Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Container Tabs

wiki.mozilla.org

Post reply on HN
Print view View original

71–80 of 222 posts

Re: Container Tabs

#71

Post by x1798DE »

pbhjpbhj wrote: post #60
rlpb wrote: post #39

I would like to be able to configure my browser to open every URL in a domain-specific "container", unless I say otherwise. Say site www.a.org includes an image from www.evilcorp.org, and www.evilcorp.org sets a cookie. When I then go to www.b.org and it includes an image from www.evilcorp.org, I don't expect the cookie to be sent back. In other words, the cookie should be tied to www.a.org, even though it actually c…

As someone else intimated, isn't that just disabling 3rd party cookies, which has been a browser feature for ages?

If it were me, I'd like entire essentially unconnected sub-profiles, restricted by sites - different caches, potentially different extensions, etc. Even with third-party cookies disabled, you end up with little tricks to authenticate and track people across domains.

Re: Container Tabs

#73

Post by chei0iaV »

cornstalks wrote: post #67
pbhjpbhj wrote: post #60

Earlier quoted context omitted.

As someone else intimated, isn't that just disabling 3rd party cookies, which has been a browser feature for ages?

No, because when you disable 3rd party cookies, then www.evilcorp.org can't even set its cookie on www.a.org.

So, mission accomplished?

I disabled 3rd party cookies ever since the option appeared in Firefox, and never had any issues.

Re: Container Tabs

#74

Post by apk17 »

pbhjpbhj wrote: post #60
rlpb wrote: post #39

I would like to be able to configure my browser to open every URL in a domain-specific "container", unless I say otherwise. Say site www.a.org includes an image from www.evilcorp.org, and www.evilcorp.org sets a cookie. When I then go to www.b.org and it includes an image from www.evilcorp.org, I don't expect the cookie to be sent back. In other words, the cookie should be tied to www.a.org, even though it actually c…

As someone else intimated, isn't that just disabling 3rd party cookies, which has been a browser feature for ages?

Disabling 3rd party cookies breaks functionality, e.g. tweetdeck.

Re: Container Tabs

#75

Post by yoasif_ »

wolrah wrote: post #65
remir wrote: post #54

Earlier quoted context omitted.

Just run "firefox --no-remote -ProfileManager" and here you go. I'm sure Grandma and Joe SixPack will do that... Not everybody is tech savvy. I'd say the majority of FF users don't even know there's a profile manager.

Reminder of the thing it's being compared to: > The containers feature is enabled in Firefox Nightly 50 by default with the about:config pref `privacy.userContext.enabled` set to true. Grandma and Joe SixPack aren't running Firefox Nightly with about:config tweaks either.

The writing is a bit ambiguous here, but "true" is the default setting in Firefox nightlies currently, so no about:config tweaks needed. The preference is also available in the preferences UI in the "Privacy" section.

Of course, most people are probably not running Firefox nightlies either.

Re: Container Tabs

#76

Post by [deleted] »

apk17 wrote: post #74
pbhjpbhj wrote: post #60

Earlier quoted context omitted.

As someone else intimated, isn't that just disabling 3rd party cookies, which has been a browser feature for ages?

Disabling 3rd party cookies breaks functionality, e.g. tweetdeck.

[deleted]

Re: Container Tabs

#77

Post by j_s »

I use the Qupzilla browser incognito mode which is a separate session per-window by default. It uses the Chrome guts and has a few rough edges.

Re: Container Tabs

#78

Post by piyush_soni »

remir wrote: post #54
znpy wrote: post #35

I've been doing this for years using both Firefox' and Thunderbird's multiple-profile features. Just run "firefox --no-remote -ProfileManager" and here you go. So the serious question is: how is this any different from using multiple profile? Multiple profile also have the pro/con that they are actual different processes, so there's no information leak between profiles whatsoever (well, unless some serious hacking ha…

Just run "firefox --no-remote -ProfileManager" and here you go. I'm sure Grandma and Joe SixPack will do that... Not everybody is tech savvy. I'd say the majority of FF users don't even know there's a profile manager.

There's this for them: https://addons.mozilla.org/en-us/firefox/addon/profileswitch...

I'd been using the command line way for a long time, until I found this. Now the first thing I do is install it in every new office computer, and then I have a Work and Personal firefox profile, completely separate from each other. At home we have mine and my wife's profiles on the laptop.

Re: Container Tabs

#79

Post by the8472 »

rlpb wrote: post #39

I would like to be able to configure my browser to open every URL in a domain-specific "container", unless I say otherwise. Say site www.a.org includes an image from www.evilcorp.org, and www.evilcorp.org sets a cookie. When I then go to www.b.org and it includes an image from www.evilcorp.org, I don't expect the cookie to be sent back. In other words, the cookie should be tied to www.a.org, even though it actually c…

> I would like to be able to configure my browser to open every URL in a domain-specific "container", unless I say otherwise.

Sadly, that is currently not possible, not even with addons, because the containers can only be assigned when creating tabs, not when navigating them. There is a related feature (1st party isolation) but that is always-on, so it fails the unless I say otherwise aspect.

I have filed a bug explaining my use-cases [0], but it does not seem to be a priority at the moment. (other addon devs signalling interest might help)

[0] https://bugzilla.mozilla.org/show_bug.cgi?id=1323873

Re: Container Tabs

#80

Post by x1798DE »

Right now, what I'm doing is that all my standard browsing happens on Firefox, with uMatrix blocking JS and just generally locked down. For anything where I want to log in or have a persistent identity (stackoverflow, gmail, etc), I set up separate Chrome profiles and manually open each site in the appropriate profile.

Honestly, this whole thing is a bit of a pain - my ideal solution would be one where I can set up "domain groups" matching on the URL in the URL bar, each fully isolated from one another (different extensions, settings, caches, histories, forms, cookie stores, etc), and clicking links that go from one profile to another, all referer information is stripped out. Anything not matching one of the domain groups would go to the "default session" (which I would configure to be completely locked down and ephemeral).

Additionally, I'd want a context-menu item "Open link in group ", which would open something matching another domain group in the domain group of my choice, so that I could do things like visit gmail in two different groups.

Post reply on HN