Bonum Certa Men Certa

Windows Ruining Firefox for GNU/Linux Users



Reprinted with permission from Ryan

One of the top crashers on Firefox 115 is Windows malware interfering with Firefox in a particular way.



On TechRights IRC, Roy Schestowitz sums it up.



“Many firefox bug fixes are like that. They release security patches (and new blobs) but they address windows problems.”



I interjected, “Sticking your finger in the holes in the dam.”



Roy continues, “So a gnu/linux user needs to get another 200MB of junk.”



What makes it worse is that Fedora not only has this colossal piece of shit called GNOME Software that demands a restart, of the entire computer, even over a Firefox update, but that they stopped producing Delta RPMs so you have to download the full 200 MB of shit that hasn’t changed, to keep their version number in sync with Windows.



Roy notes that some of these crap patches for Windows bugs (bugs IN WINDOWS) cause Firefox to malfunction on Linux and jam up.



Also notes that Mozilla hires “Mac heads instead of software developers.”.



But it’s so much worse than that. They fired 250 people who were working on Gecko and redirected others to develop adware and spyware and nag screens under a Diversity, Equity, and Inclusion Supervisor.



One of my top complaints about the gnome-desktop metapackage (Fedora doesn’t have meta-packages as such, thank god) in Debian, was I couldn’t apt remove firefox without it wanting to take out a bunch of other stuff….or install another shitty browser I didn’t want. Chromium.



Stopping to deal with several hundred MB of RPMs and a third of it is Firefox playing bullshit version bump because Windows malware makes it crash, is very very frustrating.



However, in Fedora you _can_ dnf remove firefox. They haven’t managed to bungle this, although I suppose I should not give them ideas.



Most of the time I’m not on the fastest possible VPN server because I usually route my Internet connection through European countries where they treat people fairly well instead of the United States.



They run a lot of ads to try to convince Americans we don’t need VPNs or private browsing modes, and only a crank doesn’t like Windows (which is failing), but we know where this advice comes from.



I love operating systems (like Windows and Mac) that get in my way with “code signing” and then you find out that there’s this Chinese thing that signs whatever using an expired certificate, fakes the signature timestamp, and then runs the code.



Then you look at the Time Stamp Authority using Windows Explorer and the fucker says “Fake Time Stamp”.



It’s barely worth trying to secure your computing practices and then leave a mess like this as your operating system.



Primo forged

“Despite the warning displayed in the digital signature details above, the cracked driver for PrimoCache still functions properly when installed on Windows 10. […]



Microsoft, in response to our notification, has blocked all certificates discussed in this blog post. […]



Microsoft implements and maintains a driver block list within Windows, although it is focused on vulnerable drivers rather than malicious ones. As such, this block list should not be solely relied upon for blocking rootkits or malicious drivers.”

-Talos Intelligence


Since the operating system warns about the tampering and runs it anyway (allowing it to patch the kernel and become a rootkit), the only way to view this is “Microsoft wanted to promote ‘security’ and leave a huge gaping backdoor in for three letter agencies.”



And you notice that nowhere did Microsoft change the policy or actually fix the issue, they only made it so you can’t use the example certificates that Talos Intelligence cited.



Windows is a giant festering mess and since Mozilla kowtows and sucks up to them and spends almost all of their remaining development effort working around its many glaring design flaws, I don’t want this particular Windows chocolate in my Linux peanut butter.



Firefox is pretty garbage anyway as a “cross platform” program that’s mainly focused on Windows.



I strongly prefer to leave GNOME Web in the background while I mainly use SeaMonkey with sanity-preserving add-ons.



At least the people who work on these projects actually use them and mostly focus on Linux.



Lately when I open a Mozilla-ish browser it tends to be LibreWolf, from Flatpak (which has a Delta RPM-like update anyway) and then I grab some videos or something using video download helper and close it again.



A while back, (I read in the release notes) Mac OS broke SeaMonkey due to yet another bug in Apple’s kernel, but the problem was confined to….well….whatever special kind of nutbag uses a Mac and appreciates some of SeaMonkey’s unique functionality.



Using SeaMonkey productively is starting to require a lot of special knowledge.



One of the reasons I still use Fedora is they start out with a ton of patches that are out-of-tree and fix some of the roughness.



Ironically, I have to revert back to using GNOME Web or LibreWolf just to edit my blog since WordPress put some more Googleshit in their editor, which used to work fine with Web standards.



I also recently went back to paper statements with the electric company (no fee for that) and told the lady it was because ComEd switched to Microsoft Azure (corruption, bribery) and now it was putting Google Chrome nonsense and bastard JavaScript in their site that SeaMonkey simply does not understand.



Things are getting worse, not better. But for email, IRC, and most of my browsing it works fine.



The tab management code is largely so old it dates back to Firefox 1.5 and 2, and amusingly it can open and close tabs faster and much more responsively (I have an eleventh generation Core i7) than Firefox!



There should not be jank in a browser on a system as new as mine, and yet there is.



The mentality of Google and Mozilla is to just throw more shit in there and make the pile higher. The more the better.



Then nobody but a “trillion dollar tech company” subsidized by the US spy agencies can build a browser.



I recently reported the security vulnerability I found on Discover Bank’s Web site to Mozilla since it seems to be an issue in Gecko that sloppy Javascript programmers at the bank stumbled into.



I didn’t bother hiding the bug because I believe people should know about these things.



Here’s the bug. Here’s an archived version in case Mozilla tries to hide it later.



