Changes

Mozilla Firefox

2,247 bytes added, 5 February
/* secure DNS: Firefox Invasion of Privacy and Security Alert */
The following lines were added (+) and removed (-):
Update: '''Firefox Quantum / Firefox 57''' has completely upset the functionality and visual layout of the Firefox Web Browser.  If Firefox Quantum is unacceptable to you, and you wish to maintain the latest level of browser security you have the option of switching to their '''[https://support.mozilla.org/en-US/kb/switch-to-firefox-extended-support-release-esr Firefox Extended Support Release (ESR)]''' for personal use.  This give you the look, feel, and functionality of their previous releases and you will still continue to receive security updates.'''To install the Firefox ESR on Ubuntu see [[Firefox Extended Support Release]].'''[about:config]{{:Fix Firefox Annoyances}}=== Tab open order reversed after update ===== Add-ons ==Firefox tabs opening backwards - Since the upgrade to Firefox 3.6 the order which tabs open has changed or is inconsistent.  Previously tabs opened sequentially, so that the latest one was always at the far right. To restore the previous behavior do the following:Firefox addons are divided into Extensions, Themes, and Plugins.  Our [[Favorite Firefox Extensions]]are compiled in a list, and man more are available from the [https://addons.mozilla.org/en-US/firefox/ Firefox Add-ons] web site.  * In the URL bar type:  about:config== Security ==* Find or create  browser.tabs.insertRelatedAfterCurrent* Set the value to:  False=== Hide the Tab Bar When Browsing a Single Page ===Although more secure than MSIE by far with the default installation, vulnerabilities can still be greatly reduced by taking measures to lock down Firefox.The default setting in Firefox 3.5 is to always display tabs, even when you're only browsing a single page. Show more of the web page by hiding the tab bar if only viewing a single page.Two Extensions for Firefox recommended for Security and Privacy - A One-Two Punch must have!# Go to Tools, and then Options. * [[Favorite_Firefox_Extensions#NoScript|NoScript]] - Using this tool correctly will do more to prevent a virus than running anti-virus alone# Go to the Tabs menu, and uncheck "Always show the tab bar" * [[Favorite_Firefox_Extensions#Ghostery|Ghostery]] - Hide yourself from trackers and help protect your identity online=== Menu bar missing ====== secure DNS: Firefox Invasion of Privacy and Security Alert ===# Press Alt on the keyboard and release. The menu bar will appear temporarily.Firefox browser will ignore your network DNS by default in favor of [[DNS over HTTPS]] (aka DoH) or a type of Trusted Recursive Resolver (TRR).  # On the menu bar, click View, go to Toolbars, then select which toolbars you want to see.=== PREVENT tabs/sessions restoring when restarting Firefox after a forced close/crash ===They should face legal action over this...  Mozilla using their DNS-over-HTTPS by default, bypassing your LAN DNS security filtering.  This is now ENABLED by DEFAULT and you have to dig though settings to disable it or take action using a network firewall to block the destination.tested on version: 8.0You can do this by changing a hidden preference."''This is actually potential a huge privacy issue as it is written that [https://github.com/StevenBlack/hosts/issues/1051 Firefox by default will route all your DNS traffic] to an external source beyond your control and without your accept and knowledge, and who is the external DNS hosting company and what will they do with all the data they collect?''"  Answer: At present it is Cloudflare and the purpose besides their claim of security is Data Mining: they want to know more about you!  about:config* In settings look for and uncheck "'''Enable DNS over HTTPS'''" to prevent a report of all web sites (via DNS query) being sent to a 3rd party. They can see a list of where you go on the web and store that for data collection purposes such as profiling you for marketing, analytics, or something far more nefarious. * From about:config a user can set network.trr.mode to 5 to completely disable TRR. In the filter box type resume to bring up a small number of preferences, Double-click on the [[File:firefoxsettingdns-over-https.jpg|thumb|illustration showing default setting, change this to Off|none|175px]] preference browser.sessionstore.resume_from_crash to change its value to false reference: [http://support.mozilla.com/en-US/questions/754840 How do I PREVENT tabs/sessions restoring when restarting Firefox after a forced close/crash?]To signal that their local DNS resolver implements special features that make the network unsuitable for DNS-over-HTTPS (DoH), network administrators may configure their networks to modify DNS requests for the following special-purpose domain, called a canary domain: '''use-application-dns.net'''.  