fork will be left behind as new releases of Adblock Plus roll out.
That's entirely fitting given how little Linux users have given a shit about Firefox and in contributing to it ever since they decided to care more about the licensing of some icons. You get back what you give; it goes both ways.
dropping flash support
That's what everyone is doing, even Adobe themselves. Flash is dead. You are in the first stage of grief. Time to move on.
The Firefox develops gave plenty of notice of this change, allowing add-on developers lots of time to upgrade and ensure their add-ons still work.
Yet they mark some admittedly missing WebExtension functionality as "wontfix". See comment 11 by Andy McKay to Bug 1325692 - [commands] Explicit support for overriding built-in keyboard shortcuts by WebExtensions: "Removing flags, this API is not going to be written in time to for Firefox 57."
Then download the source code for the plug-in, exercise your right under the source code's free software license to transpile it to JavaScript and port it to the Web Audio API, and use one of the *monkey extensions to insert it into every page that requires said plug-in. Or hire someone to.
Bug 1325692 causes data loss by making it impossible to disable the Ctrl+Q shortcut to quit. In the XUL era, one would use Keybinder, but the replacements for Keybinder are incompatible with the Linux version of Firefox because of bug 1325692.
The next step is to dig up the contact information for the authors of each animation and game on Newgrounds and ask them to port them to HTML5. How would we go about that?
The next step is to dig up
No, the next step is to get Adobe to release a WebAssembly build of the Flash run time. And if Adobe doesn't care about Flash enough to do that then tough luck, kid.
It seems like you're in stage 3 of grief: bargaining.
It's ctrl+shift+Q in FF57, not just ctrl+Q. If you have session saving turned off, it will also warn you before closing the browser.
Eat the rich.
How exactly do I "transpile" a honest LD_PRELOAD library (and its dependencies) to JavaScript?
First you obtain its source code, and then you use Clang with the Emscripten or WebAssembly target.
And how do you propose to call ioctls from JavaScript injected into a page?
By writing a shim that translates audio ioctls to their corresponding Web Audio API calls. In some cases, it may be easier to delete all the operating system integration, keeping only the codec proper, and write a new Web Audio API integration.
It's ctrl+shift+Q
That solves being close to "close current tab", but it's dangerously close to "switch one tab to the left" (Ctrl+Shift+Tab).
For me, I use different fingers for those two shortcuts, so it makes it rather difficult to mix them up by mistake.
Eat the rich.
Piro's Tree Style Tabs has been ported to 57:
https://addons.mozilla.org/en-...
So I'm on board. No other browser offers this functionality still and its my must have feature. Vivaldi has something similar, but not the same.
I wish Video DownloadHelper would get ported though. That could be a problematic change.