Showing posts with label Firefox. Show all posts
Showing posts with label Firefox. Show all posts

Saturday, November 24, 2018

Current Browser Extensions: Vivaldi, Firefox, and Chromium

Wow.

As best I can tell it was over three years ago that I last posted a roundup of the Add-On extensions I was using.

Firefox as at version 40.0.3 (x32 bits).

Vivaldi was still a “technical preview” release at version 1.0.258.3 and totally amazed me with “tab tiling.”  I cannot image going through a natural disaster or other scale event without using tab-tiling in Vivaldi.

Here I am during the January 2018 Great-Houston-Ice-Crisis monitoring multiple weather and traffic events in Vivaldi using the split-screen tab-tiling feature.

_2018-01-16_08-14-36

Yes Virginia, that’s five open browser windows on a single page. Four blocked with a fifth on the far right side fully extended top-to-bottom.

And no, I’m not counting my SwiftOnSecurity Twitter-feed window on the far-left because that is not a “browser window” but actually running in a Vivaldi “web-panel” from the side-bar. I can collapse and extend it as needed to check that particular media feed.

If you look closely, this tab (with five web-pages) is just one of four “stacked” tab sets each with their own multiple sets of related browser pages.

Vivaldi lets you do some crazy stuff – all built in without the need for more extensions – to maximize your browsing efficiency.

That’s why the only “product” link badge I run on my Grand Stream Dreams blog is Vivaldi’s; and I do so proudly.

So here is my current web-browser line-up:

Vivaldi - If there is a crisis or massive multi-stream op-center monitoring work to do I go Vivaldi without question. Current (snapshots line) version 2.2.1373.4 (Official Build) (32-bit)

Firefox - If there is blogging or RSS-feed wrangling – I still go to Firefox (due to my custom system integrations with the Omea RSS Reader.  Current version 63.0.3 (64-bit)

Chromium - If there is deep-web exploration work needed – I use a stripped down version of Chromium. Current version 72.0.3620.0 (Developer Build) (64-bit)

And here are my Extensions/Add-ons for each of them:

Vivaldi Extensions

Yep. That’s correct. Just three extensions. Vivaldi (by default) provides all the other heavy-lifting that I need – natively!

Firefox Extensions

Quite a lot more, but mostly because of the needs to support my RSS/blogging process flow (stop laughing! I know there hasn’t been much GSD blogging of late, but, “Reasons!”.

Chrome/Chromium Extensions

More extension use here than with Vivaldi even though Vivaldi is built on Chromium.

Cheers!

--Claus V.

Saturday, April 30, 2016

Quickpost: Import Firefox bookmarks into Vivaldi

I’ve been regularly using the Vivaldi web-browser (portable version) for some time and am really loving it.

I still run the snapshot builds to stay on the bleeding edge, but have found them very stable.

That said, I still use Mozilla Firefox, Portable Edition as my daily web browser.

One challenge I ran into was trying to bring the bookmarks in the Vivaldi browser current (manually synced) with my Firefox bookmarks.

The “best” way should be to simply open Firefox’s Bookmarks Manager (Ctrl+Shift+B), then export your bookmarks as a HTML type file.

Then open Vivialdi’s Bookmarks Manager (Ctrl+B) and import the HTML file.

Only that just doesn’t really work correctly.  I’ve got a ton of bookmarks and all this accomplished was to copy a handful of bookmarks folders from Firefox and not the full set.

I checked the Vivaldi forums and found others who had issues like my experience when they attempted to export their Firefox bookmarks as an HTML file and then import it into Vivialdi; lots of missing bookmarks after the import completed.

I can’t directly use the Vivialdi “Import Firefox” bookmarks option as I use a portable profile location and the current Vivialdi builds dosn’t (yet) allow for browsing to a custom profile path.

So here are two methods I found success with in case you also have this problem.

Method 1

I thought I could be clever and try to use the free version of Transmute to convert the JSON or HTML file I exported from Firefox to another Vivaldi supported import format that would let me pick the file & location to be imported.

  1. Use Firefox’s Bookmarks Manager to “backup” your bookmarks as a JSON file to your desktop.
  2. Run Transmute and
    1. For the Source select the Firefox JSON type from the drop-down list and then select the JSON file you just exported.
    2. For the Target select “Opera” type from the drop-down list and then select your desktop as a file location. Name the file something you can remember like “my_exported_bookmarks” it should show an “adr” filetype extension.
    3. I unchcked the “Backup collection” option.
    4. Hit the Start button and if/when the preview window opens, go ahead and close it.
    5. Once export is done close Transmute.
  3. Run Vivaldi and
    1. To to Tools –> Bookmarks
    2. In the Bookmarks tab select “Import”
    3. Select From “Opera Bookmarks File”
    4. Click the “Choose a FIle” button and browse to your converted file from step 2.2 above.
    5. All your bookmarks & any folders should import into a new bookmarks folder in Vivaldi called “Imported”
  4. From there just move them out into your main Vivaldi bookmarks folder structure as needed.
  5. Success!

