Ironfox (Firefox on Android) now has enabled early-stage Fission (per-site isolation)!

See release notes!

12 Likes

There’s a reason why it’s disabled by default.

Also, even with Fission, Firefox is still way behind Chromium on Android.

2 Likes

You need to check Selinux labels. I bet it does not even use isolatedProcess and thus is only multi-process, but neither running with a sandbox nor with site isolation.

Edit: Still no isolatedProcess:

5 Likes

It’s enabled by default in IronFox

Per-site process isolation (Fission) is now enabled by default.

Could you develop? What is the screenshot meaning?

See here, most issues have been fixed. 1610822 - (gv-fission) [Meta] Make GeckoView Fission Compatible
It might cause some breakage, but I don’t mind because of the added security.

1 Like

Congrats to @celenity and the team. This is a big step forward for Firefox security on Android.

3 Likes

Who said otherwise? :thinking:

FWIW: We did experiment with enabling isolatedProcess, but it unfortunately proved to be too unstable in our testing… :confused:

I’ll repeat: Who said otherwise? Did I miss a reply somewhere? :wink:

FYI Mozilla has began officially rolling out Fission to Nightly users. It seems to be far more stable than it was in the past based on our research and testing. We also expose a setting in the UI (as explained in the release notes) to disable Fission, so that if it does cause issues, users can act accordingly (Though so far, we haven’t heard any complaints).

I won’t lie that I’m a bit surprised by all the negativity here. Can’t we just appreciate what is objectively a positive step towards improving Firefox’s security on Android? :pensive:

17 Likes

Fair enough - I suppose it just feels excessive at times (These same issues seem to be brought up on every Firefox thread that I see here…), but I do agree people should be aware of these issues, so that they can make the best decisions for their threat model and are able to protect themselves accordingly.

We’re planning to have proper documentation/wiki pages (likely in the near future) to better cover information like this. (Ex. highlighting Firefox’s security deficiencies and where Chromium may be preferable, how we can’t protect against sophisticated fingerprinting and Tor can, etc…)

17 Likes

I didn’t looked at specific issues but 80% or so seemed to have been fixed.

Good to know. My question is what is enabled already?

@celenity
Short question:
Where can I see the “Phoenix enhances uBlock Origin’s default configuration as explained here lists?”

Especially the lists marked with :rocket:
?
Or do I have to add them manually?

I will let Celenity answer, but just to be clear, this only applies to desktop, not mobile.

1 Like

Ahh I’m on mobile and was Planung around. Thanks though