Browser synchronization and more with Mozilla Weave
Weaving the Web
Mozilla Weave for Firefox synchronizes your critical browsing information between multiple machines.
The Firefox extension site  lists dozens of bookmark synchronization tools. Some sync bookmarks with a commercial service, like the Web bookmarks site Delicious; others sync with private storage, such as a WebDAV or FTP server that you maintain. Weave gives you an option – you can set up a free account at the newly launched services.mozilla.com, or you can run your own server using the open source Weave server code. Your initial choice does not handcuff you, either – migrating between services.mozilla.com and a private server is as simple as entering your new account credentials and performing a sync.
Furthermore, your privacy is protected no matter where you store your remote data. The Weave extension encrypts everything on the client side with public-key encryption before it is transmitted, and your key is never sent over the network. You can use Weave between multiple machines, including not just Firefox on desktops and laptops, but the mobile browser Fennec as well.
Weave is an ongoing project from Mozilla's Mozilla Labs  test bed site, and although the current release focuses on synchronization, in the future, Weave will be able to do much more. The underlying engine supports machine-readable microformats, which makes real data mash-ups possible, and developers can write add-ons with the help of the Weave API.
The Weave homepage  is where you will find the "Getting Started" information and a link to the latest release. The current version is numbered 0.3 and is the first Weave build open to the public, without having to request participation in the beta testers' trial.
To use Weave, you must run the latest betas of Firefox 3.5. From Firefox, you can visit the Weave page and click and install the extension just as you would any other Firefox add-on. Once you restart the browser, you will see Weave's Celtic knot icon sitting in the status bar at the bottom of the screen. Right-clicking on the icon brings up the menu. Then select Sign In….
The setup procedure requires you to agree to the Weave terms of service and create an account at services.mozilla.com. When you are configuring subsequent computers, you will skip the account creation step and simply sign in with your existing credentials. To create your account, supply an email address and choose a username and password – the setup wizard is polite enough to check automatically for whether the username you select is available as you type, so you can quickly and easily pick one that is free (Figure 1).
After you have chosen your account information, you will then be asked to choose an encryption passphrase. This passphrase will be used to encrypt your bookmarks, tabs, and other data before it is relayed to the Weave server. It is a separate secret from the password you selected in the account creation step – that password is only used to sign in to the server and, by necessity, is used for authentication across the network. Your encryption passphrase is never sent.
Weave also asks you to name each computer on which you install the extension. Currently, you cannot view or control advanced settings on a per-computer basis, but this type of functionality could be added in the future.
Once your account and encryption passphrase are set up, Weave performs an initial sync: itemizing, encrypting, and uploading your data to your account at services.mozilla.com (Figure 2). Depending on how much history you save and how many bookmarks you use, this could take several minutes. Subsequent connections to the sync server only transmit incremental changes, which are much smaller.
If you use Firefox on just one computer, Weave can serve as an off-site backup solution, ensuring that you do not irretrievably lose your bookmarks or saved passwords. To keep multiple Firefox installations in sync, all you need to do is install Weave on each of them. During initial setup, simply choose to enter your existing account details (username, password, and encryption passphrase) rather than create a new account.
If you do nothing else, Weave will connect to the server once every five minutes and exchange encrypted updates to the data it is tracking for your account. By exploring the Weave preferences, you can get more out of it (and better understand its inner workings). Open the Preferences panel by right-clicking Weave's menu status bar icon (Figure 3) or from Firefox's Tools menu.
The Weave Preferences dialog has five tabs: Account, Data, Clients, Add-ons, and Advanced. Account allows you to sign in and out of your connection to the server. Advanced allows you to change the server URL if you are running your own server and use debugging tools, such as viewing the activity log. Add-ons is currently unused. Clients shows a list of the computers associated with your account (Figure 4).
The Data tab is where the critical settings are (i.e., which data to sync). Although Weave 0.3 syncs only four data types (bookmarks, browsing history, tabs, and saved passwords), you can see from the grayed-out entries in the Data tab (Figure 5) that many more are in the works, including cookies, saved form data, search plugins, and extensions.
