Bonum Certa Men Certa

Mozilla Has Turned Firefox Into OSPS Consistent With "Attestation" Objectives

posted by Roy Schestowitz on Apr 14, 2024

OSPS is Open Source Proprietary Software (Proprietary in 'Open' Clothing)

Halloween image of witch silhouetted flying in front of full moon with evil pumpkins at base

PART of running this Web site and Gemini capsule involves development and rapid improvement of custom-made software that suits our needs and meets some basic standards. A lot of it is coded in Perl, Python, and Bash. Recently, however, JavaScript too (tr-copy-title-url.xpi).

In the process of doing that we discovered just how locked down Firefox (and its derivatives too) had become. If one develops an extension to Firefox it "has to be installed as a 'temporary extension' because it is not signed at all," as an insider explains. "In Firefox," one must go to "about:debugging#/runtime/this-firefox" and then "Load Temporary Add-on..."

This needs to be done again and again every time Firefox gets (re)started. "The downside to it being unsigned," the insider emphasises, "is that it needs to be reloaded each time the browser is restarted."

This wasn't like that when I developed Firefox extensions nearly 20 years ago. Something has changed, we're not sure when it changed, and this change was likely gradual.

I installed the extension using the steps above and it required the same to be done in LibreWolf, so the artificial restrictions got inherited by the "Libre" 'version'. Great, eh?

So people need to 'sideload' ("sideloading" is a misnomer) their own work, even repeatedly. It cannot be done without so many steps. The insider explains that "restarting Firefox clears the plug-in out of memory, so figuring out how to sign it properly would help with that."

There's an issue with that though. As the insider soon realised, based on the official pages [1, 2], self-signing is forbidden. "As usual for nowadays," the insider says, "self-signing is not allowed. The tedious manual process given initially is the only real option" (for those who update the code frequently and want it to still work).

If one signs or self-signs one's own work, what is the problem? That it might crash everything? There are various ways to undo or remove extensions and "signing" does not in any way assure quality; it makes sense to allow self-signing in many circumstances.

We've attempted to find a workaround, we tried to think more of ways to install the extension fast (without all those laborious steps). We still wonder when these tight restrictions were added and why it happened (or how Mozilla tried to justify/rationalise it).

Mozilla just wants to be in control of everything, even whatever extension the user adds, even if the user himself or herself developed the extension for personal use. This can facilitate censorship of software by Mozilla, as in, you can only do in Firefox what we've approved.

Attestation much? Is this where Mozilla is going? It's a stepping stone towards DRM or at least Tivoisation.

Where was this decision debated? "Gradual steps [were taken] so that the public goes along without complaining," our insider says. As LibreWolf is the same, we can really see how the restrictions get inherited by freer alternatives. Apparently LibreWolf is so secure that the user is wrong to add the user's own code. Or, as the insider puts it: "It's not your computer any more. It's Microsoft via Mozilla via Google. The three collude and conspire to ensure that they have control of the system and not the ostensible owner. Don't look at the DRM hard- coded into Apple's M2, M3, and M4 chips."

I've estimated that it would take ~60 minutes/month (or 12 hours a year) if we need to re-load our extension every time Firefox (or LibreWolf) is restarted. The insider thinks "reloading is an intentional PITA by Mozilla."

"About the only other option would be to make it an official plug-in and downloadable via Mozilla's site. Updating it would be a horrible experience and require lots of time, each update."

Imagine trying to update one's own software and resubmit to Mozilla every small changes for re-signing. Where's the logic in that? What if the code (or extension) isn't of much use to the general public? Or Mozilla turns the coder down? This isn't being done for "security", it's all about control by Mozilla and its masters (GAFAM). One can bet that, like in Windows XP (and later), Mozilla also keeps lists of everything you put in Firefox every time you use it (under the guise of "telemetry" to 'improve' your experience or something).

We've seen similar issues in UEFI 'secure' boot and Certificate Authorities. These facilitate censorship of code or restrictions on site access (i.e. attacks on Freedom of Expression).

The way things work at the moment "is a waste of time," the insider opines. "It is not about "security" as you or I or anyone else thinks of it. It is about control of the machine and wresting that away from the public, without their complaints."

So just remember that Mozilla has turned Firefox into OSPS that refuses to trust you, the user, or obey your will. The word "Firefox" has two Fs, but Mozilla doesn't give a F about your Freedom.

Other Recent Techrights' Posts

Attacks on Techrights Are Only Making Techrights Bigger and Even More Popular
A week ago they offered to settle with us
EPO Staff Can Go Listen to Richard Stallman Next Week in Munich (Technical University of Munich, Rudolf-Diesel Hörsaal (MW2001) on Campus Garching at 18:00)
"The talk is open to the public and attendance is free. Registration is not required."
 
