6 ms·

The rendering engine is largely irrelevant to me as a user on mobile. (Though of course having the actual one would be better.) Firefox sync is the meat of the

The rendering engine is largely irrelevant to me as a user on mobile. (Though of course having the actual one would be better.) Firefox sync is the meat of the deal.

BiteCode_dev 7y ago
Sure if you don't want modern browser features like web worker, addons, and updates.
endemic 7y ago
Agreed, sync is a great feature, but last I checked iOS content blockers only work with Safari, not any other apps that use WKWebView. So stupidly, I have both Focus and Firefox on my iOS phone, but only Safari can use the Focus content blocker. It’s pretty terrible.
- jagger27 7y ago
  I find it super odd that Firefox Focus doesn't let you sign into Firefox Sync. I would just use that browser for everything.
- ymolodtsov 7y ago
  Have to used a local VPN from AdGuard to circumvent it and sometimes it glitches.
  - zoonosis 7y ago
    AdGaurd looks like a Safari content blocker and not a VPN to me. https://adguard.com/en/adguard-ios/overview.html https://adguard.com/en/adguard-ios/overview.html
    - commoner 7y ago
      AdGuard Pro, the paid version, uses the VPN interface to block ads. https://adguard.com/en/adguard-ios-pro/overview.html https://adguard.com/en/adguard-ios-pro/overview.html
zeveb 7y ago
> Firefox sync is the meat of the deal. Firefox sync really is neat, but be aware that for the last several years it has had a security flaw, one which the Firefox team has no interest in fixing (in fact, they consider it a feature!): your passwords and other private data are encrypted with your Firefox Account password. That would be fine so long as a) your Firefox Account password is truly secure and b) Mozilla can never see it. Unfortunately, they can: they serve an HTML page to log in to your Firefox account, which loads JavaScript from their servers. At any point they can start serving JavaScript which sends all passwords to their servers. What is so very, truly disappointing is that they used to have a great, easy-to-use Sync security system which was immune to this sort of attack, but they removed it. Anyway, I cannot advise using Firefox Sync for private information anymore.
- tialaramex 7y ago
  What is your threat model in which somehow Mozilla's ability to serve you JavaScript is a problem because they might use it to attack you, but Mozilla having written the entire program you're running isn't a problem?
  - zeveb 7y ago
    They can almost-indetectably target an individual user or group of users at any point in time in the former case while the latter case would leave traces in e.g. git histories. I trust Mozilla to write Firefox and I trust Debian to package it. I do not trust Mozilla to be trustworthy on a live and ongoing basis.

The rendering engine is largely irrelevant to me as a user on mobile. (Though of course having the actual one would be better.) Firefox sync is the meat of the deal.

BiteCode_dev 7y ago

Sure if you don't want modern browser features like web worker, addons, and updates.

endemic 7y ago

Agreed, sync is a great feature, but last I checked iOS content blockers only work with Safari, not any other apps that use WKWebView. So stupidly, I have both Focus and Firefox on my iOS phone, but only Safari can use the Focus content blocker. It’s pretty terrible.

jagger27 7y ago
I find it super odd that Firefox Focus doesn't let you sign into Firefox Sync. I would just use that browser for everything.
ymolodtsov 7y ago
Have to used a local VPN from AdGuard to circumvent it and sometimes it glitches.
- zoonosis 7y ago
  AdGaurd looks like a Safari content blocker and not a VPN to me. https://adguard.com/en/adguard-ios/overview.html https://adguard.com/en/adguard-ios/overview.html
  - commoner 7y ago
    AdGuard Pro, the paid version, uses the VPN interface to block ads. https://adguard.com/en/adguard-ios-pro/overview.html https://adguard.com/en/adguard-ios-pro/overview.html

zeveb 7y ago

> Firefox sync is the meat of the deal. Firefox sync really is neat, but be aware that for the last several years it has had a security flaw, one which the Firefox team has no interest in fixing (in fact, they consider it a feature!): your passwords and other private data are encrypted with your Firefox Account password. That would be fine so long as a) your Firefox Account password is truly secure and b) Mozilla can never see it. Unfortunately, they can: they serve an HTML page to log in to your Firefox account, which loads JavaScript from their servers. At any point they can start serving JavaScript which sends all passwords to their servers. What is so very, truly disappointing is that they used to have a great, easy-to-use Sync security system which was immune to this sort of attack, but they removed it. Anyway, I cannot advise using Firefox Sync for private information anymore.

tialaramex 7y ago
What is your threat model in which somehow Mozilla's ability to serve you JavaScript is a problem because they might use it to attack you, but Mozilla having written the entire program you're running isn't a problem?
- zeveb 7y ago
  They can almost-indetectably target an individual user or group of users at any point in time in the former case while the latter case would leave traces in e.g. git histories. I trust Mozilla to write Firefox and I trust Debian to package it. I do not trust Mozilla to be trustworthy on a live and ongoing basis.