Slashdot Mirror


Mozilla Announces Project Fission, a Project To Add True Multi-Process Support To Firefox (zdnet.com)

An anonymous reader quotes a report from ZDNet: After a year of secret preparations, Mozilla has publicly announced plans today to implement a "site isolation" feature, which works by splitting Firefox code in isolated OS processes, on a per-domain (site) basis. The concept behind this feature isn't new, as it's already present in Chrome, since May 2018. Currently, Firefox comes with one process for the browser's user interface, and a few (two to ten) processes for the Firefox code that renders the websites. With Project Fission (as this was named), Firefox split processes will change, and a separate one will be created for each website a user is accessing. This separation will be so fine-grained that just like in Chrome, if there's an iframe on the page, that iframe will receive its own process as well, helping protect users from threat actors that hide malicious code inside iframes (HTML elements that load other websites inside the current website). This is the same approach Chrome has taken with its "Site Isolation."

67 comments

  1. Chrome memory usage by Anonymous Coward · · Score: 4, Funny

    Firefox: Hold my beer.

    1. Re:Chrome memory usage by Anonymous Coward · · Score: -1

      Use some of that passion to end socialism and that nasty oxygen habit that marxists have.

    2. Re:Chrome memory usage by Anonymous Coward · · Score: -1

      https://wtvr.com/2019/02/06/capitol-police-sergeant-on-paid-administrative-leave/ -- one less nazi faggot.

    3. Re: Chrome memory usage by Anonymous Coward · · Score: 0

      Gay baths and terrorist teenagers aside, is there anything nicer than someone who keeps rubbing that knot out of your back way longer than any normal person would spend the time? It is certainly better than someone who slaps you on the back and just makes it worse

  2. Even more copying by Anonymous Coward · · Score: 1

    In other words, more like Chrome which means even more CPU and memory usage for little gain.

    If people think they're not going to go down the same road and eventually gimp extensions as well, then they're naive.

    1. Re: Even more copying by Anonymous Coward · · Score: 0

      They already gimped extensions.

    2. Re:Even more copying by arglebargle_xiv · · Score: 1

      The concept behind this feature isn't new, as it's already present in Chrome

      I think this should actually be the generic template for any news about Chromefox:

      Mozilla announces plant to add $X to Firefox. The concept behind this feature isn't new, as it's already present in Chrome.

      for any given value of X.

    3. Re: Even more copying by Anonymous Coward · · Score: 1

      Chrome's plan is to change an API that will essentially kill ad-blockers, and Firefox will probably follow suit.

  3. Fission? by Anonymous Coward · · Score: 0

    That implies a lot of CSS violations.. it's kind of the opposite idea to absorb and isolate. Project Boron.

  4. Re:Firesux needs a 1TB SSD for RAM paging by Anonymous Coward · · Score: -1

    Obligatory this happened many years ago, sometime in the mid-90s when I was 11 or 12. When I was growing up I had a tendency to initially fall in with friends more for the entertainment value than for the bond of friendship, which led to some lifelong friendships as a result of zany shared experiences and also some extremely poor decisions. As you might imagine, this story falls into the latter category.

    One my closest friends at the time was an only child whose parents were mostly absentee, as they had him unexpectedly when they were in their 40's and didn't really have the energy to chase him around. As an alternative, they basically attempted to buy his love by giving him a generous allowance and mostly looking the other way as he did whatever he wanted, which mostly meant wreaking havoc around our small suburban neighborhood. I became close friends with him mainly because my parents would drop me off and his parents would leave us alone, so we could chill out in the basement of his house and watch R-rated movies like Reservoir Dogs, Pulp Fiction and Heat.

    That was far from the weirdest stuff this kid had accrued, however - we're talking he had a shoebox full of floppy disks with odd porn (e.g. Wizard of Oz, and yes Toto was there but thankfully just watched), tons of cardboard cutouts he'd swipe from the local video store and his prized possession, a chrome -plated M1911 cap gun with a black handgrip and the orange tip painted chrome to look more "genuine". With all this and all the video game systems popular at the time and even a computer connected to the primitive (at the time) internet, this kid's house was an absolute playground for a middle school kid like me with time to kill. One fateful hot July afternoon, my parents dropped me off at his house and the fun began.

    As I sauntered up his driveway, the first thing I saw was my friend with a dark red gas can (the kind that holds a gallon or two of gasoline for a push mower or other household gas-powered tool) looking down at what seemed to be a ceramic vase. This couldn't end well... so of course I had to go take a look!

    "Hey man, what're you up to?"

    "I'm making some homemade napalm. I heard from Charlie at school that if you mix a bunch of styrofoam peanuts with gasoline, it'll all mix together and burn for HOURS man. This is gonna be sweet!"

    "Are you sure that's a good idea?" I started to step back, as I knew where this was going. Just a few weeks before this my friend had ignited a whole pack of matches and nearly burned down his neighbor's house when the matches burned his hand.

    "FUCK yeah man, don't be a goddamn pussy." As he says this, he lights up a match, stands back a step and casually tosses it into the vase like one of those movie heroes throwing a match or a zippo into a trail of gasoline leading to the bad guys. Needless to say, the reaction was more than we anticipated - immediately a tsunami of hellfire came bursting out the mouth of the vase like the exhaust from a jet engine, the tips of the flames licking the gutters of the house. We both just stood there in awe, unable to move - I was thinking we are fucking definitely going to jail for this.

    Thankfully, my friend's parents were out and I'm guessing the neighbors were out running errands or something too, as no one called the police or the fire department and gradually the flames reduced down to embers. I have no idea how the vase didn't bust apart from the extreme heat and pressure - I just couldn't believe we had gotten away with it.

    By this time I wanted to be anywhere but at the house, as I was still obsessed with the idea that somehow the FBI or something would show up and lock us up forever for endangering the whole neighborhood. After some cajoling, my friend agreed to go down the hill to the Mr. Cookie to grab a bite to eat, but before we ventured out he said, "Hold on, I need to go grab something." He ran inside and came back outside a minute later grinning from ear to ear. I didn't even want to know what he had done, so I just s

  5. Typical C(++) coders. by Anonymous Coward · · Score: -1, Troll

    Take *forever* to support multi-processing because of their shitty Joe Sixpack language, yet still cling to it and re-invent the wheel a thousand times, going so far as to create new languages to keep.
      carrying their shitty language ways into the multi-processing world.

    Instead of finally switching to a modern language. (Try Haskell with things like thread sparks in a TARDIS monad that look like black magic from the Enterprise to them.)

    1. Re:Typical C(++) coders. by AHuxley · · Score: 3, Funny

      Time for an Ada browser on an Ada OS.

      --
      Domestic spying is now "Benign Information Gathering"
    2. Re:Typical C(++) coders. by Anonymous Coward · · Score: 0

      I know you're just trolling for the lulz but Firefox already supports multi-processing through threading. They're moving to processes to sandbox things because a web browser's entire function is to run code from unknown/untrusted sources. But cool reference to the hip programming language bro. When you need something that actually works written by people who understand the requirements and the system it's running on I'll be over with the other graybeards. // and don't forget to bring us another shitty six pack when you do.

  6. penisbird attacks your donger by Anonymous Coward · · Score: -1

    btw, i ate out your grandpas ass!!!



    ENOUGH OF THIS GAY BANTER, ON WITH THE TROLLING!!!

    8====D~~



    I was still in High School, I had a big cock and was horny all the time, jerked off at least 3 times a day. My body is small and slim with very little hair, 5"4",125lbs. My fat cut 7" cock looked huge on me. I had been jerking off thinking about gay sex lately, I was very turned on by the fantasy of having sex with an older man, and having a cock in my ass.

    I got a job working after school and weekends at a antique shop, it was ran by 2 older gay gentleman, very nice gentleman who were always flirting and teasing me. An older very distinguished looking handsome customer came in the store, he was a silver haired fox who looked like he had money.

    The owners knew him well, he bought a small end table and asked the owners if I could help him unload it at his house, I thought this was kind of suspicous since it didn't weigh much but my horniness and curiousity made me jump at the chance. We rode in his SUV to a big house in a ritzy neighborhood and I carried the end table into his house. He gave me a tour, it was huge and very nice, there was an indoor hot tub and he asked me if I wanted to soak for a while, I told him I didn't have a swim suit and he laughed and told me I could go without, he always did.

    I was getting turned on so I started to undress, my tank top came off first and my back was turned to him and I pulled down my cutoffs, no underwear and bent over to finish removing my cutoffs, it was a turn on to expose my ass to him, he watched me climb into the hot tub, my cock was rock hard. I watched him take off his shirt, he had a sexy chest covered with silver hair, he pulled down his pants and underwear in one motion exposing a beautiful 8" cut cock, very fat. We sat in the tub for five minutes talking, he asked me if I wanted a massage, I moved over close to him with my back to him and sort of sat on his lap, I could feel that big cock, I started moving my ass around until it was between my cheeks, I moved up and down, it felt so hot, made my asshole spasm. He was rubbing my shoulders and back, he reached around and started massaging my inner thighs making my cock twitch, finally he started stroking my cock, I was so turned on it was all I could do not to cum. He had me stand up and started tonguing my ass while stroking my cock, I was in pleasure overload and exploded cum after about two minutes of this.

    We went into his bedroom, still naked and dried off, he put his hands on my shoulders and gently pushed me to my knees, grabbed the back of my head and guided me to his cock. I sucked on it hungrily feeling it get harder in my mouth, when he was rock hard he guided me to the bed and had me lay on my stomach. He ate my ass again this time harder, getting his tongue up inside me, this made my cock hard again, I relaxed and felt my boypussie open up. Next he slowly inserted one of his fingers , it kind of hurt at first but then I started to love the feeling. Two fingers was next with some lube, he two finger fucked me for along time, I loved how it felt, like I was getting stretched. I was moaning and moving my ass up and down.

    He stopped and put his big cock back in my mouth, I sucked him for maybe a minute and he pulled out and rolled on a condom, had me get down doggie style got behind me and pushed that big cock head against my tight hole. He slowly pushed, I thought it was to big and would never fit, all of a sudden it popped in, the sensation took my breath away, it felt so huge and it hurt a little, but I was starting to relax and it was feeling better by the second.

    He slowly pushed in until he was deep inside me and moved in and out very slowly to start with, it still burned but the thought of getting fucked, having a big cock inside me was such a turn on.

    He fucked me for a long time, after I got used to it and fully relaxed the feeling was pure pleasure. My cock was rock hard.

    The pace got faster and harder, finally I came again, without even touching my cock, such intense pleasure. He came and stayed inside me, I layed flat on my stomch with him still inside me, he slowly went limp, slipped out of me and rolled off me.

  7. I'm starting to hare firefox by AndyKron · · Score: 1, Funny

    Yippy. Another fucking update

    1. Re:I'm starting to hare firefox by Anonymous Coward · · Score: 2, Funny

      Wait until Intel puts it on-die as part of their new IME. "The fastest most hyperthreaded browser-on-a-chip is now always on even when your machine is off! Swear to god, it's a feature! Sure someone asked for it!"

    2. Re:I'm starting to hare firefox by Anonymous Coward · · Score: 0

      With that attitude you won't make it as a cyber man in this cyber world of ours.

    3. Re:I'm starting to hare firefox by Anonymous Coward · · Score: 0

      people who don't take updates are the antivaxxers of the internet

    4. Re:I'm starting to hare firefox by Anonymous Coward · · Score: 0

      So are people who use Windows.

    5. Re: I'm starting to hare firefox by Anonymous Coward · · Score: 0

      So are Nazis! Oh wait, it looks like just throwing out things we hate in conversation does not always work.

    6. Re:I'm starting to hare firefox by thegarbz · · Score: 1

      Yeah damn that completely voluntary update process that I could disable at any time. Damn it to hell!

    7. Re:I'm starting to hare firefox by Anonymous Coward · · Score: 0

      Office and Windows updates are not voluntary, and people are having trouble when Office decides to update unexpectedly and locks users out of Office apps. Here's one example: https://answers.microsoft.com/... . This will get even worse in the future.