Links 15/10/2025: Qantas Airways Loses Control of Sensitive Data and Software Patents Are Being Thrown Out
Links for the day
Vista 10 is 'Dead', Here's Why People Should Move to GNU/Linux (or the BSDs)
Today we try to make an outline of reasons move away from Windows to GNU/Linux
Our Sites Continue to Improve
LLM slop has had no noticeable impact on us
Gemini Links 15/10/2025: Neovim, Helix Compared and Gemlog.blue Now Closed
Links for the day
Links 15/10/2025: Mass Layoffs at Amazon, OneDrive Spyware Revved Up, More 'Gen Z Protests'
Links for the day
The EPO's Staff Engagement Survey 2025 is Already Tainted by Intimidation by EPO Management (Trying to Influence Outcomes by Scaring Genuine, Honest Critics)
"[W]e have received reports that, following the previous survey, teams with negative responses were reproached or questioned about their answers..."
The DDoS Attacks by Microsoft's Scam Altman and Other Slop Charlatans and Frauds is Hurting the FSF, Delinking It From Copyleft Projects
This impacts a lot more than access to the licences
Microsoft Scanning Faces in Photos People Upload to Microsoft (Even Unconsciously), Slashdot Turns Report About It Into "Microsoft Sez" (Says)
Or "let's repeat the lies from a PR person/Microsoft's publicist"
[Teaser] Angel Aledo Lopez the Manipulator (Nepotism, Poll Rigging, and Other EPO Corruption)
We'll discuss this later today or tomorrow, based on internal EPO material
Epic Metaphor for End of IBM: "The IBM Demolition is Down to the Last Shards!"
Nothing lasts forever
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, October 14, 2025
IRC logs for Tuesday, October 14, 2025
Proprietary and DRM Prisons Spiralling Down the Sinkhole? Not Just Yet.
Let's hope that more people will flee to GNU/Linux
The European Patent Office (EPO), the Second-Largest Institution in Europe, is Cracking Down on Recreational Activities
Without AMICALE activities, and as staff already says it's pressured to work more for less, how can the EPO recruit bright people?
Transparency: FSFE financial reports exclude speaker fees and expenses
Reprinted with permission from Daniel Pocock
Many Developers Have Many Political Views, They'll Never Agree on Everything
It's an effort to divide and destroy, not build
Gemini Links 14/10/2025: An Opportunity to Consider GNU/Linux and Another Simple IRC Client
Links for the day
Slopwatch: UbuntuPIT, LinuxSecurity, Google News, and the Serial Slopper Brian Fagioli
Nothing of merit here, just more slop
Links 14/10/2025: Lack of Trust in Slop and "Retirement Challenges"
Links for the day
Rhonda D'Vine, Gerfried Fuchs, Pronouns & Debian pregnancy cluster
Reprinted with permission from Daniel Pocock
At IBM, Relocation Means Layoffs (Downsizing)
Silent or 'invisible' layoffs?
Central Staff Committee of the European Patent Office (EPO) Warns That EPO Management is Robbing or Manipulating Pension Funds Again
Faking "growth" is just about as bad as forgery
Probably a Lot Worse Than LLM Slop: GNOME Tying Itself to Divisive Politics, Even Where It's Clearly Not Relevant
Something has gone terribly wrong in GNOME
Links 14/10/2025: Microsoft OneDrive Scanning Faces in Photos (Without Asking First), "OpenAI Says It Will Move to Allow Smut"
Links for the day
They Generally Don't Like Scholars, as They're Less Compelled or Pressured to Repeat What Corporations and Oligarchs Say
People who loathe scholars have an agenda in mind that, unlike that of reasonable people, revolves around controlling people
Dystopian Trends in Technology Make Richard Stallman More Relevant Than Ever
It's good to see him attracting vast audiences
Belated New Article About Last Thursday's Lecture by Richard Stallman in Helsinki, Finland
there are good reasons to pay with cash, not limited to privacy
Attacking Richard Stallman Has Become 'Career Suicide'
If you're going to viciously attack somebody, make sure your arguments are rock-solid
Microsoft's Failing XBox Business Has Turned Games Into Funerals
How does it feel to depend on Microsoft?
Yesterday's "Distinguished Lecture" by Richard Stallman Possibly Attended by Close to 1,000 People
The capacity of the place is about 900
Slop Poisons Everything
Imagine wanting to find what Torvalds has just said or what has just been released
Taking Software Freedom 'Mainstream'
interest in Software Freedom must have grown
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, October 13, 2025
IRC logs for Monday, October 13, 2025
Gemini Links 14/10/2025: Ada Lovelace Day, Sony CLIE PEG-TG50 Review, Why to Avoid Network Solutions
