Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Facebook Container for Firefox

mozilla.org

Post reply on HN
Print view View original

191–200 of 406 posts

Re: Facebook Container for Firefox

#191

Post by fwn »

keyle wrote: post #131
narag wrote: post #31

We're going from cold war to all-in. Not just a privacy question. Reddit nags me every time I hit the front page, even returning from a story, asking me to log in. For most sites I need to create ublock filters to prevent pop-ups with useless "we use cookies", subscription requests, ads or social media bars that fills half the screen, etc. etc. etc. Every newspaper I read has decided that autostarting video and strea…

"We use cookies on this site! Read our Cookie-policy mambo jumbo here! "

There are several blocklists specifically curated to adress the EU cookie nag:

http://prebake.eu/ https://www.i-dont-care-about-cookies.eu/ https://github.com/r4vi/block-the-eu-cookie-shit-list

AFAIK some prominent cookie notices are also part of the Fanboy Annoyances list: https://easylist.to/

The only prominent nags that are not very well targeted with those lists are in webapps like reddit mobile. Primarily because of their dynamic, non-descriptive ids.

Re: Facebook Container for Firefox

#192

Post by fwn »

tempestn wrote: post #135
keyle wrote: post #131

Earlier quoted context omitted.

"We use cookies on this site! Read our Cookie-policy mambo jumbo here! "

Blame the stupid EU cookie law for that though, not the sites. Cookies can actually be very user/privacy friendly, since they provide a way to retain user preferences without requiring an account to tie them to.

They are also entirely voluntary - which the EU would've known if decision makers had visited their browser settings once.

Re: Facebook Container for Firefox

#193

Post by dredmorbius »

icc97 wrote: post #180
dredmorbius wrote: post #173

Earlier quoted context omitted.

No, it does not. I browse Reddit on mobile in Incognito mode in Chrome, frequently, for various reasons. This means that there is no cookie history, and (when Chrome shits its pants and dumps the Incognito session), the settings are lost. This seems to occur every few days, occasionally every few hours. Reminds me a lot of Netscape 4 days. Every. Fucking. Goddamned. Time. I go to Reddit, I get: 1. The "Use our Mobile…

I don't know if you've come across i.reddit e.g. [0], I only heard about it a few weeks ago, but it's an old mobile site from reddit with nice simple styling and all the shite taken out. No popups for the stupid app. I don't understand the drive to force people to use the app. Medium trys similar but less annoying tactics. Either way you get eyeballs on your site. Perhaps there's better tracking that they can get hol…

https://i.reddit.com and https://old.reddit.com both avoid this ... until you hit an internal reddit link to a different host (www, np, etc.,) in which case you're back to base and fucked. The inconsistency of intra-reddit links (that is, links within the Reddit app) is ... one of the more annoying elements of the site, and long has been.

Re: Facebook Container for Firefox

#194

Post by [deleted] »

newscracker wrote: post #170

If you use Firefox Containers, including the Facebook Container, please also use Cookie AutoDelete [1] to get rid of cookies from closed tabs across containers. Otherwise, in my observation, sites will still be able to track you if you reuse a container (even after closing all tabs of that container) for a specific site. [1]: https://addons.mozilla.org/en-US/firefox/addon/cookie-autode...

[deleted]

Re: Facebook Container for Firefox

#195

Post by LudoA »

newscracker wrote: post #170

If you use Firefox Containers, including the Facebook Container, please also use Cookie AutoDelete [1] to get rid of cookies from closed tabs across containers. Otherwise, in my observation, sites will still be able to track you if you reuse a container (even after closing all tabs of that container) for a specific site. [1]: https://addons.mozilla.org/en-US/firefox/addon/cookie-autode...

But doesn't that mean you need to login again each time you go to a website?

Sure, by saving passwords in Firefox it isn't a huge hassle, but a cookie is still more practical...

Re: Facebook Container for Firefox

#196

Post by isostatic »

tempestn wrote: post #135
keyle wrote: post #131

Earlier quoted context omitted.

"We use cookies on this site! Read our Cookie-policy mambo jumbo here! "

Blame the stupid EU cookie law for that though, not the sites. Cookies can actually be very user/privacy friendly, since they provide a way to retain user preferences without requiring an account to tie them to.

The intention was to highlight just how many sites use cookies to trace your movements that you might not realise. Clearly it didn't work well, and led to the reasons for a lot of the GDPR

Re: Facebook Container for Firefox

#197

Post by LudoA »

narag wrote: post #31

We're going from cold war to all-in. Not just a privacy question. Reddit nags me every time I hit the front page, even returning from a story, asking me to log in. For most sites I need to create ublock filters to prevent pop-ups with useless "we use cookies", subscription requests, ads or social media bars that fills half the screen, etc. etc. etc. Every newspaper I read has decided that autostarting video and strea…

The extension "I don't care about cookies" prevents 99% of the useless "we use cookies" pop-ups.

Re: Facebook Container for Firefox

#198

Post by dfee »

d6de964 wrote: post #128
dfee wrote: post #93

Earlier quoted context omitted.

Let’s say you go to example.com and they’re using a Facebook Pixel for analytics - so example.com can continue marketing that widget to you after you’ve left their site. Well, when you visit example.com/shop/widget1 you essentially load a 1x1 pixel image from the url ads.facebook.com/pixel?metadata=goes-here and you web browser sends your Facebook cookie along side the request (as it does for every request to .facebo…

Can't the websites share that information with facebook by proxying that information? It'd be the same workaround as for ads if you host them it's very hard for someone else to block them, especially if you use dynamically named divs, image sizes etc.

No. You’re not providing your Facebook cookie to the third party site. So, there is no way to associate your identity on example.com with your Facebook profile.

Think of it this way, if you have an authentication ticket, such as what is in a session cookie, then you have access to your account. If someone intercepted that ticket / cookie, they could maliciously act on your behalf and play around on your Facebook - just like you. Your browser therefore doesn’t send cookies to domains that aren’t specified as trusted by the originator of the cookie; I.e. third parties.

So example.com and Facebook wouldn’t be able to associate the two identities.

*except of course through some interesting trickery like browser fingerprinting.

Re: Facebook Container for Firefox

#199

Post by LudoA »

fwn wrote: post #191
keyle wrote: post #131

Earlier quoted context omitted.

"We use cookies on this site! Read our Cookie-policy mambo jumbo here! "

There are several blocklists specifically curated to adress the EU cookie nag: http://prebake.eu/ https://www.i-dont-care-about-cookies.eu/ https://github.com/r4vi/block-the-eu-cookie-shit-list AFAIK some prominent cookie notices are also part of the Fanboy Annoyances list: https://easylist.to/ The only prominent nags that are not very well targeted with those lists are in webapps like reddit mobile. Primarily becaus…

Yep, I've used "I don't care about cookies" for a couple years now I think, it's been great. It's very rare that I see these pop-ups.

Re: Facebook Container for Firefox

#200

Post by cornholio »

Third party cookies, and any way to fingerprint a specific user starting from high entropy user agents to screen resolution, font fingerprinting or canvas data, should be considered a breach of the browser security model.

All sites should run in containers and no advertiser should be able to track you across sessions. When I want 3rd party interaction, I should need to opt in and connect the current site with Facebook or some other 3rd party.

Post reply on HN