[HN Gopher] Firefox 72 - our first song of 2020
       ___________________________________________________________________
        
       Firefox 72 - our first song of 2020
        
       Author : i_am_not_elon
       Score  : 94 points
       Date   : 2020-01-07 16:59 UTC (6 hours ago)
        
 (HTM) web link (hacks.mozilla.org)
 (TXT) w3m dump (hacks.mozilla.org)
        
       | floatingsmoke wrote:
       | Still no pinch to zoom. No chance on macOS.
        
         | smcleod wrote:
         | A workaround if you really want that might be to set a
         | bettertouchtool hotkey mapping pinch to CMD+/- when in the
         | Firefox app.
        
       | 2bitencryption wrote:
       | I'm a huge fan of the picture-in-picture, though I wish for a few
       | enhancements:
       | 
       | I wish clicking anywhere on the box would act as "play/pause",
       | instead of requiring me to hunt down the button. And of course I
       | wish for some visible/interactable buffer-bar, though I realize
       | that might not be standardized across webplayers, so maybe not
       | possible.
        
       | ln_00 wrote:
       | Finally. The notifications popup is seriously annoying.
        
         | wnevets wrote:
         | You can disable them for all sites in prefs IIRC.
        
           | 0xADEADBEE wrote:
           | Yep! I have this and it works perfectly.
           | 
           | - about:config
           | 
           | - dom.webnotifications.enabled = false
           | 
           | That's it. Haven't seen one in months.
        
             | pier25 wrote:
             | THANK YOU!
        
         | all_blue_chucks wrote:
         | What we really need in these permission popups is the ability
         | to say "no to all permissions from Gawker Media brands" and the
         | problem would be mostly solved.
        
       | donmcronald wrote:
       | > User research commonly brings up permission prompt spam as a
       | top user annoyance
       | 
       | What's user research?
       | 
       | Jokes aside, my favorite feature in Firefox is the good old-
       | fashioned search box. I use Bing by default and repeat searches
       | on Google or Duck Duck Go if I don't find results right away.
        
         | mey wrote:
         | Have you found Bing more desirable than DuckDuckGo for a
         | specific reason? (Uses DuckDuckGo and liberal use of the bangs
         | when things don't come up as expected)
        
           | donmcronald wrote:
           | > Have you found Bing more desirable than DuckDuckGo for a
           | specific reason?
           | 
           | No. I just wanted to diversify away from Google a bit and I
           | started with Bing because of Microsoft Rewards. I've only
           | been getting about 50 (USD) cents per month in points though,
           | so it's not compelling.
        
           | war1025 wrote:
           | I've used Yahoo since the early 2000s and never hopped on the
           | Google bandwagon.
           | 
           | The times Ive tried to find things in Google because "people
           | say it has better search", I've not had much luck. Possibly
           | because they don't have extensive data on me and my search
           | preferences?
           | 
           | I think Yahoo is backed by Bing these days? I always find its
           | search results perfectly adequate.
        
             | iudqnolq wrote:
             | By the way, DDG is also essentially entirely backed by
             | bing. Bing except ddg for bangs is pretty much the same as
             | just DDG.
        
             | agumonkey wrote:
             | Interesting I realize that Google results never really
             | became more precise with my usage.
        
       | Rotten194 wrote:
       | I find the notification permission change (requiring it to be
       | after a user gesture) really annoying. It doesn't do almost
       | anything to combat permission spam (if you're visiting a
       | clickbait site, you'll probably click or scroll at least once,
       | especially on mobile where sites usually have a giant header so
       | you need to scroll past the fold to even see that the article is
       | clickbait), and just inconveniences developers who have to
       | special-case Firefox's divergence from the spec when trying to
       | _legitimately_ use the gated features.
        
         | pier25 wrote:
         | Firefox should include a setting to disable all requests for
         | notifications much like they give you total control to block
         | autoplay.
        
           | barryvan wrote:
           | It does! https://blog.mozilla.org/firefox/no-notifications/
        
         | mintplant wrote:
         | If it's treated the same way as popup windows, then scrolling
         | shouldn't count.
        
       | zamadatix wrote:
       | I know the hacks blog tends to stick to "what web technologies
       | changed" but 72 also introduces "Experimental support for using
       | client certificates from the OS certificate store can be enabled
       | by setting the preference security.osclientcerts.autoload to true
       | (Windows only)." which has always been a huge PITA for me while
       | testing and many interested in these technology changes are
       | probably interested in this flag (though maybe moreso when
       | Mac/Linux get supported).
        
         | worble wrote:
         | I've always used the security.enterprise_roots.enabled flag for
         | this, is this new one different?
        