Links for the day
Richard Stallman (RMS) Announced His Talk Less Than 24 Hours Before It Took Place and Still Filled Up the Auditorium at Sapienza Università di Roma
Photos from yesterday evening [...] It looks like it was a very successful event
The EPO's War on Techrights Was a Massive Mistake
The EPO started the SLAPPs after we had published a few hundreds of articles; we've since then published close to 6,000 because the attacks on us emboldened insiders to help us
General-Purpose Computers to Become Growing Area of Coverage
Without them, we have little left for controlling our lives
"They missed a great opportunity to shut up." -Jacques Chirac
Brett Wilson LLP has been trying to cheat the legal system many times
Harassment evidence: Switzerland, overcrowded fitness and yoga centers, incompetence and racism in accident response
Reprinted with permission from Daniel Pocock
Vincent Danjean & Debian NXIVM collateral, blackmail risks
Reprinted with permission from Daniel Pocock
In Sweden This Past Friday Richard Stallman Explained Why Copyleft is Important
And he didn't have to 'bash' BSDs, either
IBM Layoffs Due to a Lack of Money and Company Debt Rising by Almost 10 Billion Dollars in 6 Months
IBM didn't buy Red Hat for any ideological reasons; it was a fast "cash grab" for revenue
Forbes Already Stopped Being a News Sites. Now It's a Spam and Propaganda Platform for "Paying Partners" (Companies).
news from Forbes became very scarce
Is the Second-Largest Institution in Europe (EPO) Gradually Becoming More Like a Sweatshop?
Underpaid, unqualified, inexperienced and incompatible people are already recruited to replace veteran examiners
The Register MS Has No FOSS Coverage Anymore
The Editor in Chief is like a Microsoft plant
Links 13/10/2025: "Toasty Subwoofer" and WiFi Speakers "Are About To Go Dumb"
Links for the day
Gemini Links 13/10/2025: iNaturalist and Tove Jansson’s Moominpappa at Sea
Links for the day
Microsoft Does Not Deny That Large Retailers Like Walmart, Costco and Target Are Giving Up on XBox (and Not Stocking It)
No doubt XBox is in trouble and rumours suggest that more mass layoffs are imminent
We'll Encourage Richard Stallman to Talk About Software Patents at the EPO Next Week When He Visits Munich (EPO Headquarters)
Go listen to Richard Stahlmann
Investigative Journalism Protects Society From Corruption, Crimes Against Women, Assaults on Civil Society
"what is the point of men doing military practice to defend a system that is so rotten?"
Swiss pimp usurping reputation of legendary Tissot boss Francois Thiébaud from France (BaselWorld, SWATCH Group SA)
Reprinted with permission from Daniel Pocock
Paris 'Love Nest' & Debian Outreachy: from Lycée Lakanal to ENS Cachan, Cr@ns, nepotism
Reprinted with permission from Daniel Pocock
Richard Stallman to Give Public Talk in 3 Hours, Then in the Technical University of Munich (Germany) Next Week
Richard Stallman at TUM on 21.10.2025 18:00, MW2001
Arnaud Parreaux lost case defending rogue employer
Reprinted with permission from Daniel Pocock
Mathieu Elias Parreaux declared bankrupt in Switzerland
Reprinted with permission from Daniel Pocock
Breakdown of the Rule of Law and Patent Law in the European Union (EU)
The EPO cannot recruit suitably qualified patent examiners this way, let alone retain them
Gemini Links 13/10/2025: Good Films, Wizard of Earthsea, Upgrading the Steam Controller's Stick
Links for the day
Leaks and Whistleblowers: Our Plan for Today
Society simply cannot advance when too many people self-censor
It's Not Justice When One Side Denies the Other Side the Ability to Even Speak
At this stage, Brett Wilson LLP is in my humble opinion acting in contempt of the Court
Links 13/10/2025: Australian Catholic University Uses Slop to Libel Students, Canada Threatens to Kill Beluga Whales
Links for the day
How Not to Silence Tux Machines (It'll Only Backfire, Badly)
defending Microsoft while attacking this site
Slopwatch: UbuntuPIT and Google News
It seems abundantly clear that Google News and Google in general participates in the slop epidemic
Vincent Danjean (not INTERPOL), Claire Bardel & Debian pregnancy cluster
Reprinted with permission from Daniel Pocock
Christmas lynchings: Martin Krafft (madduck), Penny Leach (mjollnir) & Debian pregnancy cluster
Reprinted with permission from Daniel Pocock
Gemini Links 13/10/2025: Birthdays and "Committee Unable to Contact Nobel Prize Winner"
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, October 12, 2025
IRC logs for Sunday, October 12, 2025