13 ms·
Firefox 38 released
- serve_yay 11y agoInteresting, I had not heard of ruby before! (more info here, as linked in TFA https://hacks.mozilla.org/2015/03/ruby-support-in-firefox-developer-edition-38/ https://hacks.mozilla.org/2015/03/ruby-support-in-firefox-de... )
- wodenokoto 11y agoI was really surprised to see this wasn't implemented much earlier. Chrome apparently had support for XHTML 1.1 Ruby since 2010! I am also surprised to see how verbose actual ruby markup is. Better examples of mark-up on wikipedia: https://en.wikipedia.org/wiki/Ruby_character#HTML_markup https://en.wikipedia.org/wiki/Ruby_character#HTML_markup
- threedaymonk 11y agoIts absence has been a persistent irritation to me. I'm glad that I can now retire this: https://github.com/threedaymonk/furigana-shim https://github.com/threedaymonk/furigana-shim
- w1ntermute 11y agoIt's been possible to add support with an extension[0] for a long time. 0: https://addons.mozilla.org/en-US/firefox/addon/html-ruby/ https://addons.mozilla.org/en-US/firefox/addon/html-ruby/
- malka 11y agoAt first, I thought they added support for client side scripting in Ruby.
- dubcanada 11y agoAnyone have any insight on why they removed autocomplete from username & password fields?
- phireal 11y agoPresumably this: https://bugzilla.mozilla.org/show_bug.cgi?id=956906 https://bugzilla.mozilla.org/show_bug.cgi?id=956906 I think it means that sites can't overrule the browser's inclination to store passwords. The argument seems to be the browser makers will store passwords safely.
- dao- 11y ago> The argument seems to be the browser makers will store passwords safely. Not quite. Unless you set a master password, whoever owns your computer will own the passwords stored by your browser. The argument is that disabling autocomplete makes users choose poor passwords that are easy to remember, or write passwords down somewhere, which is at least as bad as having passwords stored in your browser profile.
- quadrangle 11y agowriting passwords down somewhere, such as on PAPER, is not a particularly bad idea unless you keep the paper by your computer.
- sandstrom 11y agoThere are some valid use-cases, e.g. in web-apps with an user-admin section. It's useful that when adding user 2 (or N) it won't auto-fill with details from the previous user (that you just added). If anyone has that issue, a workaround is to add multiple email/password inputs (dummies) around the real-one, and hide them. In Chrome, this causes it to 'give up' and not try to auto-fill the fields.
- gear54rus 11y agoThey removed the ability of a site maker to tell user if they should use password manager on their website. A much needed feature aka 'no, I do not care about password for your stupid site'.
- aroch 11y ago
- Touche 11y ago> Mac OS X: Implemented a subset of the Media Source Extensions (MSE) API to allow native HTML5 playback on YouTube HTML5 > Implemented Encrypted Media Extensions (EME) API to support encrypted HTML5 video/audio playback (Windows Vista or later only) HTML5 > Automatically download Adobe Primetime Content Decryption Module (CDM) for DRM playback through EME (Windows Vista or later only) :( Notice which OSes are left off the list. I don't blame Mozilla as they were just following inevitability but it's a sad day for the web as there's now a lot of content that, by design of W3C, only works on certain OSes. Of course the EME champions promised us that this wouldn't happen and they are apparently silent for the moment.
- TazeTSchnitzel 11y ago> Mac OS X: Implemented a subset of the Media Source Extensions (MSE) API to allow native HTML5 playback on YouTube HTML5 Media Source Extensions, while compatible with Encrypted Media Extensions, the DRM system, are not DRM. They let JavaScript manipulate the byte streams of the video data before it goes to the video codec, so you can handle streaming and such from JS.
- acdha 11y agoWhat video could you watch before that you cannot watch now? I also wish we lived in a world which didn't need EME but it's not like the status quo was video which played for everyone. It just meant that everyone had to download monthly updates to avoid security problems with the massive plugin they used to play video and Linux, etc. users were largely still screwed.
- bad_user 11y agoThere's a big difference - before these moves, DRM delivery of video had to be done using shitty nonstandard plugins or native apps, right? Whenever this happens, usability suffers as well. And we had a real opportunity here to give users an open and non-broken standard as an alternative, on top of which alternative platforms for content delivery could be built, alternatives that could have won simply because of the ubiquitousness of the standard browser. Besides, DRM is technically and fundamentally broken. All my respect for W3C has gone down the window.
