Firefox 社群討論區

After finding out Firefox was storing over a gigabyte of cookies, I figured it might be wise to set it up to clear them except for sites I used regularly. However, I've recently noticed that Youtube will clear regardless. I've tried entering the domain both as youtube.com as well as www.youtube.com, but my video display preferences aren't retained. This doesn't happen for other sites, like Reddit or Tumblr. What do I need to enter in the exception list to keep my settings?

Firefox 131.0(aarch64) OSX 15.0.1

1st Issue: The 'Clear Cache' doesn't seem to completely clear the cache. Eg: I'm logged into gmail, I go to Privacy & Security and then click Clear Cache and History. I navigate back to gmail. I'm still logged in.

2nd Issue: When I right click and 'Open Link in New Private Window' this doesn't actually take me to a private window. I have to select File/New Private Window and paste the link to that window.

Issue with primary password, I'd appreciate if someone could shine a light on this issue. I feel I'm wasting time unnecessary. Here it comes:

On a given day and out of the blue Firefox starts asking for primary password whenever it needs to save a password for a website. I type my password to no avail. I'm logged in, I can sync but I can't see saved passwords. I reset my password with recovery key. I set a new password. I log in my account. I can see my browsing history but same problem.

Any ideas on how to solve this? Thanks in advance

Hello Mozilla Community,

I hope I am right with you guys to ask this question though it is a rather technical question. Please let me clarify that I am not a programmer myself or a network engineer but rather a hobbyist who is especially interested in privacy.

As I was reading about HTTP/3 and QUIC, I came across an academic paper called ""A QUIC Look at Web Tracking".

According to this paper QUIC gives web servers and third parties a good way to track users via the "source-address token" and the "server config" which are both stored on the client('s browser/machine). Now I know that this paper is from 2019 and concerns an older version of QUIC. However, in RFC 9000 "source address tokens" aka "address validation tokens" still exist and are especially used to establish future connections with 0-RTT instead of 1-RTT (see section 8.1 of RFC 9000). Though "server config" is not mentioned in RFC 9000, "transport parameters" is mentioned in section 7.4 and 18 of RFC 9000, which are also used for 0-RTT and are also stored on the client.

Neither RFC 9000 nor RFC 9114, which concerns HTTP3, address these privacy risks in more detail. Both seem to take only MITM attackers into account (see 9.5 in RFC 9000 and 10.11 in RC 9114) [as is done in a newer paper from 2022 Evaluating QUIC for Privacy Improvements Over Its Predecessors which however at least addresses the possibility of third party tracking under 5.1 3)].

I would also like to point towards RFC 9250 of May 2022, which concerns DNS over QUIC ("DoQ"). In Section 7 of RFC 9250 many privacy concerns regarding "0-RTT", "Session Resumption (Token)", "Address Validation Token" and "Long Duration Sessions due to QUIC's connection migration feature" are elaborated in more detail.

To sum up my understanding: - Using HTTP/3 or QUIC's "connection ID" for tracking should not be that viable, even if its function is to migrate connections in case of Layer-3/4 (IP address or Port) changes, because a connections life time is at least in firefox limited to 30 seconds (see Github neqo) so that a user should not be trackable for a longer period via the "connection ID". - However, longer tracking may be possible via "Session Resumption Tokens" and "Address Validation Tokens" (see Section 7.2 and 7.3 of RFC 9250; though I myself don't know the difference between these two) as well as via "transport parameters" (see "A QUIC Look at Web Tracking").

As mentioned in "A QUIC Look at Web Tracking", though a restart of the Browser seems to clear the cached state of prior QUIC connections (to my understanding the stored "tokens" and "transport parameters"), tracking via the above mentioned features of QUIC seems not unreasonable as many users today will not restart their browser, especially on mobile devices but also on desktops (3.7 and 5.1.2 of the paper).

As I was not able to find further information on this topic, I would be very happy to get some assurance that firefox is effectively preventing or at least impeding the tracking possibilities mentioned in RFC 9250 and the paper "A QUIC Look at Web Tracking".

Thank you very much for any reply or pointing me into the right direction (other sources on this topic or a more appropriate page to ask this question).

Upon launching Firefox I noticed a notification from Macafee antivirus, I don't really care how to spell their "company" name. But when clicking on the popup it brought me to a firefox addon for macafee. I assume that this is a virus created by the aforementioned company and not a partnership between the two of you. Just wanted to create awareness of this virus as its targeting your browser.

Kaspersky has been changed to UltraAV so I need to add or change this extension in my settings. Also will Kaspersky need to be deleted? thx . THe reason for this is because Firefox will not restart after an updated has been downloaded.

I just wasted 3 hours trying to figure out why my ComfyUI (local AI image generator) stopped working with Firefox. There were no error messages from ComfyUI, it just failed to load workflow files.

It turns out that it's because Firefox is installed as a snap package and wherever the snap configuration for Firefox lives thinks it knows better than I do what files and directories on my system I can access in Firefox.

I also had this problem with trying to open PDFs in my home directory where I kept getting access denied errors. I tried to solve the problems with the snap version and found several proposed solutions by google search which people claimed worked but did not.