    8. Re:I'm starting to hare firefox by Anonymous Coward · · Score: 0

      Yeah, see, this discussion is actually about a web browser called Mozilla Firefox. Nothing to do with Microsoft Office, or Windows particularly. If you scroll up to the top of this page, you can get up to speed on the discussion and then even participate!

  8. chrome by Anonymous Coward · · Score: 0

    Turning more and more into Chrome. One day it will be what Chrome is today.

  9. Help Me Understand? by Anonymous Coward · · Score: 1

    I don't understand why processes are being used to provide security. Can someone explain it in more detail? If there aren't any bugs in the code, then it shouldn't matter where anything is running because it won't be able to do anything it's not supposed to do. If there are bugs in the code, why wouldn't they be able to exploit them to communicate with the other processes and cause just as many issues? I would think spending time implementing a simpler thread pool with everything being task based would be a more secure design. The threading model would be less complex (so in theory less bugs and any bugs are easier to find) and easier/faster to implement so they'd be more time left over to find and fix other bugs. Furthermore, a thread pool would be far more scale-able and resource efficient.

    1. Re:Help Me Understand? by AHuxley · · Score: 1

      Each malware filled web page and tab gets it own part of the CPU and memory to stay in.
      Faster too and the OS can still keep up in the background as it has its own part of the CPU.
      Everyone gets a part of the CPU.

      --
      Domestic spying is now "Benign Information Gathering"
    2. Re:Help Me Understand? by Anonymous Coward · · Score: -1

      You have no idea what you're blathering about or how any of this works.

    3. Re:Help Me Understand? by Shikaku · · Score: 4, Informative

      Except it's already a feature in Chrome(ium) since version 67, and you can read how it works here: http://www.chromium.org/Home/c...

      This takes up a bit more RAM however, because each process has its own heap and executable thread for each tab or domain if you enable it by domains only (disabled by default).

      This looks to be almost the same thing except just by domains instead.

    4. Re:Help Me Understand? by Immerman · · Score: 3, Informative

      > If there aren't any bugs in the code,
      Ha! Good one!

      > If there are bugs in the code, why wouldn't they be able to exploit them to communicate with the other processes and cause just as many issues?
      You might be able to, but you might not - it depends entirely on the nature of the bugs.

      Basically security programming amounts to putting multiple layers of armor around something, knowing full well that none of the layers are perfect. However, each layer makes it more difficult (read: expensive) to get to the chewy center, at least early on before the vulnerabilities are well known.

      And when someone inevitably does find a way through, and the developers learn of it? Then that "one" vulnerability is actually a list of the vulnerabilities that were exploited in each layer or armor - fix any one of those holes and you're safe again, at least until they find a new way through that layer of armor. Fix most or all of them, and you send them back to the drawing board.

      --
      --- Most topics have many sides worth arguing, allow me to take one opposite you.
    5. Re:Help Me Understand? by Tailhook · · Score: 4, Informative

      I don't understand why processes are being used to provide security.

      Processes leverage MMU hardware to achieve memory isolation such that each process has a private address space that can't be violated by another process without either compromising the OS or overcoming the MMU (rowhammer/spectre/etc.) You will now argue that the processes in a multi-process browser already communicate, pretending that this communication is unfettered by any limits. It is not. The browser designers control this communication with the intention of defending against compromised processes by dropping unnecessary privileges and minimizing the IPC attack surface.

      why wouldn't they be able to exploit them to communicate with the other processes and cause just as many issues?

      Because the OS and the MMU are specifically designed to prevent unprivileged processes from communicating with other processes. You will now argue that OS's aren't perfect and chips have flaws and so such designs are pointless. You will do this despite the fact that your proposal relies on hypothetical bug free systems as well, as we see here:

      If there aren't any bugs in the code...

      You're free to fantasize about bug-free systems, but the purveyors of real software must contend with bugs. Bugs in extensions, third party dependencies, compilers and their runtimes, drivers and every other conceivable thing. Any exploited flaw delivers the entire address space of your thread pooled browser and everything it's doing with no further effort. Process isolation at least offers an impediment to further comprise beyond the exploited process.

