Live data from Hacker News

Firefox 57 delays requests to tracking domains

janbambas.cz

151–160 of 266 posts

Re: Firefox 57 delays requests to tracking domains

#151

Interesting approach. I hope more browser vendors will adopt it. It comes with an additional advantage: if a website still needs to function when tracking domains are delayed a second or so, they likely will function too with said domain completely disabled (e.g. using extensions). Sounds like a win from a user perspective.

I have an even better approach: uBlock origin + noscript

An even better approach is to block all ad-serving domains at the DNS layer. If you associate with my home access point and use my DNS cache, you don't get ads period, and you don't have to install an ad blocker or lift a finger.

Re: Firefox 57 delays requests to tracking domains

#152

Ive wondered if it would be possible to tumble the requests via P2P network. Completely destroy the analytics

Browsers leak all kinds of information that can identify you via browser finger printing (which is already widely used): https://en.wikipedia.org/wiki/Device_fingerprint

You can check out how unique you are here: https://panopticlick.eff.org/

Re: Firefox 57 delays requests to tracking domains

#153

Earlier quoted context omitted.

Jesus. Really? Downvotes? Pretend this person worked for facebook and made some statement regarding what the company does. (a) he would be fired on the spot by the company itself ( as he is not authorized to speak on behalf of the company ) (b) he would be laughed out the room because he does not control company decisions The same applies to every single company. Every single one.

The clue here is that even though you’ve been downvoted by multiple people, they’re all too chickenshit to voice their “legitimate” opinion backing the downvote. The only real interpretation here is that, while ethically, you may be correct, you’ve expressed an opinion that “ stealing is wrong ” among members of the thieves guild.

I get what you're saying, but I also want to assert: we're not in the thieves' guild. I mentioned that analytics as a broad category, gets bunched up with a bunch of very nefarious folks – it's like conflating Tor to The Silk Road and their ilk (of which I have no strong objection, but I am using as an example, since many might see selling drugs as "bad", but Tor as "good").

With that said, the comments above this thread, which point out that I have little control over our "Tor" becoming "The Silk Road" are valid and are often on my mind, and I can only say that I will not go gentle into that good night, if it does come to pass.

Re: Firefox 57 delays requests to tracking domains

#154
post #25

Earlier quoted context omitted.

Trouble is the amount of popular websites that simply don't care how long the page takes to load, 30 seconds would be acceptable to many as long as they get their advertising dollars. Users won't know who to blame. They might blame the site but they're just as likely to blame Firefox, Microsoft, their ISP or a virus. There needs to be a display saying "hey, this site is slow because it's tracking you in 15 different…

> Trouble is the amount of popular websites that simply don't care how long the page takes to load... They absolutely do care, though. The longer a page takes to load, the less time users will spend on the site, and the more likely users will give up and close the window.

I think "load" here is subjective as well eg a spectrum from time to first paint and a page being visible and/or interactive, up until completely loading all async and deferred content, some of which might only happen after the user crosses the fold.

I think there's a lot of interest in optimizing that initial time but less so for the full load.

Re: Firefox 57 delays requests to tracking domains

#155
This raises the question: Why delay instead of block?

Assumption is that user wants page to load faster but does not object to tracking.

What if user wants page to load faster and objects to tracking?

Source of Firefox tracking protection is list at disconnect.me?

credit: eco https://news.ycombinator.com/item?id=15964393

Basic gethostbyname()->HOSTS file blocking:

   #!/bin/sh
   exec curl https://disconnect.me/trackerprotection/blocked \
   |sed -n '//!{/\./s/^/255.255.255.255 /;};/\./p' >> /etc/hosts;

   User may want to add these too:
   https://disconnect.me/trackerprotection/unblocked
Beyond HOSTS file, authoritative DNS gives more flexibility, e.g. logging all requests, using wildcards, etc. For example, tinydns:

   #!/bin/sh
   curl https://disconnect.me/trackerprotection/blocked \
   |sed -n '//!{/\./s/.*/.&\
   =&:255.255.255.255:1/;};/\./p' >> _root.zone/root/data;
   if cd _root.zone/root/data;then exec tinydns-data;fi
Or dnscache:

   #!/bin/sh
   curl https://disconnect.me/trackerprotection/blocked \
   |sed -n '//!{
   /\./s/.*/echo 255.255.255.255 > _dnscache\/root\/servers\/& /;};
   /\./p' > block.sh;
   if sh -c ./block.sh;then exec rm block.sh;fi
Note I am not recommending this particular block list. Compared to the one I use, it seems incomplete. I prefer to create own list from DNS logs from own network traffic. Use of wildcards can shorten a long list like this substantially.

Re: Firefox 57 delays requests to tracking domains

#156

Earlier quoted context omitted.

OT. I think we need to standardize the sarcasm tag on the Internet. Not one of those RFC that no one implements, but something concrete, perhaps baked into the HTML standard. (If the W3C include DRM, they can include sarcasm). Or maybe something like ISO, but people ignore them too. /S

I'd prefer everyone on the internet just figures out that sarcasm doesn't work well with text. Make a podcast or video if you must use it. Also "[something], err, I mean [something else]", doesn't work when we all know you have a backspace key.

> sarcasm doesn't work well with text.

I think it's more that effective sarcasm in text requires the audience to know the viewpoint of the author. So, sarcasm among friends over email can work. Sarcasm in the concluding paragraph of an article can work.

Sarcasm between strangers in comment sections, less so.

Re: Firefox 57 delays requests to tracking domains

#158

Earlier quoted context omitted.

> My company doesn't share or sell data with third parties (it's in our TOS – and could obviously change in some Orwellian future, but we'd have to update the TOS), it's the customer's data, they can use it in the same way they'd use any other data they collect. We don't do cross-domain tracking, or aggregate behavioral information across customers, and the way we've built it, it makes it pretty hard to tie any two v…

Jesus. Really? Downvotes? Pretend this person worked for facebook and made some statement regarding what the company does. (a) he would be fired on the spot by the company itself ( as he is not authorized to speak on behalf of the company ) (b) he would be laughed out the room because he does not control company decisions The same applies to every single company. Every single one.

You are right. But speaking out the truth isn't compatible with HN users as of late. So see downvoting and getting flagged as a sign you are right, just the other try to hide your post and keep you from posting. Unfortunately the atmosphere got really toxic, with many things got hidden from users, the down-voting/flagging does no good.

Re: Firefox 57 delays requests to tracking domains

#159

Earlier quoted context omitted.

Should only affect pre-broken code. Like complaining that a compiler is doing something with undefined behavior than you wanted: I get that it's annoying, but maybe fix your code so it's not a problem?

This isn't even a broken code issue. This is a totally unnecessary functionality regression issue. Instead of just loading a page, they're waiting four seconds to load the page, because the page uses an asset on a domain they flag as a tracking domain. This is like if the compiler generated loops with 4000ms sleeps because the app links a library the compiler thinks is annoying. Technically the compiler never said it…

Your app is only slow now if you are blocking its content and/or most basic usability on the loading of external trackers - a lame yet increasingly common practice that needs to stop.

According to the article, they're only delaying these resources when loaded dynamically or async - so developers should be able to "fix" this by loading tracking scripts synchronously, which is what they are effectively doing already if this new FF behavior causes any noticeable impact.

It's hard to feel much sympathy for devs who have _explicitly_ prioritized the sending of their users' info to external parties, over their sites being baseline usable.

Re: Firefox 57 delays requests to tracking domains

#160

Earlier quoted context omitted.

I have an even better approach: uBlock origin + noscript

An even better approach is to block all ad-serving domains at the DNS layer. If you associate with my home access point and use my DNS cache, you don't get ads period, and you don't have to install an ad blocker or lift a finger.

Can you explain how you do that?
Post reply on HN