Firefox 31 Released

An anonymous reader writes Mozilla has released version 31 of its Firefox web browser for desktops and Android devices. According to the release notes, major new features include malware blocking for file downloads, automatic handling of PDF and OGG files if no other software is available to do so, and a new certificate verification library. Smaller features include a search field on the new tab page, better support for parental controls, and partial implementation of the OpenType MATH table. Firefox 31 is also loaded with new features for developers. Mozilla also took the opportunity to note the launch of a new game, Dungeon Defenders Eternity, which will run at near-native speeds on the web using asm.js, WebGL, and Web Audio. "We're pleased to see more developers using asm.js to distribute and now monetize their plug-in free games on the Web as it strengthens support for Mozilla's vision of a high performance, plugin-free Web."

Re:Spyware companies will love it

[mythosaz]

Some background - since I was unaware:
http://www.ghacks.net/2014/07/... [ghacks.net]

Malware blocking for file downloads

[Anonymous Coward]

The "malware blocking for file downloads" is a severe invasion of privacy. It works by sending the URL of nearly every downloaded file to Google.

When a binary file is downloaded, the user-agent extracts several pieces of metadata about the file, including:

        The target URL from which the file was downloaded, its referrer URL and any URLs in the redirect chain.
        The SHA-256 hash of the contents of the file.
        Any certificate verification information obtained through the Windows Authenticode APIs.
        The length of the file in bytes.
        The suggested filename for the download.

...

  Remote lookup (present in FF 32)

The user-agent stuffs all file metadata into a ClientDownloadRequest protocol buffer and sends it to the remote service.

This remote service is https://sb-ssl.google.com/safe... [google.com]

Misfeatures

[Arker]

"Malware blocking" = yet another bad signature/reputation based scanner. If I wanted one, I would have one installed - and Firefox versions without this misfeature would still use it to scan, so in what universe was this worth doing?

If you really want to do something about malware, disable javascript by default.

"Automatic handling of pdf and ogg files" - I have a pdf reader already. I dont need another one, and I dont need one 'integrated' in my browser, period.

"loaded with new features for developers." Pretty sure that means for advertisers.

Re:Spyware companies will love it

[roca]

sendBeacon was already possible with JS using XHR, just in a slower and more user-unfriendly manner. And unlike XHR, you can disable sendBeacon without breaking the Web, so it's actually better for privacy.

However, if you want to completely prevent any sendBeacon-like activity, you need to just disable JS on that page.

Re:no thanks

[Anonymous Coward]

I switched to Pale Moon [palemoon.org], and I am very pleased. I used Firefox and its Mozilla predecessors since about v. 0.92, and I was horrified and traumatized by FF v. 29. PM is the browser Firefox should have been. The following is taken from the Pale Moon home page.

Pale Moon is an Open Source, Firefox-based web browser available for Microsoft Windows and Linux, focusing on efficiency and ease of use. ...
Pale Moon offers you a browsing experience in a browser completely built from its own source with carefully selected features and optimizations to maximize the browser's speed, stability and user experience, while maintaining compatibility with thousands of Firefox extensions many have come to love and rely on. ... ... contrary to what Mozilla has done with their redesign of the user interface, Pale Moon will continue to provide a familiar set of controls and visual feedback similar to previous versions, including grouped navigation buttons of a decent size, a bookmarks toolbar that is enabled by default, tabs next to page content by default (easily switchable) and not in the least a functional status bar and more freedom in customization, to name a few things.

I switched to Pale Moon right after FF v. 29 came out. I was able to copy my FF user profile into the Pale Moon user profile directory and it ran without any particular problems. I have not used FF since then.

Four Stars and two thumbs up for Pale Moon.

Re:Malware blocking for file downloads

[Lennie]

How to turn off this feature

Do any one of the following:

        Turn off browser.safebrowsing.malware.enabled in about:config or in the Preferences > Security > "Block reported attack sites." This disables all Safebrowsing malware protection, including the warning interstitial that appears when the user navigates to a malware site.
        Replace browser.safebrowsing.appRepURL in about:config with an empty string. This disables application reputation checks but leaves other Safebrowsing malware protection intact.

https://wiki.mozilla.org/Secur... [mozilla.org]

Re:Misfeatures

[Anonymous Coward]

Speaking of misfeatures, your entire post is in tt.

Re:no thanks

[jenningsthecat]

I'll install it when that godawful Australis interface is rolled back or replaced with something less eye-bleedingly bad

If enough of us move to Pale Moon, (it's all I've used since shortly after Australis first shat all over my computer screen), then perhaps Mozilla will get the hint that we love Firefox, but hate what it's become. And if they don't get the hint, well, then we're supporting a viable alternative for the time when Mozilla gets eaten by the shark it just jumped.

BTW, although the Linux version of Pale Moon is 'unofficial' and maintained by somebody outside the organization, I've had no trouble running it under Debian Jessie with all of my usual addons.