      Google was right to design Chrome as they have, and Mozilla has been remiss in taking this long to copy it.

      --
      Maw! Fire up the karma burner!
    6. Re:Help Me Understand? by rtb61 · · Score: 1

      I don't know, I struggle to believe that, hell Mozilla are incapable of shifting the tab bar back below the address bar where it belongs, so fancy stuff, I am not so sure about that any more.

      --
      Chaos - everything, everywhere, everywhen
    7. Re:Help Me Understand? by Kjella · · Score: 3, Informative

      You're free to fantasize about bug-free systems, but the purveyors of real software must contend with bugs. Bugs in extensions, third party dependencies, compilers and their runtimes, drivers and every other conceivable thing. Any exploited flaw delivers the entire address space of your thread pooled browser and everything it's doing with no further effort. Process isolation at least offers an impediment to further comprise beyond the exploited process.

      And even if it's not malicious/exploitable, it'll crash everything. That was my main annoyance, if you got one misbehaving tab in Chrome you can sort by CPU/memory use, find and kill it if it doesn't die on its own. In Firefox it was the "what tab is killing it now" guessing game.

      --
      Live today, because you never know what tomorrow brings
    8. Re:Help Me Understand? by Anonymous Coward · · Score: 0

      Also, people are still stuck in the Win 9x mentality of more processes = bad. Processes are cheap these days. They're literally complaining that their task manager list is slightly longer to scroll, but Windows now even knows how to combine them under a dropdown arrow.

    9. Re:Help Me Understand? by Anonymous Coward · · Score: 0

      Can you blame them, though? A Windows Surface running Windows 10 uses up about 85% of its available system resources RIGHT OUT OF THE BOX. This happened on a Linus Tech Tips video, I wish I could remember what the video was about so I could look it up and link it here. His reaction was hilarious: "What the hell, Microsoft?! You MADE this thing!"

      So yeah, for most people still in Microsoft land who aren't running a beefy custom built desktop with shitloads of RAM, more processes is definitely bad, even today.

      If you don't have a Surface, see if any are being demoed at a computer store. Pull up the task manager and see for yourself if you don't believe me. If the store has the task manager blocked by group policy, act interested in the device and ask for a store technician to unlock it so you can "see if it's right for you".

  10. Great, now pledge to keep Manifest V2 for uBlock by Anonymous Coward · · Score: 0

    ...and we'll have some real choice for privacy after Google/Chromium's latest dick move to nerf all adblockers other than AdBlock Plus, the one they have bought a huge interest in so they can control it.

  11. Heard of Rust? by tepples · · Score: 4, Informative

    What you suggest is in fact being done. Servo is the project to rewrite Firefox's engine in Rust, a modern language focusing on provable thread safety through abstractions with zero runtime cost. Quantum is the project to replace parts of Firefox's engine written in C++ with the parts of Servo that are completed.

    1. Re: Heard of Rust? by Anonymous Coward · · Score: 1

      You mean you expect people to do their research and know what they're talking about before commenting? What a crazy concept!

    2. Re:Heard of Rust? by Anonymous Coward · · Score: 0

      Programming languages are tools and not a goal. A better browser will be a better browser by being a better browser, not because it's programmed in Rust.

      If past experience tells us anything.. The pitfalls of re-writing a complex piece of software are always worse than any theoretical benefit from a new language.

  12. One process per window or tab. by Anonymous Coward · · Score: 1

    That should be it.

    This will do nothing to properly isolate inter-site scripting attacks, it will increase memory footprint (less if you are on linux and have ksm(kernel samepage merging) running and the threads flagged as ksm compatible.), increase attack surface, and further complicate the already messy debugging firefox requires.

    If we were to go back and fork from FF-ESR 38, 45, or 52, implement this process isolation on a per-window or per-tab basis, and have plugins tied to per-window or per-tab sessions, the security, speed, and usability would be the same or greater than this half baked idea, while also reducing the debugging complexity and the overhead of this plan. Just because Scroogle does things one way doesn't mean we all need to get fucked by them even when we're using a competitors product (And despite Mozilla's collusion and no doubt kickbacks for all these Chrome-like changes, they ARE still competition.)