Method 2

  1. Use Firefox’s Bookmarks Manager to “backup” your bookmarks as a JSON file to your desktop.
  2. Download and run Pale Moon - portable! to a location of your choosing.
  3. Run Pale Moon.
  4. Open up the Pale Moon Bookmarks Manager and select the options to “Restore” your bookmarks.
  5. Browse to the location you saved your exported JSON file from step 1.
  6. Import the file. When done all your Firefox Bookmarks should appear in Pale Moon.
  7. Now (still in Pale Moon Bookmarks “Library” manager window) export your bookmarks from within PaleMoon Portable as an HTML file. I exported mine to my desktop as “bookmarksPM.html”
  8. Once done close Pale Moon.
  9. Run Vivaldi and
    1. To to Tools –> Bookmarks
    2. In the Bookmarks tab select “Import”
    3. Select From “Bookmarks HTML File”
    4. Click the “Choose a FIle” button and browse to your converted file from step 7 above.
    5. All your bookmarks & any folders should import into a new bookmarks folder in Vivaldi called “Imported”
  10. From there just move them out into your main Vivaldi bookmarks folder structure as needed.
  11. Success!

Apparently there is something about the HTML structure created by the newest versions of Firefox that Vivaldi can’t handle. Pale Moon seems to like the JSON structure of Firefox, and seems to use a different HTML format when exporting that Vivaldi does accept.

Be aware that Vivaldi doesn’t seem to support bookmark “separators” in its bookmark structure so if you have those in Firefox they will be lost in Vivaldi.

Cheers!

--Claus Valca

Monday, February 15, 2016

Opening more than one Firefox bookmarks “Library”

In trying to get a handle and organize my terribly large collection of “to be blogged” bookmarks of late, I found the desire to open more than one window of the Firefox bookmarks “Library” window.

I thought this would let me spread-out a bit and drag/drop them between – and within – different sub-folders much more efficiently.

Only I couldn’t quite make it happen.

Then I found this tip from “Gingerbread Man” on how to create an action bookmark to do just that.

1. Bookmark the following URL.

chrome://browser/content/places/places.xul

2. Middle-click the bookmark, or Shift+Click it, or right-click it and choose Open in New Window.

While not exactly two replicated “Library” window sessions, it is close enough. Yep. I can work with that!

The bad news (for me) is that I found some of my “to-blog” content over a year old and now I really have to winnow it down to remain relevant.

The good news (for you) is that I made a lot of headway in that area and coupled with some of the improvements in Open Live Writer, I might pick up the pace again.

Cheers,

--Claus Valca

Saturday, November 28, 2015

Web Browser Linkpost: Turkey Day Edition

Clearly I’m finding a little bit of time in the post Thanksgiving Day period to catch up on some blogging.

Here are some new browser bits I’ve tucked away over the past several weeks.

Tracking & Security

Vivaldi

Firefox and Mozilla Developments

FavIcon Reloader - Add-ons for Firefox - having two primary systems, and two Mozilla based browsers (Firefox and Pale Moon) means that my considerable bookmark library often gets out of sync. I don’t use an on-line sync solution but rather back-up/restore the file between apps/systems. That’s great but I loos my favicons if the difference. FavIcon Reloader works great to get the icons back. I tend to use them as visual clues a lot more than I realized.

ConfigFox - utility update to version 1.4.3

More…

Firefox finally comes to iOS - Ars Technica - meh..

Pale Moon

List of Pale Moon specific about:config preferences - gHacks Tech News

Cheers,

Claus Valca

Saturday, October 31, 2015

Web Browser Linkpost; Mostly Vivaldi and Firefox

Tracking

Vivaldi updates march on

Still loving Vivaldi and the feature set they are bringing to the table.

Still not a “daily driver” for web browsing but getting closer and closer. I’ve not listed all the snapshot posts but here are some highlights that might be interesting.

Considering the large volume of bookmarks I deal with, the bookmark bug-fix improvements have been very well received in particular; sorting, ordering, editing.

Firefox and Mozilla Developments

Google Chrome/Chromium

Pale Moon Rising

Pale Moon - Release Notes

25.7.3 (2015-10-14)
This is a usability update needed due to the fact that Mozilla has shut down their key exchange (J-PAKE) server along with the old Sync servers. This was unexpected and required us to set up our own key server (testing indicates this works as-expected, but please do report any issues on the forum) - which also required reconfiguration of the browser.
Please note that older versions of the browser will no longer be able to link devices to a sync account using the 12-character code since it requires a Mozilla server no longer present. If you need this functionality, you must update to this version or later.

Edge(ed) Out

Browse on, my friends.

--Claus Valca

Tuesday, September 01, 2015

This week in browser bits: roll-backs, upgrades, and changes

Ever since Mozilla released an upgrade of Firefox to version 40.x I seem to been seeing frequent and persistent crashing of my Firefox browser.

As of the time of this post, I am running version 40.0.3.

The issue seems to occur most when I grab an open tab handle and drag/drop the tab into my bookmark side-bar to “save” a bookmark of that page.

