Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Container Tabs

wiki.mozilla.org

Post reply on HN
Print view View original

31–40 of 222 posts

Re: Container Tabs

#31

Post by lucideer »

rcthompson wrote: post #28
JohnBooty wrote: post #22

I am a Mozilla supporter and FF is my "daily driver" browser. Very interested in this feature. Chrome has had it for a years, and it's a killer feature for many developers. It's very very useful to have multiple browser windows open, each logged into the same site as a different user. A lot of people do this by opening multiple browsers (FF, Chrome, Edge, Safari, etc) but that has its limits and it just adds another…

Edit: I guess I'm misremembering how Chrome works, or maybe they changed it since I've last used Chrome seriously. I'll leave the comment so the replies make sense. Original comment: I'm kind of surprised that Mozilla went with a per-tab approach here, since they went with per-window for private browsing (while Chrome did the opposite: per-tab private browsing and per-window profiles).

I might be remembering wrong, but I'm pretty sure Chrome started with per-window private browsing before eventually upgrading to per-tab.

So Firefox seems to be just jumping ahead of that initial limitation from the start here.

Re: Container Tabs

#32

Post by masklinn »

Timshel wrote: post #19
thewisenerd wrote: post #7

why isn't "Saved Passwords" and "Saved Search and Form data" separated between containers? There have been autofill/form-data attacks in the past[0] and there was a story recently on HN's front page showing the same[1]. I'd like to point out that mozilla already has a configuration option to disable form data saving on https sites, 'browser.formfill.saveHttpsForms'. Why?[2] > Right; the idea is to eliminate "opportun…

Probably because of usability, they are still exploring how to integrate it in the browser (it will probably stay hidden behind a pref for a while). Right now no configuration screen is aware of the container feature.

Yeah usability is a toughie, an other feature I'd be interested in would be some sort of container inheritance (e.g. sub-identities in a work context when clients provide office 365 identities or to test projects under different identities all within the broader work context) but that's even harder to make easy to use.

Re: Container Tabs

#33

Post by jakobegger »

alkonaut wrote: post #26

Why do I even need this? Isn't it by default so that site1.com can't see cookies from site2.com for example?

The problem is when site1.com is Twitter, and site2.com includes a Twitter button, then Twitter can see that you are browsing site2.com

Re: Container Tabs

#34

Post by Too »

alkonaut wrote: post #26

Why do I even need this? Isn't it by default so that site1.com can't see cookies from site2.com for example?

site1.com might include embedded images that are hosted by site2.com, so may site3.com, site4.com, site5.com and site6.com

Now site2.com (aka facebook like button) knows that you have visited both site1, 2, 3, 4 and 5.

You can work around this in some ways by disabling "third party cookies" but this breaks certain features, such as using your facebook identity to post comments on other sites, so sadly all browsers enable this by default.

Re: Container Tabs

#35

Post by znpy »

I've been doing this for years using both Firefox' and Thunderbird's multiple-profile features.

Just run "firefox --no-remote -ProfileManager" and here you go.

So the serious question is: how is this any different from using multiple profile?

Multiple profile also have the pro/con that they are actual different processes, so there's no information leak between profiles whatsoever (well, unless some serious hacking happens).

Edit: being different processes with different profiles, they also have different configuration folders, different cookie sets, different password storage locations etc...

Re: Container Tabs

#36

Post by znpy »

Too wrote: post #34
alkonaut wrote: post #26

Why do I even need this? Isn't it by default so that site1.com can't see cookies from site2.com for example?

site1.com might include embedded images that are hosted by site2.com, so may site3.com, site4.com, site5.com and site6.com Now site2.com (aka facebook like button) knows that you have visited both site1, 2, 3, 4 and 5. You can work around this in some ways by disabling "third party cookies" but this breaks certain features, such as using your facebook identity to post comments on other sites, so sadly all browsers en…

see my reply about multiple profiles

Re: Container Tabs

#37

Post by alkonaut »

jakobegger wrote: post #33
alkonaut wrote: post #26

Why do I even need this? Isn't it by default so that site1.com can't see cookies from site2.com for example?

The problem is when site1.com is Twitter, and site2.com includes a Twitter button, then Twitter can see that you are browsing site2.com

Ok - I'm happy to break all such functionality by refusing the use of those cookies. I'm almost sure Ghostery already does this. Is there no legit/useful use for this (I don't count fb auth or like/tweet buttons)?

Re: Container Tabs

#38

Post by muddysky »

Slightly OT: This page reads like Mozilla's Developer Network (MDN) online documentation, I had to read the first sentences few times until I got what container tabs are about.

However, very nice feature.

Re: Container Tabs

#39

Post by rlpb »

I would like to be able to configure my browser to open every URL in a domain-specific "container", unless I say otherwise.

Say site www.a.org includes an image from www.evilcorp.org, and www.evilcorp.org sets a cookie. When I then go to www.b.org and it includes an image from www.evilcorp.org, I don't expect the cookie to be sent back.

In other words, the cookie should be tied to www.a.org, even though it actually came from www.evilcorp.org. It should only be sent if my URL bar says www.a.org AND the image is coming from www.evilcorp.org.

I feel that this is how browsers should have been designed in the first place. I welcome this Container Tabs feature, but I don't think it quite goes far enough to restore my privacy.

Re: Container Tabs

#40

Post by chii »

rlpb wrote: post #39

I would like to be able to configure my browser to open every URL in a domain-specific "container", unless I say otherwise. Say site www.a.org includes an image from www.evilcorp.org, and www.evilcorp.org sets a cookie. When I then go to www.b.org and it includes an image from www.evilcorp.org, I don't expect the cookie to be sent back. In other words, the cookie should be tied to www.a.org, even though it actually c…

how would you do oauth (or openid style login) with this then?
Post reply on HN