Hacker News Reader

Comment by d3nj4l | Hacker News Reader

I don't disagree about the fact that Mozilla makes questionable moves. I still deeply resent that they laid off the servo team, and I treat their executives with as much suspicion as the rest of HN, see their recent moves with Firefox suggest in the address bar. But I think the fundamental difference is that, at the end of the day, I think Mozilla and Firefox are still the lesser evil in the borwser war; Firefox is still the best browser to run uBlock on, they have aggressively worked to end tracking and they have a mobile browser that actually supports extensions where possible (hello, Firefox Reality!) So I prefer to try as much as possible to work with Firefox instead of just accepting Chrome's dominance, especially given that it's just a worse browser for privacy.

View on HN

> they have a mobile browser that actually supports extensions where possible

This isn't quite as simple. Firefox on Android will only install a subset of extensions from addons.mozilla.org, based on an allow-list maintained by Mozilla.

But other extensions on AMO (and therefore already complying with Mozilla's policies) work satisfactorily when installed in Iceraven (a fork of Firefox on Android).

So this shows that the limited list of extensions available for Firefox on Android is not limited by technical reasons (“where possible”), but by Mozilla's choice.

---

But I agree with the broad point: yes, Mozilla is pretty sketchy, but Google is orders of magnitude sketchier.

The limited extensions on Android is for technical reasons. Instead of having zero extension support on release, they focused on supporting the APIs needed for popular extensions first and are working on adding the rest. It's an entire rewrite of the browser. There's still a lot of missing APIs they need to implement. Allowing every extension from AMO to work would be almost pointless because so many would be broken.

The fact of limiting the list of extensions that can be installed is indeed for technical reasons — I'm sure there are some extensions that don't work. But the list of which extensions can be installed is not restricted solely for technical reasons.

I use several extensions in Iceraven — Privacy Redirect; Bypass Paywalls Clean; I don't care about cookies — that work usefully. If there are any missing APIs, I haven't noticed them. These extensions can't be installed in Firefox for Android.

There's no technical difference between Iceraven and Firefox, except that Iceraven has a more generous allow-list. This isn't a technical restriction; it's a choice by Mozilla.

It's a valid choice — if they're aiming to curate a set of high-quality extensions, and prevent the use of lower-quality extensions — but it's a choice nonetheless.

> It's a valid choice — if they're aiming to curate a set of high-quality extensions, and prevent the use of lower-quality extensions — but it's a choice nonetheless.

Mozilla is also looking at monetizing their extension ecosystem by allowing the top makers of extensions to pay for placement. Perhaps, Mozilla could start letting only the highest paid extensions on Android.

Would this be "valid"? Uh . . . sure. It is also blatantly user hostile. I would rather Mozilla allow me to choose what I run, but Mozilla definitely isn't going to give the users that sort of freedom on release builds.

It seems that they've also talked themselves into believing that running extensions in the main process has all of a sudden become totally unsafe and absolutely irresponsible, while at the same time the solution employed on desktop (run extensions in a separate process) unfortunately isn't possible because on Android secondary processes might randomly be targeted by the low-memory killer at any time, which would break a lot of add-ons.

So a few extensions have been grudgingly permitted with extra scrutiny given during review, but they don't want to extend that effort to all add-ons, they don't want to back down to accepting the previous level of security, either, Android won't change its handling of child processes (and even if – any change there would take years to percolate throughout the phone ecosystem, plus a number of OEMs somewhat infamously are even more aggressive about killing seemingly unused processes), and re-architecting add-ons to cope with randomly being killed isn't an easy and immediate solution either.

This extensions list can be changed by user via developer settings.

This is only possible on Firefox Nightly, and you have to install them by making a Mozilla account and creating extension collections[0].

This is frustrating to do, when the desktop site didn't allow me to add a mobile-only extension[1] and I had to figure out how to do so by modifying HTTP requests. This is a reversion from older Firefox versions, where you could install any extension via the web store as you would on desktop.

[0] https://blog.mozilla.org/addons/2020/09/29/expanded-extensio...

[1] https://addons.mozilla.org/en-US/firefox/addon/google-search...

> at the end of the day, I think Mozilla and Firefox are still the lesser evil in the borwser war

And that is exactly the problem. I don't want to accept any "evil". "The other guy is worse" has never been a good excuse for bad behavior.

> they have aggressively worked to end tracking

They still use google analytics on their own websites. Firefox by default still allows ads, which are the main driver of user tracking.

> a mobile browser that actually supports extensions where possible

Extensions, or only extensions allowed by Mozilla aka browser features with extra steps.

Reply on news.ycombinator.com