I finally found a web page that described how to uninstall the snap package and install an alternate non-snap version of Firefox, and now everything works like I expect it to.

How do I make sure this snap version does not ever come back?

For a credit card field, my card options show up. When I choose one it fills, but when I hit enter or tab, the filled info disappears.

It appears to be this (2nd) problem and known fixed bug. But it was fixed in v118, and I'm using v125.03 and it's still happening. https://support.mozilla.org/questions/1416148 https://bugzilla.mozilla.org/show_bug.cgi?id=1817926

(I whited out the card numbers.)

Hey all firefox doesnt save the preferences for long and every site I go back to I have to keep denying cookies etc. This started recently but my settings are as before whats up with this? I think its the total cookie protection but i cannot turn it off I'm fed up of denying over and over again. cheers

Does MacOS requires the version 131.0.2 Firefox update to address the recent zero-day active exploit?

The reason I ask is Tanium Deploy Software Gallery only includes updates to Windows Firefox versions to address this zero-day.

Description: Mozilla 0-day. CVE-2024-9680 is a use after free vulnerability in the Animation timelines component of Mozilla. Animation timelines are a part of Firefox’s Web Animations API, which controls and synchronizes animations on the web pages. An attacker may exploit the vulnerability to achieve code execution in the content process. Use-after-free vulnerability occurs when the memory that has been freed is still used by the program. The vulnerability may allow attackers to add their malicious data to the memory region for code execution. *Affected Versions* * Firefox versions before 131.0.2 * Firefox ESR versions before 128.3.1 * Firefox ESR versions before 115.16.1. *Mitigation* Customers can upgrade to the following versions to mitigate the vulnerability: * Firefox 131.0.2 * Firefox ESR 128.3.1 * Firefox ESR 115.16.1 For more information, please refer to the [Mozilla security advisory|https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/].

Hi

I was just scrolling through passwords on my Firefox password manager and found 2 passwords that didn't belong to me I deleted them but am now concerned as to how they got there. One was for 'piano vx' (https://auth.piano.io/u/login identifierstate=hKFo2SAwOXdxTTVPWVcxU0tOc25oUWVWWTNnMTBHRFRiY2NCRaFur3VuaXZlcnNhbC1sb2dpbqN0aWTZIF9YUG5IRDNmaTFLRnJSd0hlTHpTNE9jWmJ3YzZucEE0o2NpZNkgTmJJZVZxMkJ6ZkpzSjlQR1RxZTdqTmRxeVRvaGUyWjQ) I have scrolled down through my Firefox history and the only 'Piano vx' entries are from today when I was checking what the password was for. I have never visited that site before so could not have saved a password.

I cannot remember the other spurious one I deleted (as have had a general tidy up whilst I was there) but it gave my user name as 'scottish' which is something I would not use as I am not!

Can anyone shed any light on how these passwords which have not been generated by me are showing in my Firefox password manager please? I have run Microsoft Defender and Eset but neither showing any issues.

I have changed my Firefox password.

Many thanks Gill

Hello! Icant read my mail in yahoo.fr using FIREFOX. I get a message La page n’est pas redirigée correctement

Firefox a détecté que le serveur redirige la demande pour cette adresse d’une manière qui n’aboutira pas.

   La cause de ce problème peut être la désactivation ou le refus des cookies.

With EDGE no problem. I would prefer to keep FIREFOX rather than others... Can you help me please?

While I am in Firefox on my laptop with windows10 pro using it In dark mode how can I remove the yellow and white fill-in with something that I can read? Anything I looked up or tried does not change it back to where I can see the information without switching out of dark mode. Any help will be appreciated!

I recently went to a website I normally visit but accidentally misspelled the url which took me to a deceptive website. Luckily, Firefox was able to detect the site as a security threat and did not allow connection.

About 5 mins after, my windows defender caught a Trojan:Script/Wacatac.B!ml in the \AppData\Local\Mozilla\Firefox\Profiles\0efjymat.default-release\cache2\entries\. I immediately quarantined and removed it.

I understand that it could be a false positive since I read that windows defender usually catches cache files that may look suspicious to it. I have to wonder though is it still possible for deceptive website cache files to get downloaded despite getting blocked by Firefox?

Note: I have ublock extension and my Firefox browser version is 131.0.2 64-bit

I think I know the answer to this question already, because all my searches come up empty, but is there a way to show the count of blocked elements on the shield icon? Obviously you can click on the shield itself and see, but I'd much prefer to display the info live similar to how uBO, AdGuard, Ghostery, Privacy Badger, Disconnect, et al do it.

If that ability isn't available yet, is there an official method to put in a feature request? I doubt I'd be the first one making the request, but perhaps I can add a vote for it to become a reality. ETP has to be about 10 years old at this point, it's surprising that option wasn't added a long time ago.

I have a brand new HP Spectre laptop. I have had Firefox running on it and it has been fine for about 6 months.

Now, all of a sudden, when I click on the desktop short cut, it does not open Firefox but, rather takes me to duck duck go which opens the following website

https://www.blogmuseupicassobcn.org/

I can not get rid of it, I can not by bypass it, and Firefox is no longer available to me on my laptop.