    1. Re:One process per window or tab. by Anonymous Coward · · Score: 0

      You're so right, [random Internet user with a strong opinion]. Clearly you know better than everyone actually making browsers just how things should work, and clearly they're just doing what they do for completely inane reasons. Please share more of your obviously correct wisdom, and not only because it's popular among other [random Internet users with strong opinions].

    2. Re:One process per window or tab. by roca · · Score: 3, Informative

      Mozilla didn't see site isolation as a high priority until Spectre happened. Unfortunately it is now obvious that given a high-resolution timer, JS can probably read the contents of almost everything in the address space of the process it belongs to using side channels. That means site isolation has to be a priority.

      As a temporary fix various timing channels have had their precision reduced, but that's only a partial workaround at best. Also Mozilla wants to enable parallelism primitives for Javascript that can be (mis)used to gather high-precision timing data.

      Fine-grained multiprocess has some downsides but Mozilla can't afford to lag behind in security and privacy.

    3. Re:One process per window or tab. by Anonymous Coward · · Score: 0

      How about the timers precision degrades the more often you use it. Calling getNanoTime() or whatever thousands of times per second? Make it very quickly degrade to getMilliTime() * 1000000;

    4. Re:One process per window or tab. by Anonymous Coward · · Score: 0

      Found the guy who has never developed a web app!

      Your idea is bad, and you should feel bad.

    5. Re:One process per window or tab. by iive · · Score: 1

      I think that they did exactly that, lowered the precision of the timers.

      However if you have threads, you can make your own high precision timer by running a loop in a single thread while doing the side channel in another.

    6. Re:One process per window or tab. by Anonymous Coward · · Score: 0

      How can you read memory you shouldn't be able to using a high-resolution timer?

  13. Local Render Server? by 0100010001010011 · · Score: 3, Interesting

    How long until we have some HTML5/CSS/JS hardware accelerated chip to do the actual rendering and just pass the display information to a 'thin client'?

    At some point it's going to be faster to x11 forwarding/VNC to a bigger machine somewhere else to handle the latest JS framework.

    1. Re:Local Render Server? by Waccoon · · Score: 1

      I think you just suggested that we either switch to multi-core CPUs (welcome to 2010), or we switch to cloud rendering (over my dead body).

    2. Re:Local Render Server? by lister+king+of+smeg · · Score: 2

      How long until we have some HTML5/CSS/JS hardware accelerated chip to do the actual rendering and just pass the display information to a 'thin client'?

      At some point it's going to be faster to x11 forwarding/VNC to a bigger machine somewhere else to handle the latest JS framework.

      I think it was either oprea mini or opera mobile actually did this to run a their browser at reasonable speeds on early feature phones it would render the web pages on their servers and send the output compressed to the phone were it would decompress it and show the rendering.

      --
      ---Saying gnome 3 is better than windows 8 not so much a compliment as it is damning with light praise.
    3. Re:Local Render Server? by Anonymous Coward · · Score: 0

      I know it's not what you propose, but check out the webrender in Nightly. Since those AI algorithms get the acceleration even in the general purpose cores soon, maybe something to accelerate dynamic languages like JS would be in order to save the mobile power budgets and to put those extra available transistors at work.

    4. Re:Local Render Server? by afidel · · Score: 1

      Well, Windows is nearly there, they actually allow you to run the browser engine in a VM if you have Enterprise and configure it to do so. Unfortunately with the recent announcement that they are moving the rendering engine from EdgeHTML to Chromium for Edge I'm not sure if the feature will be supported going forward. I hope they do as it's one of the better end user security features now that Outlook isn't such a steaming pile.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    5. Re:Local Render Server? by Anonymous Coward · · Score: 0

      I don't think he suggested either of those things. What on Earth are you talking about?