           | Boulth wrote:
           | From the property name it sounds like your property is about
           | trust roots (CAs) and parent's about client certificates (for
           | mutual TLS authentication).
        
       | butz wrote:
       | With notification spam fixed, how about tackling cookie banners
       | spam next? Let's work on a standard to allow user to set their
       | preferred cookie settings level once in browser UI and keep
       | websites clean.
        
         | enlyth wrote:
         | How would you detect if something is a cookie dialog in a
         | standardized way? It's pretty much impossible as all of them
         | are custom code with different layouts / selectors / sequence
         | of actions you need to take to opt out.
        
           | worble wrote:
           | The "I don't care about cookies" addon[0] seems to do a
           | pretty good job of it, I've not seen a banner in ages. I
           | assume it works on a mixture of detecting popular cookie
           | popup js libraries, and user feedback for the rest (although
           | I can't seem to find a github or any code for it so it's hard
           | to say). I think ublock also has a filter list for it built-
           | in.
           | 
           | 0: https://www.i-dont-care-about-cookies.eu/
        
         | alerighi wrote:
         | Unfortunately, they are required by law (at least in Europe)
         | and we can't do much about it. You can't say use a browser API
         | to set a global setting for them, because GDPR explicitly
         | requires that every website must get the user consent for them.
         | 
         | Of course the real solution (and the reason why GDPR introduced
         | the banner) is for website to stop using cookies for tracking
         | their users and thus have no reason to put the banner (you
         | don't need the banner for technical cookies, such as the one
         | used for logins, but only for third party profiling cookies).
        
           | worble wrote:
           | A minor nitpick, but the "Cookie Law" that introduced these
           | banners was way before GDPR, although the GDPR does have
           | articles that also talk also about cookies.
           | 
           | The intent of the parts of GDPR which mention cookies (or, at
           | least, what I assume the intent was) was to essentially
           | "upgrade" the banner from a simple and largely useless
           | notification (i.e "By using this site you agree to our use of
           | cookies") to one of informed consent (i.e "Please click
           | accept or deny the use of cookies to continue using this
           | site").
           | 
           | Interestingly, as far as I am aware, no site or company has
           | ever been taken to court or even fined for not using a cookie
           | banner, despite some websites publically declaring they won't
           | use it[0].
           | 
           | 0: https://nocookielaw.com/
        
           | antisthenes wrote:
           | > You can't say use a browser API to set a global setting for
           | them, because GDPR explicitly requires that every website
           | must get the user consent for them.
           | 
           | I can see why that prevents a browser from auto-accepting all
           | cookies, but how in the world does this logic apply to me if
           | I want to deny consent to 100% of the websites to use
           | cookies?
           | 
           | Set the default on the browser to deny all consent, and show
           | the cookie notification somewhere unobtrusive, the same way
           | it was done for notifications.
        
             | afiori wrote:
             | I suspect that it would be far to expensive to make it work
             | on the hard 20% of websites and brittle on the easy 80%.
             | 
             | As a personal confession I cannot sympathize for this
             | animosity towards banners. Apps usually have a worse
             | onboarding experience than websites.
             | 
             | My only considerations of GDPR notices is to note how many
             | of them manage to be uncompliant and wonder if archiving
             | services can bypass them.
        
           | Tilian wrote:
           | Since most websites seem to prefer slapping banners and
           | modals on their pages as opposed to actually ridding their
           | sites of tracking cookie usage I've found that just blocking
           | the elements using a filterlist[0] is a nice solution.
           | 
           | [0] https://www.i-dont-care-about-cookies.eu/abp/
        
           | gpvos wrote:
           | AFAIK, this was a separate law that existed already before
           | GDPR came along.
        
         | zozbot234 wrote:
         | > Let's work on a standard to allow user to set their preferred
         | cookie settings level once in browser UI and keep websites
         | clean.
         | 
         | Bring back P3P, with GDPR acting as the enforcement part (which
         | was quite lacking when P3P was first proposed)? Might work
         | quite nicely, and the support is in browsers already, it just
         | tends to be ignored.
        
         | humblebee wrote:
         | I don't remember the website, but I ran across one on hacker
         | news a while ago that had the best cookie popover I've ever
         | seen. It floated over from the left hand side of the page. Had
         | simple and clean UX allowing for user configuration of cookies.
         | Felt a little more like a cookie control panel than a popup
         | disclaimer. Allowed the user to select which cookies to allow
         | with a small description of what they did.
         | 
         | Wish I had bookmarked the page.
        
       ___________________________________________________________________
       (page generated 2020-01-07 23:00 UTC)