Hacker News Reader

Comment by rasengan | Hacker News Reader

This is very cool. You can now set a different proxy for every container!

Now if it could just wait to ask for the permission until it needs it...

The extension is direct from Mozilla. If I didn’t trust it to request literally any permission, I should just delete Firefox entirely because it could do just about anything without having to ask me.

I even distrust myself. I don't run everything as superuser / with admin rights whole day long just because it's me.

The point is you should use elevated privileges when you need them. Not because some use case which is currently irrelevant for you might need them.

You do know the reasoning behind the Least Privilege Principle, don't you?

It's not that developers are untrustworthy, it's that software have vulnerabilities, and they get exploited.

The permissions being requested are things that all native apps get by default. I’m not worried about trusted code getting permission to something I trusted a hundred other apps with previously.

Those other apps don't regularly download and execute arbitrary third-party code, though.

Note that this still leaks DNS lookups. You can use https://github.com/bekh6ex/firefox-container-proxy instead until they fix that.

That part I like, it means I no longer need a separate extension for that purpose. I could have done without the Mozilla VPN spam though.

This actually solves a problem for me that I previously solved by using completely separate Firefox processes. That's awesome!

Reply on news.ycombinator.com