Before you sync two computers, it is a good idea to visit the Data tab and uncheck items that you do not want to share. For example, you might want to keep a different set of bookmarks on your office desktop, or you might not care to synchronize tabs.
By default, Weave attempts a two-way sync between the local data and the data saved on the server. When multiple sets of data are on separate computers, Weave reconciles them by combining them into one set that represents the union of all of the computers' data – hopefully without duplicates, although the sync engine can occasionally get confused.
In some cases, pooling together all of the data might not be the behavior you want. For example, when setting up a new computer, you might want to download your existing bookmarks and passwords, overwriting the defaults installed out of the box. Weave lets you do just that. On the Data tab of the Weave Preferences panel, you can use the Sync Now… button to initiate a sync manually. The Sync Now tool features a drop-down menu for choosing between two-way sync, a download-only sync that overwrites locally stored data, and an upload-only sync that overwrites the stored server data.
In version 0.3, the Sync Now tool also has a non-functional drop-down menu for selecting what data types to sync – although the menu is disabled, you can emulate the same behavior by un-checking anything you do not want to sync from the main Weave Preferences panel before initiating the sync.
Unless you need to perform a manual sync, you might never know Weave is running. The status bar icon indicates whether you are signed in (Figure 6), and the incremental syncs once every five minutes are completely unobtrusive. In my initial tests, performed on Ubuntu 8.10, the only real hiccup was the occasional bug in the Firefox beta itself. That is hardly Weave's fault, of course, and I could detect no discernible slowdowns or interference attributable to Weave.
Additionally, I never found Weave to lose or overwrite a bookmark or saved password. It is a bit more difficult to track changes mentally in browser histories between multiple machines, but Weave did successfully sync the distinctive test pages I visited just to observe its performance. As an added bonus, I like that Weave makes tabs from other synchronized computers available as a History sub-menu; it helps, but without getting in the way of the local browser history.
Weave for the Fennec Mobile Browser
Weave is straightforward to use between desktops and laptops because you can run the same version of Firefox, even on different operating systems. The Weave team wants to bring the same experience to mobile devices, beginning with the mobile browser Fennec .
So far, official builds of Fennec are provided only for Nokia's Maemo-based Internet tablets. If you have an N800 or N810, you can download the latest Fennec Debian package or add the Mozilla repository to your tablet's Application Manager.
The same Weave client extension works on Fennec as well as Firefox, so installation is a snap. Just visit the Weave homepage on Mozilla Labs and click on the download link. Unlike Firefox, however, Fennec does not support the creation of a new services.mozilla.com account, so you must have a working Weave account set up through Firefox before you begin.
After you install Weave, restart Fennec, then drag the screen to the right to reveal the button menu. Now press the setup button (the one shaped like a gear). From setup, press the slider button to open Fennec's Preferences. Weave's preferences are in the Privacy & Security section. Press the Details button, and when prompted, provide your services.mozilla.com username, password, and encryption passphrase. Once Weave successfully authenticates you to the server, it will open up a Preference page from which you can select the data types to sync, change the client name assigned to your tablet, and alter your login credentials. The Sync Now… button is not yet fully implemented in Fennec, but basic data synchronization is already supported.
Buy this article as PDF
According to a report, many potential victims of the Heartbleed attack have patched their systems, but few have cleaned up the crime scene to protect themselves from the effects of a previous intrusion.
DARPA and NICTA release the code for the ultra-secure microkernel system used in aerial drones.
Should you trust an online service to store your online passwords?
New B+ board lets you build cool things without the complication of a powered USB hub.
Redmond rushes in to root out alleged malware haven.
New initiative will bring futuristic virtual reality effects to the web surfing experience.
Dyreza malware launches a man-in-the-middle attack that compromises SSL.
New cloud combines worldwide access with local attention to data security.
A first cousin of the recent Heartbleed attack affects EAP-based wireless and peer-to-peer authentication.
FOSS community acts to protect freedom of choice for laptop devices.