Live data from Hacker News

Facebook Container for Firefox

mozilla.org

251–260 of 406 posts

Re: Facebook Container for Firefox

#251
post #31

We're going from cold war to all-in. Not just a privacy question. Reddit nags me every time I hit the front page, even returning from a story, asking me to log in. For most sites I need to create ublock filters to prevent pop-ups with useless "we use cookies", subscription requests, ads or social media bars that fills half the screen, etc. etc. etc. Every newspaper I read has decided that autostarting video and strea…

I sometimes use reddit with Firefox for Android (beta, equipped with noscript and ublock origin) and it's really not too bad like that.

But overall I get a much better experience using the free, open, 3rd party app Slide ( https://www.reddit.com/r/slideforreddit/ ) so, maybe give that a try? (Assuming you're on Android - ios, I've no idea.)

Re: Facebook Container for Firefox

#252

Third party cookies, and any way to fingerprint a specific user starting from high entropy user agents to screen resolution, font fingerprinting or canvas data, should be considered a breach of the browser security model. All sites should run in containers and no advertiser should be able to track you across sessions. When I want 3rd party interaction, I should need to opt in and connect the current site with Faceboo…

Anybody aware of any browsers making this a trivial workflow? Any comprehensive list of recommended plugins? Anything targeting mobile platforms?

Re: Facebook Container for Firefox

#254
post #31

We're going from cold war to all-in. Not just a privacy question. Reddit nags me every time I hit the front page, even returning from a story, asking me to log in. For most sites I need to create ublock filters to prevent pop-ups with useless "we use cookies", subscription requests, ads or social media bars that fills half the screen, etc. etc. etc. Every newspaper I read has decided that autostarting video and strea…

no don't give up. just be in the vocal minority that gives a shit and expects better.

Re: Facebook Container for Firefox

#256

Third party cookies, and any way to fingerprint a specific user starting from high entropy user agents to screen resolution, font fingerprinting or canvas data, should be considered a breach of the browser security model. All sites should run in containers and no advertiser should be able to track you across sessions. When I want 3rd party interaction, I should need to opt in and connect the current site with Faceboo…

Anybody aware of any browsers making this a trivial workflow? Any comprehensive list of recommended plugins? Anything targeting mobile platforms?

Firefox's first-party isolation (brought across from Tor Browser) will foil cross-site tracking. Combined with Privacy Badger and Cookie Autodelete, your browser won't make the requests and even if they did, they wouldn't have any cookies attached.

https://github.com/mozfreddyb/webext-firstpartyisolation https://www.eff.org/privacybadger https://github.com/Cookie-AutoDelete/Cookie-AutoDelete

Re: Facebook Container for Firefox

#257
post #231

Third party cookies, and any way to fingerprint a specific user starting from high entropy user agents to screen resolution, font fingerprinting or canvas data, should be considered a breach of the browser security model. All sites should run in containers and no advertiser should be able to track you across sessions. When I want 3rd party interaction, I should need to opt in and connect the current site with Faceboo…

Ever encountered Google ReCaptcha when you've turned off third party cookies or while in incognito/private mode? It's a nightmare, even if you're logged into a Google account. You can be shown upto 7-8 challenges, painfully slow loading images and Google's insistence that they encountered malicious traffic from your IP when attempting to use the audio version. What's even worse is they track your mouse movements and…

Perhaps Firefox could fake thirdparty cookies instead of disallowing them.

Re: Facebook Container for Firefox

#258

If you use Firefox Containers, including the Facebook Container, please also use Cookie AutoDelete [1] to get rid of cookies from closed tabs across containers. Otherwise, in my observation, sites will still be able to track you if you reuse a container (even after closing all tabs of that container) for a specific site. [1]: https://addons.mozilla.org/en-US/firefox/addon/cookie-autode...

It sounds like you're after Temporary Containers: https://github.com/stoically/temporary-containers

That gets you a clean container every time you click the button. Very useful for development testing, too :).

Re: Facebook Container for Firefox

#259
post #225

Earlier quoted context omitted.

Exactly. Why aren't all websites run in containers by default (personally I'm envisioning per-domain containers)? What benefit do we get from full-coverage containerization not being the default?

Some sites rely on multiple domains to work. E.g. open auth, cdns are usually a separate domain, a lot of big corporates create new domains for “microsites” when they want to do something new but are tied down by slow moving corporate practices (although the world would be a better place without microsites). Basically, you couldn’t do it without breaking a large part of the internet.

They could build a whitelist and distribute it with Firefox (?)

Re: Facebook Container for Firefox

#260
post #202

Earlier quoted context omitted.

Giving up on Reddit is just the same response to stimulus, but the web is vast and varied. You’re giving up on a lot of good to spite a lot of bad, but you’re just going to hurt yourself. Use uNlock and uMatrix and after a few days of regular surfing and a little tweaking you won’t even realize that shite is still there.

Giving it up for work is not possible. But for entertainment it's different the gp not only mentions Reddit, but other news sites and specifically the ones linked from HN. It's a general trend that almost everybody does, probably because "everybody is doing it". There are good alternatives like reading books, watching movies or going out. Web sites are shooting themselves in their feet. Blockers end up being too much…

I regularly browse HN and click through to articles. I run firefox / noscript on both mobile and desktop. I occasionally have to enable or temp-enable some stuff in noscript to be able to read articles, but it's a small minority of cases, and probably smaller if I wasn't so prone to temp-enabling rather than enabling.

For sessions where I know I want js to "just work", like online shopping from a set of presumed-trustworthy sites, I use a different browser profile without privacy extensions, but I use it just for those purposes and avoid general browsing with it.

To make multi-profile browsing simple, I theme the profiles differently, so it's obvious which one I'm in. On desktop, my launcher for firefox does --ProfileManager --new-instance and on mobile I just use different firefoxes - ff-beta and ff itself.

Is this "too much work?" - I can see how it might look like that, but I've been using this system for a few years, and though it takes a few minutes to set up on a new system or device the maintenance overhead is low, so I'd say it's not "too much." Also, the time gained not waiting for js-encrusted sites to load probably outweighs the setup/maintenance by a considerable factor.

Post reply on HN