Hacker News new | ask | show | jobs
by Xylakant 1087 days ago
From the linked page explaining the feature:

How can I re-enable the add-ons that are not allowed on some websites?

We understand that installing add-ons is a user choice and, as with your security, we also take this matter very seriously. If you are aware of the associated risk and still wish to allow the add-ons that have been disallowed on a website by Mozilla, you can do it from the configuration editor (about:config):

2 comments

"“But the plans were on display…”

“On display? I eventually had to go down to the cellar to find them.”

“That’s the display department.”

“With a flashlight.”

“Ah, well, the lights had probably gone.”

“So had the stairs.”

“But look, you found the notice, didn’t you?”

“Yes,” said Arthur, “yes I did. It was on display in the bottom of a locked filing cabinet stuck in a disused lavatory with a sign on the door saying ‘Beware of the Leopard.” "

Requiring users to have non-trivial general computer skills before disabling security features seems completely fine to me.

If you see that an extension is blocked on a domain and don't think to Google "unblock extension domain Firefox", select an appropriate result, and follow straightforward instructions then you probably aren't capable of understanding the nuances of extension security risks.

These stupid users, can’t control their computers! Let it be us, corporation, who decide what you can run. It is safe and effective.
Apple, is that you?
The blocking UI shown to n the documentation of the feature has a “learn more” link which presumably leads to to exact the same documentation that I quoted. I consider that absolutely discoverable and fine. The one thing that I would wish for as an improvement is that I can unblock specific extensions individually instead of a single switch for all.
This about:config toggle seems to be a "nuclear option" that disables the entire "quarantined domains" functionality. It would be better if Mozilla offered users a choice to toggle only certain blocked addons on certain domains, though the normal UI.
I agree, that would be better. But the current situation is strictly better than before, even if it’s not perfect - it protects you until you flip that switch and when you do, you’re exactly where you were before they added the feature. So nobody is worse off and many are better off.