Saturday, August 8, 2015

38.2 available, and Google Code ain't

TenFourFox 38.2 "final" is now available (downloads, release notes and hashes). This will be the last release with documentation on Google Code because I punched the button today to start moving data over to the new TenFourFox Github repo. Please note that the repo won't have a lot in it currently because Google Code is still dumping stuff over and we're still on source parity with 38ESR (we'll see about what happens next, but we have bigger fish to fry in the interim). Please do not modify issues or update wiki pages on Google Code any longer -- they will not be reflected on Github. If you have issues to file, note them here or on Tenderapp.

Langpacks for 38 are also available.

The next step will be updating the home page with the new URLs, then starting work on the revised FAQ, hashes and release note templates. As usual, 38 will become final on Monday afternoon-ish Pacific time.

27 comments:

  1. Hi, thank you for all your efforts on this 38.2 release of TTF. Noticably fast on loading pages. However, it could be my G5 DP running Leopard but it seems to crash on occasion for no apparent reason Otherwise I see no other issues even though mine was not a thorough test by any stretch.

    ReplyDelete
    Replies
    1. If you find a site or combination of actions that causes it to crash more reliably, that would help me more.

      Delete
  2. Very smooth overall. Just still sometimes messes up passwords when master-password is enabled (decryption error??).

    If I go into options and copy the password and renter it, it works, but then wants to create a new password notation. Seems to have trouble accessing signons reliably.

    ReplyDelete
  3. P.S. Can confirm that some passwords are not being translated correctly. Compared the actual values from 31.8 and 38.2 for some sites and they are very different. Even removed the password encryption and tried with no success. Only work around appears to copy all passwords to Text Edit and re-enter into new browser.

    ReplyDelete
  4. I've never seen this in all the time I've been using TFF 38. I use the password manager every day and have passwords encrypted with a master password.

    Do you use any add-ons to manage your passwords like Lastpass or SavedPasswordsEditor? Do the passwords that are messed-up have something in common? Are they very long? Do they contain special characters that would be unusual or potentially problematic like accented or non-roman characters?

    ReplyDelete
    Replies
    1. I can't reproduce this either, though I'm not a heavy user of the saved password feature.

      Delete
    2. They are 12+ chars long with special characters. So might be an issue. Am just recopying them and re-saving them. Is not a horrible ordeal, is just something to keep an eye on.

      A bit like 'places.sqlite' corruption, might be a source of future problems (this last thing can really cause problems - recommend the "places maintenance" addon).

      Delete
    3. Are you using Firefox Sync to sync your passwords? Could that be a source of the problem? Firefox recently migrated to a new version of Sync, and it's caused me some problems syncing bookmarks in Iceweasel.

      Delete
  5. Linkedin.com and Facebook are two sites that crash the fully loaded TTF. I typically will have 3-4 sites loaded upon launch - for gmail, yahoo, facebook etc. Other times it handles 12-13 tabs just fine although the beachball will often show when moving between tabs. I hope this helps.

    ReplyDelete
    Replies
    1. I'd need something a little more consistent. Since fixing the webfont cache problem I haven't had any other crashes on the test systems, but I don't use either of those sites heavily.

      Delete
  6. Dan:

    No sync or password managers. Just the normal 'vanilla' password manager. The same db simply returns different results in 38.2 than it does in 31.8.

    ReplyDelete
  7. web.whatsapp.com doesn't load :( stays with the site's loading wheel. I tried clearing the cache. had to revert to the old version. (Apart from that it looks good.)

    ReplyDelete
    Replies
    1. I just tested this with a current conversation I was having and it seems to be fine here. (1GHz iMac G4, so speed is probably not a factor.)

      Delete
    2. I tried it again after I read this, a few days ago, no luck. This morning I though I'd see if it was the G5 version, so I tried the G4 version and it loaded fine. I tried the G5 version and it worked. So I guess either WA have made a change and it would have worked anyway, or the G4 version cleared out something that was breaking the G5 version. Thanks

      Delete
    3. And the next time I tried it it failed. It appears to be to do with the saved login. A workaround is to log the browser out from the phone. And do the qr code thing each time.

