[tbb-dev] A few notes from things I've seen

Tom Ritter tom at ritter.vg
Tue Jan 3 20:14:11 UTC 2017

[[If anyone finds this helpful or useful please say so I'll continue
to keep an eye out and continue this vein, otherwise I'll assume
everyone follows the same news sources I do.]]

mac x86/x86-64 has gone away, and it is now only x86-64:

Fennec now has Chromecast/casting stuff on by default. I'd suggest
this should be disabled but that it should also be investigated at
some point to see if it's doesn't enable proxy bypasses and might be
able to be enabled at the lowest slider level.

Eventually coming will be OpenType Variation Fonts:
 I don't know anything about these specifically, although I'm sure
there's font fingerprinting concerns and general font security

MediaError:message attribute is being turned on by default:
This looks like something that could be used to fingerprint users!

Installing multiple XPIs simultaneously may be going away:
I don't think this should affect TBB...

Eventually planning on writing some Private Browsing mode data to
disk: https://groups.google.com/forum/#!topic/mozilla.dev.platform/Js-pI-6dSQA

There's a NetworkInformation API that got some discussion:
It's basically as horrible as one would expect, but fortunately
several people raised concerns. Still is important to keep an eye on
as it seems eventually it will need to be turned off or hardcoded.

GCC 4.9 is now required to build Linux/Android:

clang-cl has become a tier 2 compiler:
 I hope to get mingw to tier-2 status also.

There's this new (or maybe old?) thing called compact themes:

There are a few features that are brand-new but not known to be
dangerous. It's just 'new code'. I'm not sure if there's any appetite
to disable these sorts of features at the medium or high security
level for a time before enabling them.
CSS Grid: https://groups.google.com/forum/#!topic/mozilla.dev.platform/6shk3TZX5vo
CSS Mask Image:
(no pref for this)
html5 dialog element:
CSS display:flow-root
CSS caret-color:
(no pref)

More information about the tbb-dev mailing list