Live data from Hacker News

Container Tabs

wiki.mozilla.org

171–180 of 222 posts

Re: Container Tabs

#171

I am a Mozilla supporter and FF is my "daily driver" browser. Very interested in this feature. Chrome has had it for a years, and it's a killer feature for many developers. It's very very useful to have multiple browser windows open, each logged into the same site as a different user. A lot of people do this by opening multiple browsers (FF, Chrome, Edge, Safari, etc) but that has its limits and it just adds another…

Firefox has had multiple profiles for years too, though the UI isn't as nice as Chrome's. This is different, this is basically profiles that can sharethe same browser window.

Not as nice is a pretty big understatement. Here's the article that Mozilla links to about how to do it on OSX: http://spf13.com/post/managing-multiple-firefox-profiles-in-...

   /Applications/Firefox.app/Contents/MacOS/firefox-bin --profilemanager

Re: Container Tabs

#172
post #168
post #152

Earlier quoted context omitted.

"I'd like to see these security levels built into browsers where the contexts are built around permissions and site trust rather than access to the user store (which is also important)" I want to take it all the way to eleven and 'jail' a gui process (in this case, the web browser - any web browser). It gets its own filesystem root and its own IP BUT I don't have to pay the penalties of firing up a full blown virtual…

For a partial solution, have a look at "sandbox -X" (man 8 sandbox).

Agreed, although be aware that this is only available when you're using SELinux. By default that's Fedora/Centos/RHEL, not Debian/Ubuntu.

Re: Container Tabs

#174

Earlier quoted context omitted.

Not even. Chome's session isolation is only per each of the two browsing modes.

Chrome supports multiple profiles (click the person icon or username on the upper right), not just logged and incognito.

Yes, but all incognito tabs are in the same session, even if opened in separate windows.

Re: Container Tabs

#175
post #82
post #80

Right now, what I'm doing is that all my standard browsing happens on Firefox, with uMatrix blocking JS and just generally locked down. For anything where I want to log in or have a persistent identity (stackoverflow, gmail, etc), I set up separate Chrome profiles and manually open each site in the appropriate profile. Honestly, this whole thing is a bit of a pain - my ideal solution would be one where I can set up "…

Context based on domains sounds like a perfect and elegant solution. I hope someone from Mozilla is reading this.

Not really, many people have both work and personal gmail accounts, for example. Contexts are not based on domains.

Re: Container Tabs

#176

Earlier quoted context omitted.

so evilcorp.org cookies for evilcorp.org images on a.org will not be set for evilcorp.org images on a.org I'm not sure this description is as clear as you intended.

oops! You are right. I meant: ... so evilcorp.org cookies for evilcorp.org images on A.org will not be set for evilcorp.org images on B.org .

Can you edit your post?

Re: Container Tabs

#177

Earlier quoted context omitted.

Old perhaps, but userfriendly this is not.

I wonder how many users understand the concept of profiles and the session isolation they provide, want to use them, yet find the command line too difficult to use.

Since they're akin to user accounts on windows, I'd assume a decent number of users understand them.

Even though people don't use multiple-user-accounts too much anymore, it's still usually present in schools and in older family computers.

Conceptually they're very similar.

Re: Container Tabs

#178
post #39

I would like to be able to configure my browser to open every URL in a domain-specific "container", unless I say otherwise. Say site www.a.org includes an image from www.evilcorp.org, and www.evilcorp.org sets a cookie. When I then go to www.b.org and it includes an image from www.evilcorp.org, I don't expect the cookie to be sent back. In other words, the cookie should be tied to www.a.org, even though it actually c…

Alternatively you can just block third-party cookies.

Re: Container Tabs

#179
I don't want to be too greedy (considering that the presence of this feature on the desktop is already great), but is there any chance that this will be coming to Firefox for Android? It might be a challenge to implement this UX-wise; however, it would also be extremely helpful since it would help in isolating mobile "web-apps" while still using a decent browser (Firefox for Android instead of Chrome), especially as profiles, which exist on the desktop version of Firefox, are not available on Android.

(Googling does not seem to have produced any relevant hits.)

Re: Container Tabs

#180

Earlier quoted context omitted.

Firefox is integrating a cookie feature from Tor called first-party isolation or double-key cookies. It will separate third-party cookies for each first-party site, so evilcorp.org cookies for evilcorp.org images on a.org will not be set for evilcorp.org images on a.org. Blocking third-party cookies can break some site that rely on third-party resources, but first-party isolation should allow each site to work withou…

I'm glad Firefox is doing this, but ... > Blocking third-party cookies can break some site that rely on third-party resources Can anyone name sites that require them? As someone who defaults to deny all cookies and manually enables every one my browser accepts, I don't think I've found a site that requires 3rd-party cookies. Few sites require cookies unless you login or have shopping cart. Of course, that's anecdotal…

My university uses Piazza often as a forum, linked in through our course management site, Canvas. If you don't have 3rd party cookies, it used to just not work, but not it redirects you into opening a new tab/window for Piazza. It's still annoying and would be nice to have it right there in Canvas
Post reply on HN