Firefox is using '''https://cloudflare-dns.com/dns-query''' for the actual DNS resolution being performed.You can also Set the pref browser.sessionstore.max_resumed_crashes to 0 on the about:config page to get the about:sessionrestore page immediately with the first restart after a crash has occurred or the Task Manager was used to close Firefox.The Firefox Trusted Recursive Resolver (TRR) is named such in that "they" trust the DNS resolver, because they are in control. Network Administrators will mostly prefer to trust their own resolver, because my trusted resolver is certainly not what Mozilla trusts as a resolver. That will allow you to deselect the tab(s) that you do not want to reopen, but will allow to reopen the other tabs.Quoted from a firewall vendor source, "''Mozilla has partnered with Cloudflare so that means TRR DNS queries are sent there and not to the intended server. Some people already use Cloudflare, or they don't care where the queries go, so that's a wash or a net gain. If you do not trust Cloudflare or do not want to put all your eggs in the Cloudflare basket, that's not so good.''"=== Save Image As Directory Randomly Changes (unresolved) ===== Support ==This behavior was introduced in FF7, associating a downloaded image with a folder on your harddrive.  === Bug: Closing Firefox starts Acrobat reader process ===FF7 Workaround: Apply the trick once a while when you want FF to use the general/last download directory and forget about all these useless directories it memorized. It is easy to apply :  Select Tools | Option and choose Privacy tab, Click on "clear your recent history", Time range to clear : choose Everything (last option in the listbox), Click on Details (if necessary), **Uncheck** all options **except** Site Preferences (thus only Site Preferences is checked at the end).  Closing Firefox launches AcroRd32.exe, even though the Adobe Acrobat plugin is disabled. Problem reproduced with FF8.0.  result: inconclusiveWhen Firefox versions after version 4 clear cookies, each plugin is executed to clear its own cached elements.  Adobe, a company well known for being intrusive, made the Acrobat reader so it stays TSR in memory.SOs (eg, Flash cookies) for each plugin.source: [http://support.mozilla.com/en-US/questions/887248 Save Image As keeps changing directories]If you have Firefox set to delete cookies on shutdown, you'll notice that there are a bunch of plugin-container.exe processes started up as well. Those are the other plugins.  Adobe Acrobat is intrusive and runs as its own process.  FF8 Workaround: Apparently the issue was addressed by the addition of an option to disable this behavior. source: [http://forums.mozillazine.org/viewtopic.php?f=9&t=2189297 Closing Firefox starts Acrobat reader process] on mozillaZine * Tools, Options, and Privacy Tab * uncheck "remember download history"<BR>You can also uncheck "remember my browsing history" for privacy purposes.result: inconclusiveSuggested Solutions: Change Firefox settings to not delete cookies on shutdown.  -or- completely remove Adobe Acrobat reader plugin.FF11 Workaround:  about.config=== How can I remove the Acrobat Plugin? === browser.download.lastDir.savePerSitebrowser.download.lastDir.savePerSite controls whether the directory preselected in the file picker for saving a file download is being remembered on a per-website (host) base. If set to true, the data is stored as content preference.* reference: [https://developer.mozilla.org/en/Preferences/browser.download.lastDir.savePerSite browser.download.lastDir.savePerSite]values:Delete the file named nppdf32.dll from your Mozilla Firefox plugins folder. You may have to enable showing hidden files to do this.* true (default) - ''The last used directory for the website (host) serving the file for download will be preselected in the file picker. If no download directory for the current website has been stored, browser.download.lastDir will be used.''* false - ''The last used directory for any download (stored in browser.download.lastDir) will be the preselected directory in the file picker.''This has been discussed on Firefox Help on the thread, [http://support.mozilla.org/en-US/questions/882443?page=1 Save image doesn't remember last location saved for Firefox 7], page [http://support.mozilla.org/en-US/questions/882443?page=3 3] mentions browser.download.lastDir.savePerSite.