  14. Can't hurt the best ad/threat/tracker blocker by Anonymous Coward · · Score: -1

    See subject & APK Hosts File Engine 2.0++ 64-bit for Linux/BSD h t t p : / / a p k . i t - m a t e . c o . u k / A P K H o s t s F i l e E n g i n e F o r L i n u x . z i p

    Yields more security/speed/reliability/anonymity vs. any 1 solution (99% of threats use hostnames vs. IP address most firewalls use) more efficiently/FASTER + NATIVELY 4 less!

    Vs. "Bolt on 'MoAr' illogic-logic" slowing u hosts speed u up 2 ways: Adblocks + Hardcode fav. sites u spend most time @ vs. competition w/ security bugs (DNS/AntiVir) + overheads slowing u (messagepass 'souled-out' to advertisers easily detected & blocked addons + firewall filtering drivers) & their complexity leads to exploit!

    * ONLY 1 of its kind in GUI 4 Linux/BSD (soon 4 MacOS)!

    (Better vs. Windows model)

    APK

    P.S.=> Protects vs. scripts/trackers (kernelmode faster vs. usermode slower NoScript vs. 3rd party script)/ads/DNS request tracking + redirect poisoned or downed DNS/botnets/malware download/malcript/email malicious payload

  15. Secret prep != OSS? by xxxJonBoyxxx · · Score: 1

    >> After a year of secret preparations,

    Can someone help me square the "open" part of OSS with "a year of secret preparations" please?

    1. Re:Secret prep != OSS? by Anonymous Coward · · Score: 0

      It's not a secret, that's just a shitty summary. Anyone who follows (and cares) about this stuff will know about it already, as Mozilla has publicly-visible bugs in their tracker about Project Fission for a while now, and aren't shy about the details in those bugs.

    2. Re:Secret prep != OSS? by roca · · Score: 4, Informative

      Translation: "After a year of open discussion we didn't notice until now,"

      Here for example is an overview of memory usage reductions related to Fission, from July 2018: https://mail.mozilla.org/piper...

    3. Re:Secret prep != OSS? by Anonymous Coward · · Score: 2, Informative

      we prepared this in 2014 already. we had to move stuff around until we could actually multi process at all. and sandbox. and move things around more.
      firefoxos helped a lot making this happen because the mozilla management didnt care one bit, but it was required for firefox os to work well enough (its not kaios, 3rd worldwide mobile os). chrome was already ahead of course at the time and they were already dealing with this as well. for them, maybe it was secret, but their employee live next floor and keep talking everything anyway.

      it took a lot more pushes, and eventually over the past years some of management approved that we should finish this up...

      i worked on this directly, as paid staff. its not secret at all.
      and while its a bit scary and uses more ram its definitely a big gain for security

  16. I love Firefox but... by Anonymous Coward · · Score: 0

    I have to turn the multi-process thing to "one content thread" for best performance. More processes doesn't help, especially on really old machines with single-core CPUs. I want the Firefox devs to dogfood on a fucking VIA C7.

    1. Re:I love Firefox but... by Anonymous Coward · · Score: 0

      There was a study not long ago that showed that roughly 80% of computers used today are dual-core and with 4 GB of RAM or less. That's horribly inadequate nowadays even for web-browsing, let alone also trying to run Windows 10 on.

      Quad-core and 8 GB of RAM seems to be the new minimum for a decent experience and I only expect that to keep rising over time.

    2. Re:I love Firefox but... by Anonymous Coward · · Score: 0

      My old Intel Atom based EeePC is going to hate this, too. That being said, I still welcome this change. Security is more important than anything. If I have to finally buy a new laptop for web usage, I'll be glad to have the fire under my ass. This fucker only has 1GB of RAM. I could expand it to 2GB, but what kind of practical difference would that really make these days?

      I could still use it offline, maybe throw 32-bit Lakka on there and use it as a portable emulator machine. It's not going to the landfill any time soon.

  17. Terrible news for tab hoarders (Like me) by Anonymous Coward · · Score: 1

    So now I’m going to have like 500-600 additional processes running on my box every day. Hrm.

    1. Re:Terrible news for tab hoarders (Like me) by Anonymous Coward · · Score: 0

      So now Iâ(TM)m going to have like 500-600 additional processes running on my box every day. Hrm.

