Firefox aufm PC und aufm Handy. Ich denke darüber nach die sync Funktion zu nutzen. Macht das jemand? Ist das hilfreich oder eher technischer Spielkram?

#Firefox #Android #FirefoxSync

Pretty amusing to see despite #Mozilla compromising the security of #Firefox's Sync, users still end up unintentionally nuking their synced data anyway: https://old.reddit.com/r/firefox/comments/1oc60vn/firefox_just_deleted_a_decade_of_passwords_and/

Anyway never treat your browser's sync as backup folks. It's never intended for that purpose, regardless of whether you're using Sync 1.1 or 1.5.

#FirefoxSync
C'est quand-même chelou : il est possible d'installer son propre serveur pour le stockage des données de #FirefoxSync, mais l'authentification pour s'y connecter se fait toujours sur les serveurs de #Mozilla. 🤔

I have completed writing an Ansible role to self-host Firefox Sync server. Thanks to Ansible being just YAML, I hope others can be helped even without running the role by simply reading the code, comments, and commit messages.

https://codeberg.org/ansible/mozilla-syncserver

#FirefoxSync #selfhosted #Ansible #codeberg

mozilla-syncserver

Ansible role that installs Firefox Sync server on Ubuntu Jammy.

Codeberg.org

PSA: don't use Syncthing to sync Firefox/-based browser profiles. You will loose data.
I've got the sync conflicts to show for it.

I don't have a good working theory on why does it happen*. Even despite not running the same profile at the same time.

You can self-host the Fx Sync backend: https://librewolf.net/docs/faq/#can-i-use-firefox-sync-with-librewolf-is-it-safe-to-do-so
Edit: https://github.com/mozilla-services/syncstorage-rs/

* I can speculate that the DB's are synced mid-transaction, thus inconsistent. And not text-based files.

#librewolf #firefox #firefoxsync #Syncthing

LibreWolf Browser

A custom version of Firefox, focused on privacy, security and freedom.

How does #PaleMoon compare to other web #browsers when it comes to the security of synced data?

Pale Moon ( #Weave ):

  • Your secret key is never sent to our servers, we only have encrypted data which we can never read without your key 
  • Pairing a new device while having an already synced device nearby is easy and does not need your sync account’s email and password, while still being cryptographically secure: the target device can generate a random 12-character code which will be inputted in the device already synced with your account in order to complete pairing. This preferred “quick link” method uses J-PAKE to transfer credentials and the secret key without having to show them to the screen, therefore avoiding key disclosure better. See our docs: https://www.palemoon.org/sync/help/easy-setup.shtml
  • If an already synced device is not nearby, then you will need your account’s email and password. To get the synced data, you will need a copy of your secret key. If you don’t have access to any synced device which will have your key, then you can generate a new one within the browser itself (after logging in with your credentials), but all synced data stored in the server will be inaccessible and erased
  • The sync service is not meant for long-term backup and our storage is limited, therefore we limit each account’s sync storage to 30 MB, and if your account has not been synced for 2 or 3 months straight, we schedule your synced data or account respectively for deletion in the next maintenance window.
  • Resetting your sync account’s password within the browser is not yet supported. However as long as nobody has your key, nobody will ever be able to access it, and given enough time, your data in encrypted form will not even be in our servers anymore because of the regular maintenance. For now you will have to DM Moonchild on the forums to get him to delete your account so you can re-register: https://forum.palemoon.org/viewtopic.php?f=52&t=31143&p=251609#p251616
  • Sync service can be self-hosted! Source code for the implementation we use can be found at https://repo.palemoon.org/Moonchild/FSyncMS. It is basically a minimal #Weave / Sync 1.1, which is the previous sync system Mozilla used before Firefox 29 moved to Sync 1.5 + FxA, and it requires a LEMP stack.

Mozilla Firefox ( #FirefoxSync ):

  • Synced data cannot be read by Mozilla 
  • Your secret key is sent to Mozilla’s servers, but it is first hashed client-side with your Firefox Account’s (FxA) password before it’s sent 
  • This means by default (i.e. one didn’t place a 2FA in their FxA) one can pair a new device and recover their synced data as long as one knows the FxA password, even if they can’t access any of the synced devices. The security of your synced data depends solely on your FxA password (which is why we didn’t adopt it and kept/brought back Sync 1.1 even if it got completely removed by the time we made our final hard fork of Firefox 52 ESR’s platform code) 
  • If you forget your Firefox account’s password and reset it, your previously synced data will be inaccessible 
  • Can be self-hosted, but truly self-hosting everything is a bit complicated because the sync service is dependent on FxA’s authentication service which is its own server.  Docs can be found here: https://mozilla-services.readthedocs.io/en/latest/index.html

Google Chrome:

  • Synced data can be read by Google by default  
  • Data can be made unreadable even to Google by setting a passphrase, but that’s dependent on the passphrase’s strength 
  • Resetting your passphrase will make previously synced data inaccessible 
  • Authentication can be three-factor: your Google account’s password, then the Google account’s own 2FA (e.g. TOTP), and lastly the local passphrase.
  • Details about the sync system is obscure, so the above is based on what we probably know.  Obviously this means Chrome’s sync can’t be self-hosted

#sync #mozilla #firefox #google #chrome

Password Authenticated Key Exchange by Juggling - Wikipedia

I really want to keep using & supporting #gecko but #Mozilla is going down the toilet- what to do?

#Firefox desktop -> #LibreWolf (that was easy, simply copied my profile and it all came back exactly as before)

#Firefox mobile -> #IronFox (also easy on #GrapheneOS via #Accrescent store)

I can still use #FirefoxSync on both which is nice 'cos I am not quite ready to leave that convenience yet.

Now it's mostly just a matter of replacing my dependency on #Pocket (compiled out of LibreWolf), but that was on my list of services to deprecate anyway...

Is there any viable replacement for #Mozilla Sync? I just want to have bookmarks synced and open tabs visible across desktop and mobile. That's the main dependency I have on Mozilla as a corp and I'd quite like to ditch it!

#firefox #firefoxsync #firefoxgate #mozillafirefox #mozillagate

Umzug zu LibreWolf anstelle von Firefox.

Inklusive Profil mitnehmen und Standardbrowsereinstellungen, wenn nicht von selbst geschehen.

https://blog.alster.space/umzug-zu-librewolf.html

#FireFox #LibreWolf #WebBrowser #Internet #WWW #FireFoxSync #Debian #XFCE #XDG

Umzug zu LibreWolf

Czy dobrze mi się wydaje, że nie ma możliwości synchronizacji zakładek mobilnego Firefoksa/Fenka z Nextcloud Bookmarks?
Rozszerzenia Floccus, działające bez problemów z desktopowym Firefoksem/LibreWolfem/itd. nie działa w androidowych przeglądarkach.

Czy jest jakiś sposób na synchronizację zakładek desktop-mobile bez użycia Firefox Sync?

#Firefox #FirefoxSync #Fennec #NextcloudBookmarks #synchronizacja #synchronizacjaZakładek #Floccus