It got so bad that I began to look at rolling back (downgrading) my Firefox version to an older version, say the last 39 release version, to see if that would help.

Making a bookmark the “long way” by clicking the “star” icon or using the Ctrl+D key-combo worked fine but was a lot of work due to my deep folder structure in the bookmarks.

Fortunately, I found that by grabbing the small icon on the far left of the address bar, I could drag and drop that to also create a bookmark at will without the crash I get from using the same technique but with the page-tab item.

I’ve not yet filed a bug report, but will shortly.

Firefox Version Roll-Back

The process to roll back to an older version of Firefox is fairly simple, as long as you know where to get the bits. In my case it is a touch more complicated as I use Mozilla Firefox, Portable Edition via Portable Apps. For installed versions of Firefox, head over to Index of /pub/mozilla.org/firefox/releases and download the version you want and reinstall. Sure, you should first back up your profile, etc. before doing it, just in case. For portable apps versions, head over to Mozilla Firefox, Portable Ed. at SourceForge.net project page, and find the earlier version, download, and over-install.

Here are some more guides on the process to roll-back Firefox:

My recent and growing frustrations with Mozilla/Firefox have led me to invest even more heavily that normal (and that’s saying something) in spending considerable more time using and testing alternative web-browsers; specifically Vivaldi (based on Chromium) and Pale Moon (based on Mozilla).

Add-On Support for Pale Moon and Firefox

Pale Moon (portable) has been very stable and runs very well on my systems in the testing work I’ve been doing more and more.

I don’t have a lot of Firefox Extensions/Add-ons and found that almost all of them were compatible in Pale Moon. Listed below are my current Firefox Add-ons and I’ve noted the ones that ARE NOT Pale Moon compatible -- at least directly installable via the Mozilla Add-ons store.

- about:addons-memory 10.1-signed  (not offered for Pale Moon / Firefox 24.9)
    https://github.com/nmaier/about-addons-memory
   
- Adblock Plus 2.6.10 (didn’t bother to try as I like/prefer uBlock Origin)
    http://adblockplus.org/en/
   
- CoLT 2.6.5
    http://www.borngeek.com/firefox/colt/
   
- Copy as HTML Link 3.2.1-signed
    http://justinsomnia.org/2006/05/copy-as-html-link-for-firefox/
   
- Download Status Bar 12.3.0.1-signed
    https://addons.mozilla.org/en-US/firefox/addon/download-status-bar/?src=api

- Extension List Dumper 2 1.0
    https://addons.mozilla.org/en-US/firefox/addon/extension-list-dumper-2/?src=api
   
- FiddlerHook 2.5.1.8 (installed on system by Fiddler, but doesn’t seem to pick up in Pale Moon / Firefox 24.9)
    https://fiddler2.com/r/?FIDDLERHOOKHELP
   
- Firebug 2.0.11 (not offered for Pale Moon / Firefox 24.9)
    http://www.getfirebug.com/
   
- Greasemonkey 3.3  (I didn’t bother to try to install yet in Pale Moon)
    http://www.greasespot.net/

- HttpFox 0.8.14.1-signed
    http://code.google.com/p/httpfox/

- Linky 3.0.0.1-signed
    http://gemal.dk/mozilla/linky.html

- NoScript 2.6.9.37rc1
    https://noscript.net

- Search By Image (by Google) 1.1.2.1-signed
    http://www.google.com

- Tab Memory Usage 0.1.8 (Disabled)
    http://mybrowseraddon.com/tab-memory.html

- TinEye Reverse Image Search 1.2.1
    https://tineye.com/

- uBlock Origin 1.1.0.0
    https://github.com/gorhill/uBlock

Pale Moon project provides a list of known incompatible Add-ons you may wish to consult.

The FiddlerHook item is not a real deal-breaker as I have lots of network sniffers/tracers to use, and isn’t “required” as you can just run Fiddler, then manually/temporarily set Pale Moon to use the system proxy.

Having said that, this extension isn't really needed in modern versions of Firefox. Instead, simply set Tools > Options > Advanced > Network > Proxy Connection to "Use System Proxy."

Likewise Firebug is a very powerful tool to inspect web page elements and code. However the “F12” web developer tools natively provided in Pale Moon are a sufficient alternative.

More Firefox Gripes News and the “Contextual Identity” Project

That last one really has me conflicted.

For full details see this Security/Contextual Identity Project/Containers - MozillaWiki feature draft page that Martin Brinkmann alluded to in his article.

Also, take a look at the Security/Contextual Identity Project mainpage for full context.

As a browser user, I can see the draw and benefit of having a feature allowing for concurrent “persona” sandboxing while browsing at work; that way I can browse all the cat sites I want at work under one “persona” while concurrently monitoring all my embedded network appliance and nodal dashboards in the same browser under my other “persona”, while doing all my personal secure on-line banking transactions in a third “persona”.  See how handy that will be? I can separate all those browsing activities while doing them at the same time in my browser -- at work -- and never will they need to inter-mingle.

Oh. Wait.  Why am I doing personal web-browsing at work on my work-provided systems?

Snap.

I guess it comes down to the workplace internet usage policy, but I just don’t see it a good idea to mix personal web browsing on work-provided equipment and networks; even if permissively allowed by the employer policy. That activity is fraught with security and privacy issues.

But then again, I’m an old security curmudgeon.

Like I say, read the feature draft page for full details. I’m confident many “modern” browser users will totes love this feature if it gets folded in. I get it and it does look like it will be slickly delivered. However as a sysadmin I think that while the feature looks good it may provide a false-sense of security and provides less benefit from a network administrator/security perspective for the organization’s benefit.

Oh well, I probably don’t have to worry because as we all know, only Internet Explorer is approved for use in the workplaces right?

Vivaldi Developments and Tab Tiling!

The Vivaldi team remains focused on regular snapshot updates to their project. It’s still at “technical preview” release level so not yet ready for prime-time use. But the fixes and features keep coming strong.

Snapshot 1.0.258.3 was pretty cool for me as it brought in tab-tiling.

Basically, you select more than one tab that is opened, hit a little tab-tiling option icon in the bottom right corner and select the layout, then the browser opens (tiles) them in a single window for concurrent viewing of all the tab pages side-by side!

In the example below, I’ve got the Phil Are Go!, Google Art Project. and Vivaldi Team Blog tabs all opened (tiled) in a single page window in Vivaldi. Cool!

_2015-09-01_10-15-03

For data-hungry sysadmins monitoring multiple web-pages on a super-screen sized monitor this could be handy.

And no, it’s not the same think as the “contextual identities” feature as Mozilla is discussing, thank you very much.

IE 11/ Edge browser

Just had to toss this one out there to make up for my cheeky comment about IE browser in the workplace.

--Cheers!

Claus Valca

Friday, August 14, 2015

This week in browser bits: the race to update

In case you didn’t notice this past week or two…

Firefox 38/39 got patched for a file-stealing bug

then Firefox 40 got released soon afters…

then Firefox 40.0.2 got released to fix some issues

Mozilla Malware Protection (enhancement) news…

In my older rant blog-post Firefox Malware Detection Download Monitoring: Thoughts I opined about the benefit but frustration of Mozilla’s safer browsing security features. Control over that feature fine-tuning began with fuller support in Firefox 39.

So with version 40 that support has been enhanced again.

Expanded Malware Protection in Firefox - Mozilla Security Blog

Fortunately, you do have a measure of control to disable (or dial back) this security feature if it blocks some legitimate sites or downloads.

In other (mostly Mozilla) news…

Browse on my friends.

Claus Valca

Friday, July 31, 2015

This week in browser bits; runway memory edition

Submitted for your review, Firefox news,  Mozilla whining, Chrome tab “discarding”, and Claus deals with a runaway freight train -- no, scratch that -- runaway memory usage in Firefox.

To the rails!

Firefox News

The Firefox Extension Guru's Blog has been hard at work parsing details and analysis of coming changes in the Mozilla browser.

  • Truthful, but not very PC… - Firefox Extension Guru's Blog - Silverlight will be banished, Flash retained, and the 64 bit mainstream version release of Firefox x64 is delayed, and questions persist.
  • Win64 Firefox NOT Coming with Firefox 40 - Firefox Extension Guru's Blog - Maybe with Firefox 41?
  • A Look at Extension Signing In Firefox 40 - Firefox Extension Guru's Blog - The Guru goes to the mats for  us and loads his profile into Nightly 42, Developer’s Ed. 41, and Beta 40 of Firefox to take a look at the impact to users (and their Add-ons) with Extension Signing coming soon to a Firefox 40 release on your system.  Read his post for the full comparison. Summary: FF40 = warnings, FF 41 = blocks (but action can be user disabled), FF 42 = blocks (no disablement).
  • Disabling Add-on Compatibility Check - Firefox Extension Guru's Blog - Guide update notice and point to Disable Add-on Compatibility Checks Add-on for extended feature support. Note this Add-on appears to be very popular with Pale Moon users.

What Does the Fox Say?

(with a nod to Ylvis)

It’s probably not that long ago in most people’s minds to recall the great browser wars of the 90’s and the anti-trust settlement and also how the EU forced Microsoft to provide a default web-browser “ballot” to guide users to an alternative browser than Internet Explorer as the default.

Today although many users still turn to use IE on their Windows systems without question, there is general familiarity with alternative browsers such as Mozilla Firefox, Google Chrome, Opera, Apple Safari, and upstarts Vivaldi and Pale Moon-- to name a few. Their presence in the formerly IE dominated world has been hard fought; both in coding/development, in the courtroom, and in the marketplace.

So it was probably a frustrating day in many a browser boardroom when it came out that the Microsoft Windows 10 upgrade will automatically reset the default Windows web-browser setting to Microsoft Edge and over-write the user’s current default browser choice if it isn’t already IE. It will do this unless you are a pre-informed geek/user and choose to ignore the “express settings” option during setup and choose the “customize settings” option, and then carefully locate another button to make the option change to keep your settings. It isn’t a stretch to anticipate that most consumers eligible to get this Windows 10 upgrade will be more than happy to select the “no-pain/no-fear” “Express Settings” upgrade and toddler on with the process unawares (and get a whole lot of other potential security and privacy setting headaches along the way by default). More on that in a follow up post.

Anyways…

Mozilla for one isn’t taking that roll-back to Microsoft Edge browser by hiding out quietly in a foxhole. No, in a shout to equal the noise of Ylvis’s video they howled/barked pretty loudly.

Ooops. Did you click the “Express Settings” option? Fear not, here are some steps to get Firefox (or Chrome) set back to being your default browser.

Chromium Tab “discarding”

Memory management can be a real challenge for a “modern” web-browser. With the media-rich webpage content, and multi-process hosting in these browsers, keeping system memory usage in check and browser performance up is a developer’s constant nightmare.

My own browsing habits are such that I usually have no more than three or four browser “tabs” open at any given time. I generally file away pages to my bookmark manager to be saved for later review. The only time I regularly have more than 25 tabs open is when I am going through my RSS feeds in Omea Reader and launching them to open in the background in Firefox. Once done with the RSS feed culling, I then go to Firefox and sort them into a specific folder for topical blogging, or future reference.

Lavie on the other hand leaves fifty+ tabs open in multiple web browsers concurrently. Drives me crazy! But that’s how she works.

A new feature “tab discarding” has surfaced in Chromium builds. For those who have a lot of tabs left open, it will use an algorithm to trigger “discarding” open tabs when physical system memory is running low. My understanding that “discard” means something more like “suspend” rather that shut it down and toss it in the bin. If enabled and triggered, the tab stills shows on the tab-bar, but nothing is happening until you select the tab, when it then “revives” again.

I’ve enabled it in my Chromium build though I don’t expect to see much difference with my minimal tab usage. If it rocks my world I’ll let you know. Martin Brinkmann of gHacks has the “how-to” for enablement of the feature in his post below.

Per Brinkmann’s article, the Firefox BarTab extension has offered a similar feature to Firefox users for some time. The original BarTab by philiKON is not supported on Firefox 39 or higher. However a newer “fork” of it -- BarTab Heavy -- seems to be fine. See also this other fork BarTab Plus.

Claus Deals with Runaway Memory in Firefox

So this morning I happened to have my own struggles with Firefox memory usage so here are my notes.

I was tearing through my RSS feeds and opening articles of interest in the background within Firefox.

My tab bar was filled and more tabs were spilling over “hidden” off the left.

I eventually noticed a number of things…memory usage on my system was almost maxed out, though I just had a handful of applications open, and the laptop cooling fan had kicked on full-tilt.

I checked Process Explorer and quickly found the culprit for my RAM usage; Firefox!

osuyqzsh.qfq

Normally my system runs about 3.5 GB of RAM usage unless I have a VM open and running.

In this case my 8 GB of system RAM was almost maxed out and a large portion was being consumed by Firefox.

The RAM counters showing were continuing to climb mercilessly.

I started to try to save my tabs to the bookmark folders so I could close them out but after just a few, Firefox became locked up.

I killed the process and restarted Firefox. Luckilly my tab sessions were restored so I didn’t loose any of the open ones…but almost immediately, the RAM counters went climbing sky-high again to the 3 GB mark!  Did I have a rouge Add-on? Was one of the tabs hosting bad page code? What was going on?  I felt blind and Process Explorer wasn’t helping.

Step one: Make sure “Prefetching” was turned off.

How to stop Firefox from making automatic connections - Firefox Help - Lots of good advice here but this was the one I was interested in checking.

  1. In the Location bar, type about:config and press Enter.

    • The about:config "This might void your warranty!" warning page may appear. Click I'll be careful, I promise! to continue to the about:config page.
  2. In the about:config page, search for the preference network.prefetch-next.
  3. Observe the Value column of the network.prefetch-next row.
    • If it is set to false then do nothing.
    • If it is set to true, double-click on it to set it to false.

In my case, I had previously set it to “false” so that wasn’t a help.

Step two: Figure out what is consuming all the RAM within Firefox in the first place.

Firefox uses too much memory (RAM) - How to fix - Firefox Help

This page has tons of useful tips and tricks to try out; most are common sense like updating Firefox, disabling themes and add-ons, disabling auto-run of media on pages, using fewer tabs or adding more system RAM (really?).

However it was this tip - Memory troubleshooting tools - that had a great new find for me:

The about:memory page allows you to troubleshoot finely specific issues about memory (for instance, caused by a website, an extension, a theme) and sometimes its Minimize memory usage button may help you instantly reduce memory usage. For guidance on use of about:memory visit https://developer.mozilla.org/docs/Mo.../about:memory

Typing that in I get a page with some options to load memory reports, save them for later/diff’ing, free up memory, or save some garbage collection or concise cycle logs.

For first level stuff, hit the “Measure” button under the “Show memory reports” section and let it rip.

Here you can review all the different elements and how much RAM they are using.

fsbif4yj.uiv

Pretty helpful stuff.

Step three: check and enable trimming

Fix for Firefox memory leak on Windows - How-To Geek

  1. Type about:config in the address bar.
  2. Right click in the whitespace and choose New --> Boolean and enter.
  3. For the name provide “config.trim_on_minimize”
  4. Set the value to “True”
  5. Shut down and restart Firefox.

Per MozillaZine Wiki this setting’s benefit is “dubious” but shouldn’t actually hurt anything if you are having issues.

Config.trim on minimize - MozillaZine Knowledge Base

Background

On Windows operating systems, when a program is minimized and left for a period of time, Windows will swap memory the program is using from RAM onto the hard disk in anticipation that other programs might need RAM. Because of the way Mozilla applications are stored in memory, Windows is much more aggressive in swapping out the memory they use, which can cause a delay when the program is restored. This preference determines whether to mark memory as preferably swappable, from a minimized Mozilla Windows application.

Recommended settings

Any positive effect of this setting is dubious, since any memory saving may be illusory.Bug 420267, comment 7

However, if you're experiencing problems with the application consuming too much RAM (Mem Usage in the Windows Task Manager), you can try setting this preference to true. If you're not experiencing any problems, it should be left at false to maintain application responsiveness.

Step four: Install an Add-on memory-monitoring tool

Knowing what in general is using RAM in Firefox (see step 2) is great, and disabling add-on one at at time to look for performance improvements is a great idea…though time-consuming if you have more than several. Luckilly, a solution was found in this gHacks post. Another Add-on!

Martin Brinkmann points out the Add-on about:addons-memory

It works great. Install the Add-on (no restart needed) and then type “about:addons-memory” in your address bar and it wills show you the memory usage of each add-on. How cool is that?  This can really speed up your troubleshooting.

Step five: Install a page-tab memory-monitor tool

Another add-on mentioned (that I haven’t tried yet) is Tab Data (+Memory usage) it offers to show memory use feedback on each open tab though reviews indicate some stability issues. See also Tab Memory Usage add-on.

Bonus Tip: About:About page

I’ve made a bookmark bar folder called [Abouts] that I then have placed various “about:” pages into it for faster access without having to type them. Go type about:about in the address bar to get the full listing but these are the ones I am interested in.

  • about:about
  • about:addons
  • about:addons-memory
  • about:cache
  • about:config
  • about:healthreport
  • about:memory
  • about:networking
  • about:permissions
  • about:plugins
  • about:preferences
  • about:support
  • about:telemetry

As of now, Firefox RAM usage hovers in the 500 MB - 1 GB range which seems pretty “normal” for me.

Hopefully one or more of these tips may help and if nothing else, give you some tools to better troubleshoot RAM issues in Firefox when you do encounter it.

Cheers,

Claus Valca

Tuesday, July 28, 2015

Browser Bits

Some quick news primarily regarding Vivaldi and Firefox web browsers.

Vivaldi

I’m still not anywhere near the point of using Vivaldi as a daily web-browser. But the development work on the snapshot and technical preview releases is coming on strong. There seems to be a new snapshot release once or twice a week.  It is fast and I’ve not encountered any fatal bugs yet. And that bookmark sidebar feature on a Chromium based browser can’t be beat by anyone except Mozilla’s Firefox. Release updates from the most current, downward.

Firefox

I gotta say. I follow more than a few of the Mozilla Developer blogs and channels. I like the technical discussions particularly those that relate to security. But special thanks and credit is due to the color-commentary and analysis provided by The Guru over at Firefox Extension Guru's Blog. The Guru never fails to deliver additional perspective and context of issues with Firefox build features and sea-changes by Mozilla. While I may read some Mozilla news with a “oh, that’s interesting” a follow up post by The Guru leaves me with a “totally missed that detail & impact!” experience.

Mozilla recently released background on an internal initiative “Great or Dead” where they seem to be showing a desire to listen to their user base and re-evaluate the features baked into Firefox. I am NOT a programmer so I can’t begin to fathom the challenges of coding a complex and secure web-browser that keeps pace with the web standards while stretching for backward compatibility. That said, I would really like to see Mozilla return back to its early “hot-rodding” vision of a stripped down core browser that can be customized by the user via add-ons. I’m totally cool with forced extension signing (though provision of a two-key missile silo “override” about:config option would be helpful). All these “extras” are cute but can be addressed via add-ons. Maybe what Mozilla needs to do is a campaign about their add-on “store” to introduce the concept and help general (non-technical) users find and customize the core framework to their own needs. Or perhaps put together and showcase add-on “starter packs”; social-media pack, cord-cutter pack, pen-tester pack, etc. Yes there are collections, featured, and most popular pages already. But for a Firefox noobie these may be overwhelming.  Just a thought.

Get ready for some potential UI changes in Firefox 40 when it runs on Windows 10.

And while Mozilla seems to make some progress with Flash-security, they also seem to take several steps back by (currently) (bug?) stopping Silverlight from loading on Win64 builds but still allowing Flash. See The Guru’s posts for more perspective.

Pale Moon

OK. While I’m not “heavily” monitoring the Pale Moon project, I continue to glance at the project so that if -- sometime in the future -- Mozilla totally jumps the shark with Firefox feature development, I will have another familiar platform to switch out with.

I have a portable version of Pale Moon that I keep around but haven’t done any tweaking or extension adding at this point. It feels familiar but different compared to Firefox. Kinda like when it dark in the morning and a grab a pair of jeans to pull on and find they are the odd Wranglers I own in the stack of Levi’s.

Cheers,

--Claus Valca

Sunday, July 12, 2015

Rapid Browser News Linkpost

Just some miscellaneous news and linkage on web-browsers.

Firefox/Mozilla

PaleMoon

So in the comments of a recent GSD browser news post, El Guru posted an observation that if Mozilla continues their feature bloat direction, it may drive many more Firefox users to the Pale Moon browser project.  I’m lightly familiar with Pale Moon but haven’t used it except for fiddling around. Firefox public\Developer, Vivaldi, and Chromium all take up most of my browser usage attention.

That said, I’m going to start paying much closer attention to the Pale Moon project, particularly if the “Three Pillars” philosophy/strategy doesn’t bear visible fruit.

Vivaldi

Chrome

Browser Security & Privacy Issues

Cheers!

--Claus Valca

Saturday, July 11, 2015

Taking Flash Player out to the Bins

image

“Trash cans” CC attribution: by andresmbernal on flickr.

Post updated 07/13/2015 to incorporate yet another Flash Player 0-day. That’s three now if you are keeping count.

So in light of recent events, I’ve decided I’m taking Adobe Flash Player to the trash-bin on my secondary system as part of an experiment.

In case you have been living under a rock, the recent hack of “Hacking Team” has led to the public release of not one, but two (for now) 0-day exploits for Flash. Although, there were bad-enough Flash 0-day exploits around just prior to the new mess left on our lawns.

And as soon as each 0-day exploit of Flash became known, it was a done-deal that the exploit would become fairly common-place in the malware attack landscape.

CVE-2015-3113 (pre-Hacking Team)

CVE-2015-5119 (Hacking Team 0-day)

CVE-2015-5122 (Hacking Team 0-day)

CVE-2015-5123 (Hacking Team 0-day)

(not related to Flash Player but since we are on a roll…

So what is one to do?

For most people/businesses/enterprises…probably many folks won’t do anything and will keep on web-surfing with exploitable Flash Player versions hanging over their head like a sword strung up by a thread. (I’m speaking you to Enterprise team that has us running a quite-outdated version of Flash Player as our standard as part of “application compatibility”.)

Everyone using Flash Player should hop immediately over to Adobe’s Adobe Flash Player Distros page and download/install the appropriate version. Not sure if you need it, then first stop by Qualys BrowserCheck in every one of your installed web-browsers. It will tell you if you have the latest version of Flash Player (and other critical browser plug-ins) installed. If not, it will help you get them updated.

However, as the 2nd Flash 0-day shows, having the latest Flash Player installed is no guarantee you won’t get hammered anyway.

To add deeper layers of protection consider installing Malwarebytes Anti-Exploit (free/$) or HitmanPro.Alert (trial/$) for Windows 0-day exploit protection. Couple that with Microsoft’s Enhanced Mitigation Experience Toolkit (EMET) for good measure. Please.

But to get even more hardened on your security, seriously consider dumping Flash Player from your system entirely.  Yes that is a “extreme” position, but considering the threat landscape, if you don’t need it for a business critical reason then it’s time to shed it.

I’ve pulled that trigger on my secondary system. After about a week of trialing, I’m likely to do the same on my primary system and Lavie’s system as well.

Wonder what life may be like without Flash Player? Brian Krebs has already gone down that patch and can tell you all about it.

As a Windows user I used the “Programs and Features” area to manually uninstall both the Active-X (IE) and Plugin-based browser installations of Flash Player. For good measure I then downloaded and ran the official Adobe Flash Uninstaller to make sure no bits were left behind.

I also manually checked for the presence of Flash Player embedded in Chrome/Chromium and was prepared to disable/remove it manually if needed. In my case it wasn’t.

Yes there are additional guides on how to simply disable Adobe Flash (or set Flash media to “click-to-run”) in your browser and/or control Flash activity via add-ons.

However the risk seems too great so for me the answer is to just strip it out entirely.

Next step; to see if I need to remove any remaining Flash elements that are embedded in other Adobe products on my system in case they could be used to pivot as part of an exploit chain.

Seriously…if you don’t critically need Flash Player…remove it.

Constant Vigilance!

--Claus Valca

PS: I didn’t discuss it, but I have already removed Adobe Shockwave & Adobe AIR as well from all our systems. Don’t need them. Don’t use them. Do have the latest Java JRE still installed as I do need that for some JAVA apps but I keep it fully patched. Same with Silverlight. Just saying…

Saturday, June 20, 2015

FireCAT 2.0: What’s that hot kitty been up to?

I was reading with interest a recent post Turn Firefox into a Security Information Powerhouse at gHacks Tech News.

Martin Brinkmann did a very good job lining up a collection of Firefox extension that most regular users might indeed find helpful expanding user-security while browsing.

Please read Brinkmann’s full post for his take on the value of each extension and the feature set.

It’s a pretty good roundup and while I might not be too keen to load them all up in a web-browser, more than a few could be useful.

However, it seemed a bit thin to be used with the description “powerhouse” when it comes to security-related Add-on integration with Firefox.

See, this post jogged my memory cells and called me back to a GSD post from 2009 that introduced FireCAT to Mozilla’s browser.

Both of these tools brought be back to the excellent FireCAT 1.5 collection of Firefox add-ons used for security/network/pen-testing and other high-value activity in Firefox. FireCAT is maintained by Security Database Tools Watch.  Check out this FireCAT 1.5 PDF for the full list and if you don’t want to pick-n-choose hop over to the lover-ly Firecat package for Firefox Files on SourceForge.net to get the whole collection at once.  What surprises me is that no-one has yet submitted it as Firefox Add-ons Collection.  Looks like I may need to crank up a “standalone” profile of Firefox called FireCAT, install them all, then upload the collection like I did for my Claus Valca’s Extension List (Home)   What think thee? Useful perhaps?

I did follow that post up with actually building a FireCAT 1.5 "Plus" Edition collection.

So after reading the gHacks post I got digging to see if FireCAT was still around and worthy of delivering a true security “powerhouse” for Firefox.

Turns out it was updated back in 2013.

FireCAT: Firefox Catalog of Auditing exTensions – version 2.0

There are now over 90 different security focused extensions in the list covering areas such as information gathering, proxies, web page/code editors, network utilities, IT-security, and application auditing, Check out the catalog page for the list.

Besides the newer extensions since the previous version, the developers also worked towards melding FireCAT with OWASP Mantra.

Granted, this is a few years old, but could still form a good framework to bring forward for your own personal needs. I don’t (yet) know how many of the extensions are compatible with the newest Firefox build versions.

More:

Given that it’s been another two years since that publishing, I’m betting that FireCAT 2.0 could probably be updated to version 2.5 with even more extensions that have come out since.

BTW…would a Chrome/Chromium based version be called ChromeCAT or Cr(24)CAT? 

A customized portable version of Firefox (or Chrome) coupled with a bevy of FireCAT /CR(24)CAT extensions sounds like an incredible portable network toolkit. Now that is what I could call a browser-based security powerhouse.

I feel a new challenge coming on!

(This is why I struggle to get things done on the weekends around the house…)

Cheers!

--Claus Valca

Browsers, Browsers, Browsers!

I’ve been all over the place with web browsers lately.

Fussing at (and tweaking) Mozilla/Firefox

Base Jumping with Vivaldi snapshots

I continue to be impressed with where Vivaldi is going on their project.

And Polishing up the Chrome

Discovery of uBlock Origin was a super-duper find for me a few weeks ago.

I have always used Adblock Plus in my “public release” Firefox and Chromium browsers, though I did not in the Developer Mozilla build. I also layered in Ad Muncher at the system level.

So when I learned about uBlock I thought I would give it a try. I liked it so much that I’ve installed it in all my Mozilla browser builds and in my Chromium browser as well. Top shelf.

I also run NoScript in my Mozilla browsers, but didn’t in Chromium. Never thought I could find a product that could be its equal.

I’m a stanch defender of the use of ad/script-blocking tools in my web-browsers. Not so much against the ads (annoying as they can be) but rather as a perimeter defense against malvertizing and zero-day attack campaigns. I follow these attacks time after time in the security blogs where trusted domain sites get nailed with malicious ad injections. Kind of like wearing your seatbelt while driving. It’s not that I myself am planning on being in an accident each time I get into the car to drive, but it comes from having a keen awareness that accidents occur when you least expect them and the seatbelt will provide a level of safety when it happens. (Well, and Texas law requires us to wear them too.) Anyway, hopefully the analogy stands.

Other security experts agree.

It was reading the comments in that SANS post that I then found the NoScript counterpart for Chrome/Chromium browsers:

Using ScriptSafe has been a bit of a learning curve adventure for me. Use of NoScript and fine-tuning the settings is second-nature now to me. However since I never used one in my Chromium browser, I am still scratching my head when pages don’t load as expected until I remember (again) that I have ScriptSafe now installed and have to tweak the domain/page rules to allow it to load properly but strip out the “unwanted” stuff.

The interfaces for making those choices (allow/block/etc.) are very different but as easy as they both are to use, I’m gradually liking the interface for ScriptSafe just a touch more. It is more user-friendly.

Regardless, I’m thrilled to now have two more tools to lock down the gates of my web-browsers with; uBlock and ScriptSafe.

Meanwhile the battle rages on for new ways to get ads past the blockers and deliver (in some malicious cases) their 3vil payloads.

Cheers,

--Claus Valca