Live data from Hacker News

Facebook Container for Firefox

mozilla.org

221–230 of 406 posts

Re: Facebook Container for Firefox

#221
post #46

Earlier quoted context omitted.

When you mentioned reddit I thought you were talking about their "install the app" pop up. They have by far the worst mobile experience out of any site I've use more than once in the last 2 years.

Fortunately it takes one tap to update your preference to have it stop nagging you to install the app. https://www.reddit.com/r/redditmobile/comments/6hk9ot/androi...

It should not be opt-out though

Re: Facebook Container for Firefox

#222
post #192

Earlier quoted context omitted.

They are also entirely voluntary - which the EU would've known if decision makers had visited their browser settings once.

The notice is only for cookies used for non-essential tasks (like analytics) and doesn't have to be shown for things like login sessions. Your browser can't distinguish between those.

The cookie notice policy led to the worst imaginable actual outcome: A state in which you either accept cookies (incl. third party) by default or you will be haunted by numbing "reminders" that cookies exist. Usually taking large parts of your small screen estate.

Prior to that you could just disable them if you liked.

One can say that policy makers had good intentions - certainly. However, I can not imagine a valid evaluation that wouldn't conclude this policy as failure.

Re: Facebook Container for Firefox

#223
I'm glad they released this and hit got some headlines because I tried it, realized how necessary it was and then learned about Firefox containers in general.[0]

Now I'm using them for Gmail, Youtube, Twitter & FB. The three amigos, the internet bad guys. I really should just delete the last two accounts, but I feel a heck of a lot better now. I used to keep those in Microsoft Edge, a browser pretty much relegated to that dirty, social media duty alone. If I can use Firefox for everything, and cut off Google while I'm at it, even better.

[0]https://www.youtube.com/watch?v=Gy7lyvAfOSw

Re: Facebook Container for Firefox

#224

Third party cookies, and any way to fingerprint a specific user starting from high entropy user agents to screen resolution, font fingerprinting or canvas data, should be considered a breach of the browser security model. All sites should run in containers and no advertiser should be able to track you across sessions. When I want 3rd party interaction, I should need to opt in and connect the current site with Faceboo…

There are lots of "shoulds" in the world. People should be nice, not steal, etc.

It seems to me, if users act differently, there "should" be a way to fingerprint them.

Re: Facebook Container for Firefox

#225

Third party cookies, and any way to fingerprint a specific user starting from high entropy user agents to screen resolution, font fingerprinting or canvas data, should be considered a breach of the browser security model. All sites should run in containers and no advertiser should be able to track you across sessions. When I want 3rd party interaction, I should need to opt in and connect the current site with Faceboo…

Exactly. Why aren't all websites run in containers by default (personally I'm envisioning per-domain containers)? What benefit do we get from full-coverage containerization not being the default?

Re: Facebook Container for Firefox

#227
post #222

Earlier quoted context omitted.

The notice is only for cookies used for non-essential tasks (like analytics) and doesn't have to be shown for things like login sessions. Your browser can't distinguish between those.

The cookie notice policy led to the worst imaginable actual outcome: A state in which you either accept cookies (incl. third party) by default or you will be haunted by numbing "reminders" that cookies exist. Usually taking large parts of your small screen estate. Prior to that you could just disable them if you liked. One can say that policy makers had good intentions - certainly. However, I can not imagine a valid…

I don't disagree that the policy was a failure, I just disagree with your specific point made in the previous post.

Re: Facebook Container for Firefox

#228
post #130

Earlier quoted context omitted.

When you mentioned reddit I thought you were talking about their "install the app" pop up. They have by far the worst mobile experience out of any site I've use more than once in the last 2 years.

Twitter mobile. Scroll down for a screen, full page "Log in/Sign up" popup. Every single page.

Tragically, this is most probably by design, to encourage sign-ups. Whoever implemented that should not feel any better than a telemarketer or a spammer.

Re: Facebook Container for Firefox

#229
post #46

Earlier quoted context omitted.

Fortunately it takes one tap to update your preference to have it stop nagging you to install the app. https://www.reddit.com/r/redditmobile/comments/6hk9ot/androi...

It should not be opt-out though

How would you ever know it exists then. No, they should give you the option to be reminded again, or be done with it. But since we are talking about deleting all cookies, where do you think this information would be added?

Re: Facebook Container for Firefox

#230
post #225

Third party cookies, and any way to fingerprint a specific user starting from high entropy user agents to screen resolution, font fingerprinting or canvas data, should be considered a breach of the browser security model. All sites should run in containers and no advertiser should be able to track you across sessions. When I want 3rd party interaction, I should need to opt in and connect the current site with Faceboo…

Exactly. Why aren't all websites run in containers by default (personally I'm envisioning per-domain containers)? What benefit do we get from full-coverage containerization not being the default?

In short: site breakage.

We're so deep in this that a first party isolation would break almost every single website. In a cooperation with Tor, Mozilla actually ported the first-party isolation feature in mainstream Firefox (available in Nightly, don't know about stable), but since it would break almost every single website, there are no plans to turn it on by default. You can, of course, enable it yourself by turning on "privacy.firstparty.isolate" in about:config.

Disclaimer: I'm a Mozilla Foundation affiliate that has nothing to do with Mozilla Corporation nor Firefox.

Post reply on HN