While they’re off worried about the millions of Windows malwares crashing their shit, they can’t bother to fix real issues, so we’ll see if this report turns into ANOTHER Bugzilla ghost town or what.



Recent Techrights' Posts

Politicians Ought to Invite Dr. Richard Stallman and Prof. Eben Moglen to Speak About Policies, Licensing, Digital Sovereignty
Is there something in Europe other than RMS' talk this coming Monday (that we're not yet aware of)?
Good Explanation of Why IBM Has Chosen to Conceal Mass Layoffs (of 'Expensive' Staff) as "R.T.O." (Even For People Who Never Worked at the Office to Which They're Ordered to "Return")
Many remaining IBM (or Red Hat) workers in Europe are in "cheaper" places such as Brno
Microsoft's Serial Strangler and Matthew J. Garrett Join Forces in Trying to Gag Techrights (for Exposing Microsoft Corruption and Crimes Against Women)
Whose terrible idea was it?
Free University of Bozen-Bolzano Proud to Host Free Software Talk by Richard Stallman
ahead of Monday's talk
Slopwatch: Anti-Linux Machine-Generated FUD (LLM Slop) From GBHackers, CybersecurityNews, and Guardian Digital, Inc (Google News Promotes Slop Plagiarism, Misinformation)
Companies that lie try to drown out the signal with falsehoods
 
Links 22/02/2025: OpenAI Plans to Possibly Abandon Microsoft, Facebook Doubles Execs' Bonuses While Sacking Thousands
Links for the day
Gemini Links 22/02/2025: Weekend Chill and Programming Thoughts
Links for the day
Links 22/02/2025: Labour Department Investigates Microsoft Infosys Amid Mass Layoffs, Large Law Firms Caught Red Handed With LLM Slop (Defrauding Clients and Courts)
Links for the day
Gemini Links 22/02/2025: Analog Stuff, Sigil, and SSGs
Links for the day
Microsoft's Market Share in Cameroon Falls to New Lows
This means a lot of Android users (iOS is about 4 times smaller), but Android does not mean freedom
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, February 21, 2025
IRC logs for Friday, February 21, 2025
The Streisand Effect is Real
So don't be evil. Also, don't strangle women.
Links 21/02/2025: Linux Foundation Openwashing, Microsoft Copilot Goes Down
Links for the day
Links 21/02/2025: Doomscrolling and European Ham Radio Show
Links for the day
Links 21/02/2025: TikTok Layoffs, WebOS Software Patents in Bad Hands
Links for the day
Gemini Links 21/02/2025: Web Browsers, Mechanical Shortcuts, and Internet Hygiene
Links for the day
Richard Stallman 'Only' Founded the FSF
there's no reason to be upset at the FSF for keeping their founder in the Board
Techrights Disconnected From the United States Two Years Ago
Did people really need to wait for the US government to become this hostile towards the media before recognising the threat?
Before Trying Censorship by Extortion the Serial Strangler From Microsoft Literally Begged Us to Delete Pages
This is very clearly just a broad campaign of intimidation
Hype Watch: Weeks After Microsoft Disappointed Investors With "Hey Hi" It's Trying Some "Quantum" Hype (Adding Impractical Vapourware to Accompany This Hype and Even LLM Slop in 'News' Clothing)
Remember "metaverse"? What happened to media hype about "blockchain" and "IoT"?
Report About February Mass Layoffs at Microsoft (Third Wave of Microsoft Layoffs in 2025) Comes Back From the Dead
Yesterday we wrote about an article in CRN (reporting Microsoft layoffs) being removed without any reasons specified
Links 21/02/2025: Myanmar Scam Centre and Disruptions at USPTO
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, February 20, 2025
IRC logs for Thursday, February 20, 2025
gbhackers.com is Not Hackers, It's LLM Slop Outputs (Fake 'Articles') That Attack 'True Hackers'
A site called linuxsecurity.com keeps doing this and now we see the slopfarm gbhackers.com doing the same
Gemini Links 20/02/2025: Law of Warming and Cooling, Health, and Devlog
Links for the day
linuxsecurity.com Continues to Spread Lies or Machine-Generated FUD (Microsoft LLMs Likely the Source) About OpenSSH and Linux
this LLM problem is global
Links 20/02/2025: Microsoft Infosys Layoffs and IRS Layoffs (Good News for Rich Tax Evaders)
Links for the day
IBM Layoffs in Europe Already Happening or Underway (UK and Spain). They Try Not to Call These "Layoffs".
"CIO" in particular was repeatedly mentioned lately, as was Consulting
People Who Came From Microsoft Demanding Removal of Articles About Them, About Microsoft, and About Microsoft GitHub is "Generous" (According to Them)
Imagine choosing a law firm that borrows money in the same year just to avoid overdraft in the bank!
Possibly a Third Round of Mass Layoffs at Microsoft in 2025 ("Cloud Solution Architects, Customer Roles"), Report Removed or Censored
This is literally the top story for "microsoft layoffs" right now
Instead of 'DoS Protection' Cloudflare is Allegedly Conducting 'DoS Attacks' on Users of Browsers Other Than Firefox and GAFAM's DRM Sandboxes (Chrome, Safari and Others)
If you value the Web, you will avoid Cloudflare
Mixing Real With Fake in One 'Article' (by "Director of Content, Help Net Security")
From what we can gather, he got machines to generate some slop for him
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, February 19, 2025
IRC logs for Wednesday, February 19, 2025