- TazeTSchnitzel 11y ago> Ruby annotation support Finally! After only 24 years, East Asian languages get some attention. Perhaps next Western browser makers might consider vertical text support. sigh
- ramy_d 11y agothe syntax is really confusing though. Duplicating characters? I thought it was hard to follow what would end up where https://hacks.mozilla.org/2015/03/ruby-support-in-firefox-developer-edition-38/ https://hacks.mozilla.org/2015/03/ruby-support-in-firefox-de...
- TazeTSchnitzel 11y agoThe syntax isn't that bad. It's written in a style that gracefully degrades: strip out the HTML tags, and it's perfectly readable, but the furigana shows up inline rather than above. Portions are duplicated to ensure graceful degradation. You type 振り仮名(ふりがな) (with tags demarcating the sections, of course), repeating the り, so it'll show up properly if the browser lacks ruby text support. But if the browser does have ruby text support, it can hide the り from the furigana because it's redundant: 振 仮名 ふりがな
- wodenokoto 11y agoOn iPad the り is only visible in the furigana. On top of that, the furigana is displayed below the text.
- TazeTSchnitzel 11y agoYes, only Firefox 38 has support for advanced ruby text, unfortunately. While advanced ruby text degrades great in browsers with no ruby text support at all, it doesn't seem to degrade well in browsers with basic support :(
- TazeTSchnitzel 11y agoOh wow, I screwed that up. I meant to type this: ふ がな 振り仮名 Furigana is a pronunciation guide for kanji, not the other way around. ;)
- AdmiralAsshat 11y ago>CRITICAL Vulnerability can be used to run attacker code and install software, requiring no user interaction beyond normal browsing. Uh, glad they fixed this one, but it sounds pretty bad. I'd kinda like to see the actual CVE/bug report.
- joshmoz 11y agoYou're looking at the key which defines what CRITICAL means. Look further down the page for info about actual vulns. I believe they're running a bit late posting the vulns for 38 today.
- deleted 11y ago[deleted]
- deleted 11y ago[deleted]
- xixixao 11y agoSo I got momentarily excited that there are new "tab preferences" (like having new tab open next to the current one), but unfortunately it's just a UI revamp of the settings pane, which since I'm on OS X I cannot care for much (the UI is a bit too flat and generally not as familiar as the native box, although who cares...)
- hobarrera 11y agoI fail to see why Mozilla chose this direction. Firefox now looks more alien on all platforms with no real functional benefit.
- kasabali 11y agoBecause this way you recognize Firefox everywhere when you see it, that's their reasoning. There was a presentation about it few years ago but I'm too lazy to hunt after the link right now.
- y0ghur7_xxx 11y agoWhat happened to opportunistic encryption? I loved that feature but it was disabled because of a bug. I hoped it would be enabled again in the next major release, but no mention of it. Can someone from Mozilla tell me more?
- lmandel 11y agoOpportunistic encryption is being tested again in Firefox 39, which is scheduled to release on June 30, 2015.
- quadrangle 11y agoLooks like (haven't tested yet), this will finally support meet.jit.si for true free/open group video chat!
- deleted 11y ago[deleted]
- etimberg 11y agoThe broadcast channel support looks promising. Does anyone know if Chrome plans to support it in the future?
- McGlockenshire 11y agoCanIUse pointed at a proposal for Chrome support which eventually points at this bug: http://code.google.com/p/chromium/issues/detail?id=161070 http://code.google.com/p/chromium/issues/detail?id=161070 There are some work-in-progress patches posted there.
- 0x0 11y agoCould this be abused on iframed ad network domains / facebook like buttons / tweet buttons to track real time browser state and acitivity across all active tabs?
- kasabali 11y ago> autocomplete=off is no longer supported for username/password fields Super cool. Don't tell me what not to auto complete!
- whatsgood22 11y ago>Improved page load times via speculative connection warmup turning into chrome!
- acquacow 11y agoAnyone else having issues with the bookmarks toolbar in 38? Mine draws blank when you open a window. I have to hide/show it before it draws correctly. This occurs each time a window is opened.