=== Delete Cookies and Cache in Firefox 8 ===update: issue still not resolved.  this bug is persistent. with value set to false, ff version 14.0.1, sometimes the save directory changes (is not the previous one used) and seems related to the TLD URL, particularly noticeable with  blogspot.com image saves.There are two methods in the modern Firefox.update: testing concludes this glitch relates directly to "Site Preferences" browsing history. In an experiment, going to "Clear Recent History" and selecting only "Browsing and Download History" causes next save on stick site to be the default /download directory, which at first seemed related, until further testing revealed that only clearing "Site Preferences" had a specific and direct result; this will cause the "save as" to download to the last save as directory, even for TLD domains with the memory effect. If the user manually cleared only the "Site Preferences" each time, then the image save directory for specific sites glitch will not manifest.  (In the experiment the browser was closed and opened again each time after clearing.)(1). To clear the cache, cookies, and/or history immediately simply press Alt to goto the menu, Tools, and choose "Clear Recent History." This will open a dialog labeled "Clear all History" with a bunch of checkboxes next to items you can deselect or select.=== Asinine Top Sites New Tab Page ===(2). You can tell Firefox to "Clear history when Firefox closes," which gives you options including cookies and cache.  To change this setting and configure options press Alt to goto the menu, Tools, Options - you will notice a checkbox labeled "Clear history when Firefox closes."  Click the "Settings" button on the right to configure what gets cleared.June 2012 Mozilla adds another annoying "new feature" enabled by default that negatively impacts browser performance and privacy, further contributing to overall bloat.  When you create a new tab, Firefox shows top sites, idiot crap like facebook.  Firefox trying to be more like Chrome.  === Setting Default Browser via Windows Registry ===you can turn this feature off completely:{{:Windows Registry- Default Web Browser}}# goto about:config=== WebExtensions API ===# Type browser.newtab.url in the search box.# Double-click the browser.newtab.url preference and change the url from about:newtab to about:blank.# Click OK and close the about:config tab.  ref: http://support.mozilla.org/en-US/kb/new-tab-page-show-hide-and-customize-top-sites#w_how-do-i-turn-the-new-tab-page-offWhen did Firefox adopt the WebExtensions API?== Add-ons ==In August of 2015, Mozilla announced that the legacy XPCOM- and XUL-based extension systems would be deprecated in favor of the WebExtension API. Between that date and November, 2017, both legacy and WebExtension add-ons were supported in some fashion. With the release of Firefox 57 (Quantum) in November, 2017, WebExtensions became the only supported API for extension development. Firefox addons are divided into Extensions, Themes, and Plugins.  Our [[Favorite Firefox Extensions]]Why WebExtensions and not Jetpack?are compiled in a list, and man more are available from the [https://addons.mozilla.org/en-US/firefox/ Firefox Add-ons] web site. == Security ==The WebExtensions API has some inherent technology advantages, such as built-in support for content blocking used by popular ad-blocking extensions, that Jetpack lacked. More importantly, though, basing the initial implementation of WebExtensions on Chrome's API meant that Firefox could leverage a large population of Chrome extensions (larger than Jetpack add-ons) and extension developers. Those developers who stayed with the common APIs were also able to work off of a common codebase, and port extensions more simply between browsers.Although more secure than MSIE by far with the default installation, vulnerabilities can still be greatly reduced by taking measures to lock down Firefox.== Other Tricks ===== Block Google Doodles Without any Special Extension ===This trick can be used to block images from any particular site or domain, including google.com to block annoying google doodles.== Support ==#Right-click on the Google Doodle image. Choose "View Image Info"#Observe the site domain in the box, located below and left is a checkbox with the option "Block Images From"#check the box and close the dialog, then reload Google.