      Delete
  8. Thanx a lot for this one, so perfect, so fast! Just wow .-)
    (oh and btw the old issue of sync freezing the browser in v31 has completely vanished with the new sync)

    ReplyDelete
  9. I'm missing the Swedish installer at http://www.floodgap.com/software/tenfourfox/

    ReplyDelete
  10. Found EASY workaround for secured-passwords issue.

    1. Installed "Password Exporter 1.3.1.1-signed" addon (also requires "Nightly Tester Tools 3.7.7-signed" to get 31.8 to export).

    2. Exported passwords list as xml.

    3. Deleted all saved passwords in 38.2, then imported 31.8 list from previous step.

    Working fine. On doing a similar export from 38.2 and comparing, it seems that some older entries, that should have been over-written, were being read by 38.2 that were being ignored by 31.8.

    All is well! Browser is DRASTICALLY FASTER Now than 31.8.

    ReplyDelete
    Replies
    1. Excellent. Not sure what the glitch was due to, but glad it's working.

      Delete
  11. My online banking web site works very well now. Used to complain when I logged in with TTF 31.8 and gave me an 'outdated browser" message. I am loving it now.

    ReplyDelete
  12. Thanks for making this old powerbook useful again, you literally single handely brought new life to this powerbook and saved it from ending up in the dumpster (the planet also thanks you).

    I have a few questions:
    - I fixed the bash, sudo, and the other system preferences security flaw (I followed the instructions on your blog) is there any other security issue I should be concerned about?

    - What's your opinion on leopard's webkit security certificates bash script update (the latest version of leopard webkit bring a command that is supposed to replace your certificates with the ones from os x 10.10)

    - I have to run g4 fan control otherwise my powerbook fries itself, is it dangerous to have jse 5.0 activated?

    ReplyDelete
    Replies
    1. Although there are almost certainly other security flaws in PPC 10.4 and 10.5, those are the ones that have a cross-platform aspect (i.e., an attack made for an Intel system will succeed on a Power Mac). Flash and Java attacks are now covered by the no-plugins policy. While the remaining vulnerable surface is non-zero, some of these attacks are harder to mount or impossible against PowerPC systems, and all would require using custom build tools to do so, so the practical risk is very low.

      With regard to Leopard WebKit and the Security framework updates, while I do not use 10.5 personally I know that Tobias is very conscientious, and I would not have any doubts about the safety or quality of his releases. Doing so will not affect TenFourFox since we use a separate certificate store and security library which is not dependent on the operating system.

      Java on all Power Mac systems is vulnerable to the Flashblock/Flashback privilege escalation exploit. As a result, TenFourFox will not run Java applets on pages you browse to, and you should only run signed Java applications when possible. That said, I also use G4FanControl on my iBook for the same reason, and the risk of getting malware in this manner (downloaded and doubleclicked rather than drive-by) is no greater than downloading and running any non-Java malware.

      Delete
  13. BTW, I use TenFourFox for web dev work, and I just turned on woff2 support via flag in config. Works great so far. Anyone else tried this?

    Oh, and any new performance-related tips? I used to apply the reduced animations as suggested by lowendmac for v31, and found that it made the GUI reasonably smoother. (1.25 MacMini w/ 10.5)
    http://lowendmac.com/2013/speed-up-tenfourfox-on-your-g3g4/

    Cheers!
    -Martin

    ReplyDelete
  14. Oh B.T.W. Hove noticed now that after closing TenFourFox and then re-opening it later, it is often painfully slow. Have had to reboot to get it back to normal.

    Is it possible to make it purge Ram/Processor-Cache on launch before loading the browser?

    ReplyDelete
    Replies
    1. Haven't noticed anything like that on my machines, and I stop and start the browser all the time while debugging.

      Delete
  15. I am routinely running a lot of stuff at the same time and is a G4, so that might be it (2B is just not enough sometimes). For others that run into this, here is a super-handy free app:
    http://www.macupdate.com/app/mac/39777/purge

    ReplyDelete

Due to an increased frequency of spam, comments are now subject to moderation.