Xp folk hero Feodor2 releases third test version of Mypal 68

Posted on this guy before.

Before the "establishment" went after him for his excellent MYPAL releases, he was going a great job of keeping that old Palemoon fork working.

On my old 2002 Thinkpad T42's, one of which is composing this in real time, I found that using the EXTREMELY HARD TO FIND BROWSER EXTENSION "MEMORY FOX NEXT" in SYSTEM MODE allowed me hi functionality in multiple XP windows with only 2 mg RAM total.

Check GITHUB for the third (so far) release of MYPAL 68 which is the most stable.

Some features are still in development.

For add-ons, do not use the normal search feature, instead find your addons via Google and then go to the author page, install manually. That works.

Also in the performance settings, I turned off hardware accel, and requested only 1 running executable. That seemed to help a lot.

Some common extensions like ZOOM PAGE WE will crash the new browser, I found another less popular zoom extension which did the job. (Mypal 68, unlike the old MYPAL, does not fit my screen as well)

There is no portable installer. And the updater is not yet finished it seems.

However the Troubleshoot page will tell you precisely where your PROFILE is hiding. Once you have a setup you like, go there, and RAR or ZIP the working Profile with the browser closed.

That way, on your next install of the next release, you can manually replace the starting profile with the one that you already spent time beefing up.

Very promising. If you solve the memory issue. Or alternatively if you run the browser only to save memory,

 

Yes, very promising, indeed. I've been testing it as well and I only use XP!

I found it works well when I spoof it to:

user_pref("general.oscpu.override", "Windows NT 10.0");
user_pref("general.useragent.override", "Mozilla/5.0 (Windows NT 10.0; Win32; x86; rv:91.0) Gecko/20100101 Firefox/91.0");

You could also use the following prefs (but please back up your current profiles and make those changes via the about:config

Keeps things off your disk.
user_pref("browser.cache.disk.amount_written", 0);
user_pref("browser.cache.disk.capacity", 0);
user_pref("browser.cache.disk.enable", false);
user_pref("browser.cache.disk.filesystem_reported", 1);
user_pref("browser.cache.disk_cache_ssl", false);
user_pref("browser.cache.offline.capacity", 0);
user_pref("browser.cache.offline.enable", false);

Stops preloading.
user_pref("browser.newtab.preload", false);
user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons", false);
user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features", false);
user_pref("browser.newtabpage.activity-stream.feeds.telemetry", false);
user_pref("browser.newtabpage.activity-stream.feeds.topsites", false);
user_pref("browser.newtabpage.activity-stream.showSearch", false);
user_pref("browser.newtabpage.enabled", false);
user_pref("browser.newtabpage.storageVersion", 1);

If you don't need google safe browsing.
user_pref("browser.safebrowsing.downloads.remote.block_dangerous", false);
user_pref("browser.safebrowsing.downloads.remote.block_dangerous_host", false);
user_pref("browser.safebrowsing.downloads.remote.block_potentially_unwanted", false);
user_pref("browser.safebrowsing.downloads.remote.block_uncommon", false);
user_pref("browser.safebrowsing.malware.enabled", false);
user_pref("browser.safebrowsing.phishing.enabled", false);

Your sessions won't retain beyond 4.
user_pref("browser.sessionhistory.max_entries", 4);
user_pref("browser.sessionstore.max_tabs_undo", 4);

I found only 2 process was enough on XP.
user_pref("dom.ipc.processCount", 1);
user_pref("dom.ipc.reportProcessHangs", false);
user_pref("dom.max_script_run_time", 0);
user_pref("dom.push.serverURL", "");
user_pref("dom.webnotifications.enabled", false);

I also use the following prefs to help with expliots. YMMV
user_pref("javascript.options.asmjs", false);
user_pref("javascript.options.wasm", false);
user_pref("javascript.options.shared_memory", false);

user_pref("security.mixed_content.block_display_content", true);
user_pref("security.mixed_content.block_object_subrequest", true);

user_pref("security.tls.version.min", 3);

Take good care.

 

Hello everyone - hope all is well )

Sorry I've been away, just dealing with a lot in real life, I guess.

I want to make sure we're all on the same page, so please check:

https://github.com/Feodor2/Mypal68/releases

...every so often, unless, of course, you are subscribed (which I'm not and don't have a account)

So far; so good, but still early in the development phase, of course.

Take good care.

 

New update!

https://github.com/Feodor2/Mypal68/releases/download/68.12.4b/mypal-68.12.4.en-US.win32.zip

Will update my prefs as I prefer for my browsing needs - not necessarily what others may like - I keep it very basic.

Too much going IRL today so might not get to it until this week; hopefully

Excited, though

 

Hate to admit ... curiosity is getting the best of me and I will spend later tonight and into tomorrow working on this. I know (don't judge) I let it go and see (monitor) what it is connecting so as to find out the skinny, then I start to work on my prefs via the native about:config and do it the long way according to how I like it or need it to be considering I'm running ancient (failing) hardware and upgrading is not an option for me at the moment.

Regardless:

I'm going to at least stick by..

user_pref("browser.cache.disk.amount_written", 0);
user_pref("browser.cache.disk.capacity", 0);
user_pref("browser.cache.disk.enable", false);
user_pref("browser.cache.disk_cache_ssl", false);
user_pref("browser.cache.offline.capacity", 0);
user_pref("browser.cache.offline.enable", false);

user_pref("browser.safebrowsing.downloads.remote.block_dangerous", false);
user_pref("browser.safebrowsing.downloads.remote.block_dangerous_host", false);
user_pref("browser.safebrowsing.downloads.remote.block_potentially_unwanted", false);
user_pref("browser.safebrowsing.downloads.remote.block_uncommon", false);
user_pref("browser.safebrowsing.malware.enabled", false);
user_pref("browser.safebrowsing.phishing.enabled", false);

~~~~this could change when I get a better idea (will likely add more) as I don't need (useless) safe browsing to further snoop and (so called) protect me. For the record - I also don't use tracking protections other than to block 3rd party cookies, but I'm uncertain and may allow "session only" - Not sure yet as I utilize my host file to do a lot of the work.

user_pref("beacon.enabled", false) <--- I will need to verify that this pref is doing its job as it WAS NOT in V29.3 (old version)

Your sessions won't retain beyond 4. (just my personal preference)
user_pref("browser.sessionhistory.max_entries", 4);
user_pref("browser.sessionstore.max_tabs_undo", 4);

~~~~~Of course, this is only if one likes to have long sessions and keep history which I do not. You alternatively could close the browser and clear/sanitize history at shutdown Lol

I found only 2 process was enough on XP.
user_pref("dom.ipc.processCount", 1);

To reduce unresponsive endless scripts from (mainly) YT.

user_pref("dom.ipc.reportProcessHangs", false);
user_pref("dom.ipc.processHangMonitor", false)
user_pref("dom.max_script_run_time", 0);

I also use the following prefs to help with (supposed) exploits. YMMV
user_pref("javascript.options.asmjs", false);
user_pref("javascript.options.wasm", false);
user_pref("javascript.options.shared_memory", false);

~~~~will have to see about shared_memory for leaks as I normally use Serpent and I discovered memory leaks even though it was supposedly addressed. Either way, I see no issues with it disabled.

Some folks might not care about this and blocking mixed content will hinder from seeing some postings correctly, depending, of course, because web sites don't usually control peoples postings that contain pictures/images from insecure sources.
user_pref("security.mixed_content.block_display_content", true);
user_pref("security.mixed_content.block_object_subrequest", true);

So long as you don't feel you need 1.0 and 1.1
user_pref("security.tls.version.min", 3);

Since I don't require media peer connection, I also totally disable it along with webgl but will see how it performs for testing purposes.

Okay ... working on it now after having a bite to eat and some green tea to clear up the memory cob webs (not talking about the computer)

 

Done (I think) but still want to double and triple check as I now am having a raging headache from this and time to push myself away from the computer as I'm seeing double. OMG ... so many inconsistencies but keep in mind this project is still in testing phase and early in development.

Take care everyone and good night

 

Ok..

Just wanted to clarify a few things.

Keep in mind:
91.13esr August 23, 2022 [618]
End-of-life 91.x.x product line[failed verification – see discussion] on September 20, 2022.

So beyond September and FF91 will be a risk, so we'll see when the time comes (also with Serpent) if we'll be able to get away with spoofing:

Mozilla/5.0 (Windows NT 10.0; Win32; x86; rv:102.0) Gecko/20100101 Firefox/102.0

Again, I won't even try until September; and, of course, I (fully) realize just spoofing the UA is not enough to fool sites in this day and age as sites will become even more relentless with their tracking/spying (scripting scraping) to only work right with edge/chrome. Heck even 360 is starting to fail, but not enough for me to give up on it until the very last breath my old dinosaur computers will take.

I think he has done an excellent job stripping much of what was telemetry, so overall I'm quite impressed!!

The only plugin that is included 'out of the box' appears to be updated to:



But unless I need to use it (which is never) I usually disable that one.

Oh, and, unless you are using some portable loader, you'll need to keep watch on the appdata folders the profile creates.

 

I've noticed several references indicating this is a nightly build when going through it last night, but for the life of me (and I feel 1/2 dead atm) I can't seem (even though there is settings that is will update) where its going to/from? I'm not that talented enough to figure that out. I don't think it would auto-update as I tried to get it to check and it does nothing ... I don't like things to update in the background anyway.

even with google safe browsing disabled its still trying to connect, but I've added to the host to solve that. Tracking protection is a mystery even though I've set it only to block 3rd party cookies, still mysterious connections, whereas, when I leave it totally disabled and set the user pref network.cookie.thirdparty.sessionOnly to true, this doesn't happen.
Could still be https://disconnect.me/ in the mix but not certain.

Upon further inspection, I've noticed there are many place where Feodor2 has telemetry empty or blanked so that is a great start, but I wonder how others will obtain plugins and extensions - I don't have this problem as I avoid unless I actually need something - I use my browser (and computers in general) pretty bare. I don't do much beyond games and my free movies as I had to let go of netflix early this year and go with YT and 2 others that will play without any plugins or extensions.

So I guess that is about it, but for now, will stick to Serpent, but I hope/wish the best for Feodor2 going forward with this project

 

I just installed the latest version 68.12.4b and now I get a black screen on youtube videos with only the sound.
This never happened before.
No problem with youtube using Serpent or original Mypal.

Any idea on how to fix this youtube black screen?

 

Looks like no videos will play with this 68.12.4b browser.

 

Hmmm ... Videos are fine here??

I think you know whats coming here ... I would first try to disable all hardware acceleration and also dom.enable_performance;false ... try that and see.

You said you're not having issues with the Original Mypal. Are you starting with a fresh profile? If not I would do that and also go through your registry and clean out old keys that might conflict.His new exactable shows up in the registry as a loader which also puzzle me a bit, but, of course, this isn't FF anymore.

You may be aware that there are few of us still trying to watch YT directly from the browser without an extension. So far I've resisted and have not used such extensions, but, honestly, there will come a day when we will have to do that when *nothing but Chrome* day comes. Ugh

Sorry for the late reply; I've been 'out of it' the last few days due to very poor sleep.

Please keep us update.

 

https://techdows.com/2019/06/firefox-69-allows-to-block-both-audio-and-video-for-autoplay-media.html

Also, make sure you are allowing autoplay.

Please also be verify the prefs below are correct.

media.block-autoplay-until-in-foreground;false
media.autoplay.enabled;true
plugins.click_to_play;true (should not be present in this current build)
media.suspend-bkgnd-video.enabled;false

 

Someone on another forum suggested the following below,

layers.acceleration.disabled - true

or

layers.max-active 1 or 2

or

browser.tabs.remote.autostart - false

I only knew about the last one from version 3b.
The first two I didn't know about as version 3b had no video issues.
The problem is fixed and youtube and videos on other sites all work with picture and sound.

• 1
• 1

 

Good to hear - I also disable hardware acceleration - usually it solves the issues

 

I've changed my tune from that lat posting and will update so please disregard my postings from above and consider this as update and I'm on Mypal68 now and will be all day testing.

You could also use the following prefs (but please back up your current profiles and make those changes via the about:config

I spoof to:
user_pref("general.buildID.override", "20100101");
user_pref("general.oscpu.override", "Windows NT 10.0");
user_pref("general.useragent.override", "Mozilla/5.0 (Windows NT 10.0; Win32; x86; rv:102.0) Gecko/20100101 Firefox/102.0");

Keeps things off your disk.
user_pref("browser.cache.disk.amount_written", 0);
user_pref("browser.cache.disk.capacity", 0);
user_pref("browser.cache.disk.enable", false);
user_pref("browser.cache.disk.filesystem_reported", 1);
user_pref("browser.cache.disk.smart_size.enabled", false);
user_pref("browser.cache.disk.smart_size.first_run", false);
user_pref("browser.cache.disk_cache_ssl", false);
user_pref("browser.cache.offline.capacity", 0);
user_pref("browser.cache.offline.enable", false);

Stops preloading.
user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr", false);
user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons", false);
user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features", false);
user_pref("browser.newtabpage.activity-stream.default.sites", "");
user_pref("browser.newtabpage.activity-stream.discoverystream.endpoints", "");
user_pref("browser.newtabpage.activity-stream.enabled", false);
user_pref("browser.newtabpage.activity-stream.feeds.aboutpreferences", false);
user_pref("browser.newtabpage.activity-stream.feeds.asrouterfeed", false);
user_pref("browser.newtabpage.activity-stream.feeds.discoverystreamfeed", false);
user_pref("browser.newtabpage.activity-stream.feeds.favicon", false);
user_pref("browser.newtabpage.activity-stream.feeds.newtabinit", false);
user_pref("browser.newtabpage.activity-stream.feeds.places", false);
user_pref("browser.newtabpage.activity-stream.feeds.prefs", false);
user_pref("browser.newtabpage.activity-stream.feeds.section.highlights", false);
user_pref("browser.newtabpage.activity-stream.feeds.section.topstories", false);
user_pref("browser.newtabpage.activity-stream.feeds.sections", false);
user_pref("browser.newtabpage.activity-stream.feeds.snippets", false);
user_pref("browser.newtabpage.activity-stream.feeds.systemtick", false);
user_pref("browser.newtabpage.activity-stream.feeds.telemetry", false);
user_pref("browser.newtabpage.activity-stream.feeds.topsites", false);
user_pref("browser.newtabpage.activity-stream.filterAdult", false);
user_pref("browser.newtabpage.activity-stream.improvesearch.noDefaultSearchTile", false);
user_pref("browser.newtabpage.activity-stream.section.highlights.includeBookmarks", false);
user_pref("browser.newtabpage.activity-stream.section.highlights.includeDownloads", false);
user_pref("browser.newtabpage.activity-stream.section.highlights.includePocket", false);
user_pref("browser.newtabpage.activity-stream.section.highlights.includeVisited", false);
user_pref("browser.newtabpage.activity-stream.showSearch", false);
user_pref("browser.newtabpage.activity-stream.showSponsored", false);
user_pref("browser.newtabpage.activity-stream.telemetry.ping.endpoint", "");
user_pref("browser.newtabpage.activity-stream.telemetry.structuredIngestion.endpoint", "");
user_pref("browser.newtabpage.columns", 0);
user_pref("browser.newtabpage.directory.ping", "");
user_pref("browser.newtabpage.directory.source", "data:text/plain,{}");
user_pref("browser.newtabpage.enabled", false);
user_pref("browser.newtabpage.enhanced", false);
user_pref("browser.newtabpage.storageVersion", 1);


If you don't need useless google safe browsing.
user_pref("browser.safebrowsing.blockedURIs.enabled", false);
user_pref("browser.safebrowsing.downloads.remote.block_dangerous", false);
user_pref("browser.safebrowsing.downloads.remote.block_dangerous_host", false);
user_pref("browser.safebrowsing.downloads.remote.block_potentially_unwanted", false);
user_pref("browser.safebrowsing.downloads.remote.block_uncommon", false);
user_pref("browser.safebrowsing.enabled", false);
user_pref("browser.safebrowsing.malware.enabled", false);
user_pref("browser.safebrowsing.phishing.enabled", false);

Your sessions won't retain beyond 4.
user_pref("browser.sessionhistory.max_entries", 4);
user_pref("browser.sessionstore.max_tabs_undo", 4);

I found only 2 process was enough on XP.
user_pref("dom.ipc.processCount", 1);

To help deal with endless script(s) from a lot of sites.
user_pref("dom.max_chrome_script_run_time", 0);
user_pref("dom.max_script_run_time", 0);
user_pref("dom.ipc.reportProcessHangs", false);

I also use the following prefs to help with expliots. YMMV
user_pref("javascript.options.asmjs", false);
user_pref("javascript.options.baselinejit", false);
user_pref("javascript.options.wasm", false);
user_pref("javascript.use_US_english_locale", true);
user_pref("javascript.use_us_english_locale", true);

user_pref("privacy.restrict3rdpartystorage.partitionedHosts", "");
user_pref("privacy.sanitize.migrateFx3Prefs", true);
user_pref("privacy.sanitize.sanitizeOnShutdown", true);
user_pref("network.cookie.cookieBehavior", 1);
user_pref("network.cookie.lifetimePolicy", 2);
user_pref("network.cookie.prefsMigrated", true);
user_pref("network.cookie.thirdparty.sessionOnly", true);

user_pref("security.mixed_content.block_display_content", true);
user_pref("security.mixed_content.block_object_subrequest", true);

user_pref("security.tls.version.min", 3);

Take good care and please keep us posted on your experience with this fine browser we now have.

 

How long did it take to make/change all those settings/switches?

 

Hello there ..

Actually, not that long at all. I been using most of them with my mozilla based browsers anyway. Yesterday i was mainly trying to rid of 'safe browser' and 'newtab' and 'preload'. The rest were pretty generic, I'd say.

A lot I was able to first do just using the program settings the normal way without having to go to about:config at all, and, of course, I listed what those settings reflect in the pref.js.

 

OK, just wondering. I get frustrated finding/changing settings!

 

Most certainly - a clear sign I've far too much time on my hands. I know, I know

 

Thanks for the share of info. I'm going for MyPal 68 in near future (Looked at the 2nd release, too buggy). I have a secondary XP online machine slated for mit, but MyPal 29 is so fast and convenient I'm keeping it on my main 'puter still.
Can the two versions co-exist?