Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Container Tabs

wiki.mozilla.org

Post reply on HN
Print view View original

131–140 of 222 posts

Re: Container Tabs

#131

Post by Sylos »

Timshel wrote: post #12
grenoire wrote: post #4

I would love this feature and it would actually get me to switch to Firefox in a heartbeat. I'm currently using Chrome just because of the the (subjectively) better developer tools, but this is a feature that would make my life so much easier!

I use it every day with de developer edition you just need to switch the following in about:config : `privacy.userContext.enabled` `privacy.userContext.ui.enabled` The pref might be avaiable in other version too.

Yeah, it's already in Firefox Stable. It's not yet fit to be used as an actual security feature, especially not the outdated version of it in Stable, but just for separating logins, I'd assume it's perfectly fine.

Re: Container Tabs

#132

Post by Sylos »

thewisenerd wrote: post #7

why isn't "Saved Passwords" and "Saved Search and Form data" separated between containers? There have been autofill/form-data attacks in the past[0] and there was a story recently on HN's front page showing the same[1]. I'd like to point out that mozilla already has a configuration option to disable form data saving on https sites, 'browser.formfill.saveHttpsForms'. Why?[2] > Right; the idea is to eliminate "opportun…

The vulnerability described in your second link doesn't actually work in Firefox...

Re: Container Tabs

#133

Post by jolux »

homakov wrote: post #122
jolux wrote: post #111

Earlier quoted context omitted.

I turn all of those Chrome features off everywhere anyways. I find the handlers to be especially annoying. Why the fuck would I want that? There's a reason I use Mail.app and it's not because I love using email in web views.

Isn't mailto: opening Mail.app for you?

yes, but Chrome bugs me about switching it to Gmail every time.

Re: Container Tabs

#134

Post by Scarbutt »

wolrah wrote: post #65
remir wrote: post #54

Earlier quoted context omitted.

Just run "firefox --no-remote -ProfileManager" and here you go. I'm sure Grandma and Joe SixPack will do that... Not everybody is tech savvy. I'd say the majority of FF users don't even know there's a profile manager.

Reminder of the thing it's being compared to: > The containers feature is enabled in Firefox Nightly 50 by default with the about:config pref `privacy.userContext.enabled` set to true. Grandma and Joe SixPack aren't running Firefox Nightly with about:config tweaks either.

To be fair, grandma and joe sixpack don't even know firefox exists.

Re: Container Tabs

#135

Post by sydd »

JohnBooty wrote: post #22

I am a Mozilla supporter and FF is my "daily driver" browser. Very interested in this feature. Chrome has had it for a years, and it's a killer feature for many developers. It's very very useful to have multiple browser windows open, each logged into the same site as a different user. A lot of people do this by opening multiple browsers (FF, Chrome, Edge, Safari, etc) but that has its limits and it just adds another…

totally agree with the naming, 'container tabs' is bad. Also I dont like the separation, like having one for banking and one for personal stuff. Arent they the same? I'd have the following:

personal: For personal banking, gmail, facebook, etc. very high security except on my trusted sites.

Work: Work stuff. high security.

Browsing: normal security, so everything works.

wild west: No history, high security. Like private mode. gmail, facobook, banks etc blacklisted so you cant log in even by accident.

Re: Container Tabs

#136

Post by rlpb »

cpeterso wrote: post #114
rlpb wrote: post #39

I would like to be able to configure my browser to open every URL in a domain-specific "container", unless I say otherwise. Say site www.a.org includes an image from www.evilcorp.org, and www.evilcorp.org sets a cookie. When I then go to www.b.org and it includes an image from www.evilcorp.org, I don't expect the cookie to be sent back. In other words, the cookie should be tied to www.a.org, even though it actually c…

Firefox is integrating a cookie feature from Tor called first-party isolation or double-key cookies. It will separate third-party cookies for each first-party site, so evilcorp.org cookies for evilcorp.org images on a.org will not be set for evilcorp.org images on a.org. Blocking third-party cookies can break some site that rely on third-party resources, but first-party isolation should allow each site to work withou…

Ah, neat. That sounds like exactly what I want (except to be able to set a whitelist). Thanks!

For anyone else interested: now that I know what to search for, I also found some status at https://wiki.mozilla.org/Security/FirstPartyIsolation

Re: Container Tabs

#137

Post by sametmax »

gcb0 wrote: post #119
nikcub wrote: post #94

This is a neat idea but it doesn't implement the main reason I use separate profiles in Chromium - different security contexts based on how much you trust a site. Example: my main general browsing profile has flash, PDFs and all plugins disabled, absolutely all handlers switched off, all hardware access off, WebGL switched off, no account logins and uBlock Origin set to aggressively block most third-party requests. M…

you are using the wrong tool. install NoScript in firefox and allow flash/etc per domain temporarily or permanently. profiles/context tab is all about tracking. You just happen to successfully abuse one tool to your ends in one case.

NoScript is a pain to use and configure. And you need to finely tune it. With this profile method, you can have a "all-in" profile, and a "safe" one. This makes things much easier to manager.

Re: Container Tabs

#138

Post by cbsmith »

Manishearth wrote: post #121
JohnBooty wrote: post #22

I am a Mozilla supporter and FF is my "daily driver" browser. Very interested in this feature. Chrome has had it for a years, and it's a killer feature for many developers. It's very very useful to have multiple browser windows open, each logged into the same site as a different user. A lot of people do this by opening multiple browsers (FF, Chrome, Edge, Safari, etc) but that has its limits and it just adds another…

Firefox has had multiple profiles for years too, though the UI isn't as nice as Chrome's. This is different, this is basically profiles that can sharethe same browser window.

I'm not sure I understand the benefit of being able to share the same browser window.

Re: Container Tabs

#139

Post by shostack »

gcb0 wrote: post #120
cpeterso wrote: post #114

Earlier quoted context omitted.

Firefox is integrating a cookie feature from Tor called first-party isolation or double-key cookies. It will separate third-party cookies for each first-party site, so evilcorp.org cookies for evilcorp.org images on a.org will not be set for evilcorp.org images on a.org. Blocking third-party cookies can break some site that rely on third-party resources, but first-party isolation should allow each site to work withou…

best thing that happened to mozilla was losing the money from google. yahoo pays them almost the same and does not meddle on anti tracking features. note how every single privacy feature came after google-money. during google-money what did we got? third party cookies accepted as default. good riddance, google.

I'd love to know how those corporate conversations go exactly. Is it so blatant as saying "no you won't work on these anti tracking features?" Or is it more "this will be so you focus on" which conveniently excludes undesirable stuff?

Re: Container Tabs

#140

Post by rhizome »

cpeterso wrote: post #114
rlpb wrote: post #39

I would like to be able to configure my browser to open every URL in a domain-specific "container", unless I say otherwise. Say site www.a.org includes an image from www.evilcorp.org, and www.evilcorp.org sets a cookie. When I then go to www.b.org and it includes an image from www.evilcorp.org, I don't expect the cookie to be sent back. In other words, the cookie should be tied to www.a.org, even though it actually c…

Firefox is integrating a cookie feature from Tor called first-party isolation or double-key cookies. It will separate third-party cookies for each first-party site, so evilcorp.org cookies for evilcorp.org images on a.org will not be set for evilcorp.org images on a.org. Blocking third-party cookies can break some site that rely on third-party resources, but first-party isolation should allow each site to work withou…

so evilcorp.org cookies for evilcorp.org images on a.org will not be set for evilcorp.org images on a.org

I'm not sure this description is as clear as you intended.

Post reply on HN