=== Bug: Closing Firefox starts Acrobat reader process ======Dark Theme and Force Pages to Dark Background===You can force the Firefox interface to dark colors, white on black.  This is a two part thing, in consideration that the Theme setting is only for the interface and the color override for pages is part of "Language and Appearance."  ''Verified in version 115.3.1esr (64-bit)''#click the hamburger menu, choose "Add-ons and themes"#click on "Themes" and enable "Dark"Closing Firefox launches AcroRd32.exe, even though the Adobe Acrobat plugin is disabled. Problem reproduced with FF8.0. Unlike Chrome this won't override many pages making them dark. You can configure this behavior and choose the color scheme for web sites.# hamburger menu, settings, general, Language and Appearance# (a) "Website appearance" - Some websites adapt their color scheme based on your preferences. Choose which color scheme you’d like to use for those sites. # (b) "Colors" - Override Firefox’s default colors for text, website backgrounds, and links. And you can "Override the colors specified..."When Firefox versions after version 4 clear cookies, each plugin is executed to clear its own cached elements.  Adobe, a company well known for being intrusive, made the Acrobat reader so it stays TSR in memory.SOs (eg, Flash cookies) for each plugin.[[File:firefox115esrdarktext.jpg|thumb|none|Language and Appearance|200px]]If you have Firefox set to delete cookies on shutdown, you'll notice that there are a bunch of plugin-container.exe processes started up as well.  Those are the other plugins.  Adobe Acrobat is intrusive and runs as its own process. == Alternatives ==Firefox Quantum / Firefox 57 has a nasty UI and has excessive resource consumption meaning it runs slowly on anything except the latest hardware.  The Firefox Extended Support Release (ESR) is better but on Linux Ubuntu or Mint it seems to be a dog and also very resource intensive.  Running Firefox and Chrome at the same time or Firefox and Evolution at the same time seems to result in Internet browsing grinding to a slow crawl if not a complete stop.  Lets face it, the current Mozilla team is really screwing up Firefox and as an alternative Chrome lacks adequate privacy and security.source: [http://forums.mozillazine.org/viewtopic.php?f=9&t=2189297 Closing Firefox starts Acrobat reader process] on mozillaZineOne alternative to the regular firefox is [[Firefox Extended Support Release]] also by Mozilla.Suggested Solutions:  Change Firefox settings to not delete cookies on shutdown.  -or- completely remove Adobe Acrobat reader plugin.There are alternatives that work with the same rendering engine, or share a similar UI with Firefox, and seem to perform better.   * [[Pale Moon]] web browser - The superior UI of the classic Firefox and a much smaller memory footprint (runs fast on linux!) and compatible with many Firefox extensions including [[NoScript]].  Pale Moon version 27 running with the NoScript extension for added security was capable of correctly rendering popular sites including eBay and Amazon.com with complete functionality.  Furthermore, as with Amazon.com being site burdened with excessive JavaScript and CSS and has always been problematic when using Firefox, runs very nicely on Pale Moon.  The rendering speed of Amazon.com with the exception added to NoScript allowing full site features active was just as fast as with Chrome.  The only criticism of Pale Moon at this time is the installation process would be better if compatible with the APT package management tool rather than their installer, although their installer works fine with the exception of a glitch in the home user cache directory.=== How can I remove the Acrobat Plugin? ===Delete the file named nppdf32.dll from your Mozilla Firefox plugins folder. You may have to enable showing hidden files to do this.=== Delete Cookies and Cache in Firefox 8 ===There are two methods in the modern Firefox.(1). To clear the cache, cookies, and/or history immediately simply press Alt to goto the menu, Tools, and choose "Clear Recent History."  This will open a dialog labeled "Clear all History" with a bunch of checkboxes next to items you can deselect or select.(2). You can tell Firefox to "Clear history when Firefox closes," which gives you options including cookies and cache.  To change this setting and configure options press Alt to goto the menu, Tools, Options - you will notice a checkbox labeled "Clear history when Firefox closes."  Click the "Settings" button on the right to configure what gets cleared.[[Category:Internet]]
Bureaucrat, administrator
16,192
edits