      Yes, because tab hording on the order of 100+ tabs is not a typical or legitimate use case for a mainstream browser.

      I'm sorry, but I'm happy that browser designers do not cater to that use case. Not because I want to cause you pain or inconvenience you, but because attempting to cater to that use case holds us all back from useful improvements. I'm sympathetic to people nailed by software updates breaking workflows, but there's a certain point where the answer is "yes, really, you are Doing It Wrong."

      So yes, to you and everyone else inconvenienced by these potential changes: Please go use Pale Moon. Do it now, do it today, let this be the impetus. That way, you can gleefully post on Slashdot about how you are using Pale Moon on every single Slashdot article about Firefox. Bend Pale Moon to cater to your workflow, and leave Firefox the hell alone. You can benefit from herd immunity since no one will bother to exploit Pale Moon, all while the rest of us can enjoy a modern browser.

      Let the rest of us live like it's about to be 2020, not 2005.

    2. Re:Terrible news for tab hoarders (Like me) by Anonymous Coward · · Score: 0

      No because you already use lazy loading, like any sane person with tens to hundreds of tabs do.

  18. Quantum Fission?... by Anonymous Coward · · Score: 0

    Is that a real thing?

  19. Can't hurt the best ad/threat/tracker blocker by Anonymous Coward · · Score: 0

    See subject (doesn't run in a browser) & APK Hosts File Engine 2.0++ 64-bit for Linux/BSD h t t p : / / a p k . i t - m a t e . c o . u k / A P K H o s t s F i l e E n g i n e F o r L i n u x . z i p

    Yields more security/speed/reliability/anonymity vs. any 1 solution (99% of threats use hostnames vs. IP address most firewalls use) more efficiently/FASTER + NATIVELY 4 less!

    Vs. "Bolt on 'MoAr' illogic-logic" slowing u hosts speed u up 2 ways: Adblocks + Hardcode fav. sites u spend most time @ vs. competition w/ security bugs (DNS/AntiVir) + overheads slowing u (messagepass 'souled-out' to advertisers easily detected & blocked addons + firewall filtering drivers) & their complexity leads to exploit!

    * ONLY 1 of its kind in GUI 4 Linux (soon 4 MacOS)!

    APK

    P.S.=> Protects vs. scripts/trackers (kernelmode faster vs. usermode slower NoScript vs. 3rd party script)/ads/DNS request tracking + redirect poisoned or downed DNS/botnets/malware download/malcript/email malicious payload

  20. Great... More of a hog? by PhotoGuy · · Score: 1

    So instead of taking 100% of my CPU, Firefox will be able to take 500% or 1000% of my CPU (100% for every tab I have opened and Firefox is spinning on for some reason.)

    And so instead of nearly crashing my machine by hogging resources, it most certainly will.

    Please, Firefox devs, get the CPU and memory leaks, javascript wedging, etc., under control before splitting things into more processes (which will just further hide such performance/memory leaks for now.)

    At least one might (supposedly?) be able to kill off rogue/misbehaving pages on a per-process basis. But again, a properly functioning/secure/stable browser wouldn't have that need in the first place.

    Sigh. 15% market share vs. Chrome's 60%, I fear for FF's future. It's my main browser, and the last viable hope for any privacy or security on the web (unless you wholehearted trust google.)

    --
    Love many, trust a few, do harm to none.
  21. Firefox Quantum memory footprint by kbahey · · Score: 4, Interesting

    Memory footprint is bad with Quantum. Never had my laptop swapping until I upgraded to Firefox Quantum.

    However, there is a workaround:

    Under Preferences -> Performance -> Content Process Limit, change it from 4 to 2 or 1.
    The default is the number of cores in your CPU, and when I went from a 2 core laptop to a 4 core one, memory skyrocketed. Setting it back to 2 or 1 keeps it under control.

    Also add the Auto Tab Discard Addon, and set it for 15 minutes.

  22. Re:Great... More of a hog? by Anonymous Coward · · Score: 0

    Ugh. I'm so tired of Firefox suddenly taking up 100% of my