Add IronFox to F-Droid (Mull continued)

FYI: In case anyone else here is experiencing performance issues after updating to 137 like @bigsmoke:

We indeed suspect it’s caused by our uBlock Origin config. We’ve gone ahead and updated it, so it should be significantly faster now. The quickest/easiest way to receive the update is by resetting uBlock Origin: You can do this by navigating to uBlock Origin’s Dashboard and selecting Reset to default settings.... You can also import and export your current settings from this same screen if you have any custom settings/filters/etc. that you’d like to keep.

Apologies for any inconvenience here, and we’ll be interested to hear more feedback on this.

2 Likes

I see only a blank page, too, even when loading just a plain HTML site via HTTP such as http://blog.fefe.de/.

It happened after an IronFox update.

If I disable uBlock Origin, it shows.

I am on Android 11, device “markw”, which by now is pretty old already.

I have done that. Still, loading http://blog.fefe.de/ takes more than 30 seconds. Before the IronFox update it was fast (even with uBlock Origin).

Welcome to my world. Today is the day I finally uninstall the app, delete the repository and tell friends not to bother. I’m sick to death of it jumping back to the previously viewed page

Works again.

Great, glad it’s now working for you! Apologies for not replying sooner, missed this - feel free to reach out if you have any other issues or concerns.

My friend I have been testing iron fox since the past months. With updates after 134 or 135 versions, I have noticed two things

  1. Install tarckercontrol app. Now type say google.com in ironfox. It won’t open until and unless you allow it from the tracker control app. But since the latest updates all websites are getting accessed through ironfox even if they are not allowed in tc. Ignore the app might not work properly with browsers warning in tc, it is there since the beginning. But it is blocking all sites/trackers in every browser until and unless you specifically allow them. Any idea why this is happening since the latest updates?
  2. In settings>privacy and security>enhanced tracking protection, the only mode available now ia strict. Have u removed all other options here?
    Last I am using the older iron fox versions in older phones. They work but slow and since they are out of date versions so extensions dont work in them anymore. It says
    Abcd(extension name) could not be verified aa secured and has been disabled.
    Is there a way to make the extensions work in out of date versions? Its not a security risk because those browsers are only used for yewtube etc without any logging in.

Thank you my friend. I will check and get back. Is there any extension/s which takes cares of every fingerprinting approach?

Thank you my friend. Can you please eli5 what is google safe browsing and fission?

If you have 10 tabs opened on ironfox in private mode and you update the app using the apk on gitlab then after the update all those 10 tabs arw gone. Tested in 5 phones.

I have rementioned the point here

Basically the extensions installed gets auto disabled if the version of the browser is older. Is there a way to make them work even if the browser is out of date?

@bond007

This is probably because we enable/configure DNS over HTTPS by default. You can disable it by navigating to SettingsPrivacy and securityDNS over HTTPS and selecting Off. Tracker Control should work as expected after that. (We plan to add DNS over HTTPS to the onboarding to make this clearer & easier in the future).

Yes, we did this for the same reasons as LibreWolf - changing modes globally has a severe impact on privacy & security, and it could weaken/disable/etc. some of our hardening and protections. That being said, you can disable ETP per-site as needed, and you can also still disable specific protections globally via the about:config if needed (though this isn’t recommended).

Depending on what specific version you’re on, you could try setting extensions.install.requireBuiltInCerts, extensions.update.requireBuiltInCerts, & xpinstall.signatures.required to false - though this has severe security concerns and isn’t recommended (As is using outdated versions of Firefox/IronFox in the first place…), so please proceed with caution.

Safe Browsing is a service (unfortunately operated by Google) that provides real-time protection against malware, phishing, etc. Firefox’s implementation is FOSS (unlike Chromium’s on Android, which typically requires Google Play Services) and very strong from a privacy perspective (Ex. no URLs, files, or sensitive data are sent to Google). We also take additional steps to further improve privacy with Safe Browsing, such as proxying connections to Google - which prevents Google from receiving the IP address of users.

We enable it by default, but it can be disabled with the Enable Safe Browsing toggle found under SettingsPrivacy and security.

Fission is Mozilla’s implementation of per-site process isolation, which improves security by providing stronger sandboxing. It was known to cause issues in the past - but significant work and progress has been made on it, and to this day we still haven’t had a single issue from users known to be caused by Fission. It can be disabled if necessary by setting fission.autostart to false in the about:config (and restarting your browser), though this isn’t recommended.

That’s unfortunately just the nature/design of private browsing; it clears tabs on exit, which means it’s working as expected. I can understand this being annoying though for ex. updates, so it’s just something you should keep in mind.

1 Like

This worked. Thanks. But I remember that I have always kept it to max protection and kept the dns selected which ironfox has selected and the tracker control issue was not there. Would you recommened some dns that protects and at the same time trackercontrol also keeps doijg what it does?

In about:config which exact field is to be set to default? I will play around with it and will update you.

Understood the risks. Please give me some time, I will get back with an update.

Thank you for explaining safebrowsing and fission so nicely. From about:config in case of safe browsing, do we only need to toggle these 2 entries to false?
browser.safebrowsing.features.malware.update & browser.safebrowsing.features.phishing.update to false
There are so many safebrowsing entries there.

Keeping the fission active as suggested by you.

Understood the closing of tabs on update part. Thanks for being so prompt in replying.