Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Add extensions support and disable telemetry/remote-control by default (pushing updates where you control the code is remote control, don't even try to argue against that one).


> disable telemetry/remote-control by default (pushing updates where you control the code is remote control, don't even try to argue against that one).

So they shouldn't put updates on the Play Store?


They shouldn't be sending me to the Play Store ITFP.

I can't use Play because I've got no GApps in my phone, so I can't try their app unless I find a copy "somewhere" and convince myself it hasn't been poisoned. I got a reasonably up-to-date Firefox through APKPure, and later on after watching that 35C3 talk [1], I unzipped and grepped all those saved .apks to find the APKPure app itself and Firefox and LingoDeer had the same traces of Facebook's SDK in them. So that's off the table, huh? The ones that I saved from older phones after having gottten them through Play were all fine, but I can't update those without grabbing another phone and letting Google ... play in it. <ducks>

Just the other day I asked the Waterfox team for an apk and an md5sum, for the same reason-- though I'd settle for the md5sum alone! But Mozilla has resources WF can barely dream of, and it apparently intends to be a champion for privacy, so this is kinda sad.

[1] https://www.youtube.com/watch?v=y0vlD7r-kTc


If you have a phone without GApps, you're either in China (which has its own app store ecosystems) or not Mozilla's target audience for their binaries.

https://archive.mozilla.org/pub/mobile/releases/68.0b13/ has the APKs plus signed hashes though.

(But more generally speaking: Why don't you build Firefox from source if you're so concerned with middlemen messing with the code?)


Again, resources. My workstation is still waiting to get torn down to have the smoke scrubbed out; my desk is torn down and cleaned already but still waiting for me to have a new place to put it. My room didn't burn but there's no electricity and the whole place is not habitable; by the time it is, it won't be my room anyway.

The 4GB laptop isn't very good for compiling large projects, because running WF needs much of that-- and then, just linking libxul.so needs almost all of it. On the side, maybe I also care a little bit about not wasting the energy since I wouldn't be customizing it at all. On the other side, my software compilation experience perfectly matches my desire to ever do it: 100% for Linux, 0% for Android.

Thank you for the link. I went looking for that in the past but gave up, apparently too soon.


Telemetry helps them improve the product, and auto updates is the only way to protect users from 0-days.


Compile it from source rather than installing from the Google store if you are averse to auto updating application.


I have been, though it is very difficult.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: