222
"We found a vulnerability..."
(lemmy.sdf.org)
Can I get more info on why these are showing up? I've never seen such a thing on F-Droid before.
Uninstalling my primary browser isn't really a practical solution, what am I supposed to use, Chrome? How about fixing the version they're shipping? Or should I be looking somewhere other than F-Droid for Android Firefox?
I changed to the Divest-repo for Mull, and they have an updated version that has fixed these security issues.
ETA: Different signing keys though, so you can't just update it, but have to reinstall.
How do you do that?
You add https://divestos.org/apks/official/fdroid/repo/ as a repo in F-Droid settings. After that you can choose which repo to prefer for Mull.
Thank you
Theyre the distributor, the dont fix apps and its not their job to do so. Getting the same app from a different source wont change anything
huh? no one's asking them to fix firefox, we're asking that they just ship the latest version.
the warning states that several vulnerabilities have been fixed since firefox version 130, f-droid's latest version of the package is 129: that very much makes it sound like the problem is wholly caused by f-droid not making version 130 available.
To ship it they have to work out how to build that version themselves from source though - that's their whole thing. It's not like a normal app store where they take pre-built binaries from the developer.
Well ok if thats the case you are completely right, as long as there isnt some kind of issue and others have already updated the package pushing security fixes asap is indeod important
Huh to your huh? What's significant about the latest version, other than that it includes requested fixes? This is 12 of one, a dozen of the other.
Iceraven is a Mozilla based standin.
Can install FFUpdater here:
https://f-droid.org/packages/de.marmaro.krt.ffupdater/
and then select it from there.
I just install Firefox from the Play Store. 🤷♂️ Is that bad?
Yes
Why?
Goggle bad :^)
But Firefox good..? Serious replies only please, I really am curious.
Yes! They are the most important alternative to major corporate backed browsers, helping sustain a diversified browser ecosystem so that no one company can monopolize the web, and push it toward standards that reinforce their monopoly. Google has tried to lock down the phone, app market, browsing experience that sustains their ad networks, and regularly pushes new standards that de-emphasize things like RSS, and that break ad blocking functionality to sustain their monopoly and invade privacy.
Firefox reverses or mitigates most of those and are explicitly driven by a mission of sustaining an open web with standards that don't bend the web to corporate dominance. Google's cheeky dont be evil mantra was in reference to exactly the things they are doing now, and it's a little too on the nose to their actual behavior so it's no longer a slogan of theirs, cheeky or otherwise.
Exactly my point. I don't get why there's a fuss about installing it from the Play Store. Like, why is the Play Store bad, inherently. I'm not saying it isn't, I'm curious as to why it would be.
I think it's just that normal Firefox has more propietary stuff and more tracking by default
Ah okay, so in a way it's more about Firefox than about Google. 👍
FFUpdater, on F-Droid, manages updates for Firefox and other browsers. I counted nine variations of Firefox or forks of Firefox. As well as eight variations of Chromium based browsers that aren't Chrome. So that's 17 options.