- acquacow 11y agoMy menu button on the right of the address/search bar doesn't work anymore either. (OSX 10.10.2) Gonna uninstall/reinstall
- acquacow 11y agoWas still doing it on a clean install, it didn't like something in my profile... renamed it, and re-installed my addons in a new profile and it's fine now. Unamused.
- acquacow 11y agoAah, it's an add-on for work for some single-sign-on stuff... luckily I don't need that system anymore.
- justinph 11y agosrcset! Finally, responsive images are gaining ground.
- nominated1 11y agoCan someone explain why Mozilla is not signing gmpopenh264.dll and now eme-adobe.dll? These are executed from AppData (a folder with read/write permissions). Executing dll's from AppData is generally a bad idea but if I'm going to allow it I at least want a Publisher rule attached. Google signs their CDM (WideVine) dll delivered with Chrome that executes from AppData, why isn't Mozilla?
- hsivonen 11y agoFirefox checks SHA-512 hashes at download time. If you have local malware that changes the GMP DLLs thereafter, the malware might as well change Firefox itself.
- duaneb 11y ago> If you have local malware that changes the GMP DLLs thereafter, the malware might as well change Firefox itself. Well hopefully firefox itself is signed. This is exactly what signing is designed to prevent.
- hsivonen 11y agoFor software that runs as non-admin, authenticode is very much about checking delivery-time integrity. If you have admin-level malware, it can replace signed software (that gets run without admin privs and doesn't have UAC at launch) with unsigned lookalikes.
- duaneb 11y ago> If you have admin-level malware ...you should reinstall your OS. Really, that shouldn't even be an "if" these days. Of course security doesn't matter if people can just execute random code on your machine. Anyway, code signing is not about delivery time integrity. It's easy to check whether a given binary is code signed at any given time—without it you wouldn't be able to revoke bad certificates. The only reason you shouldn't sign is if signing has some cost (like in the Mac OS X ecosystem) or you can't trust a single root certificate anyway (at which point you might as well move to OpenBSD anyway).
- _lce0 11y agoHonest question to Firefox dev's: I want to keep using firefox, but not the DRM thingy. I'd rather not see any video on the web, to be forced to use DRM technology. Do you plan to support a DRM-free version?
- cpeterso 11y agoTo disable EME, go to the Firefox Preferences menu and uncheck the "Play DRM content" checkbox. That will disable EME and delete the Adobe CDM binary if it has been installed. This preference doesn't disable DRM in Flash and Silverlight, however. https://support.mozilla.org/en-US/kb/enable-drm https://support.mozilla.org/en-US/kb/enable-drm
- acdha 11y agoThey already have releases without EME at all if you don't even want to disable it: http://download.cdn.mozilla.net/pub/firefox/releases/38.0/win32-EME-free/ http://download.cdn.mozilla.net/pub/firefox/releases/38.0/wi...
- dao- 11y agoThere's a "Play DRM content" checkbox in about:preferences#content. If I remember correctly, unchecking it will completely remove the CDM, checking it installs it again.
- chimeracoder 11y ago> I want to keep using firefox, but not the DRM thingy. I'd rather not see any video on the web, to be forced to use DRM technology. > Do you plan to support a DRM-free version? Iceweasel (the version of Firefox shipped with Debian) will always be DRM-free, as per the Debian policies on free software. It's almost the exact same as Firefox, except the logo and the name - all the other functionality is identical.
- dublinben 11y agoYou might be interested in GNU Icecat[0]. It is a spinoff of Firefox that does not include antifeatures like DRM. [0]https://www.gnu.org/software/gnuzilla/ https://www.gnu.org/software/gnuzilla/
- dd9990 11y agoThe Readinglist feature seems to have disappeared from the Desktop build. I really liked using it in Nightly and on Android. I briefly looked at Bugzilla and can't figure out its future. Is it really being replaced with a tie-in to a closed source US based startup company, Pocket? Can any devs comment?
- Lost1337 11y agoUninstalled. I have enough of you guys copying Chrome and turning Firefox into a DRM and social media browser. Get lost! At least the Seamonkey guys know that advanced users also have the right to have their Options inside of the browser's code, something what you Mozilla guys are unable to understand these days! What is good for Chrome is not equal as good for Mozilla Firefox!
- deleted 11y ago[deleted]
- Lost1337 11y agoUninstalled. I have enough of you guys copying Chrome and turning Firefox into a DRM and social media browser. Get lost!