Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Facebook Container for Firefox

mozilla.org

Post reply on HN
Print view View original

281–290 of 406 posts

Re: Facebook Container for Firefox

#281

Post by worble »

r3bl wrote: post #230
indiv0 wrote: post #225

Earlier quoted context omitted.

Exactly. Why aren't all websites run in containers by default (personally I'm envisioning per-domain containers)? What benefit do we get from full-coverage containerization not being the default?

In short: site breakage. We're so deep in this that a first party isolation would break almost every single website. In a cooperation with Tor, Mozilla actually ported the first-party isolation feature in mainstream Firefox (available in Nightly, don't know about stable), but since it would break almost every single website, there are no plans to turn it on by default. You can, of course, enable it yourself by turnin…

Unless I'm misunderstanding how the 'cookie' tab on uMatrix works, I'm blocking all third party cookies and have yet to have a site break on me.

Re: Facebook Container for Firefox

#282

Post by sourcesmith »

Aissen wrote: post #206
Manishearth wrote: post #98

Earlier quoted context omitted.

Google logins still work, this is a different kind of container from the Firefox container tabs. I use this feature with container tabs and it's fine. There are so far one or two sites I've come across that this breaks, neither of them anything I care about.

It doesn't work all the time. I tried it with Google login on Atlassian, it seems to rely on third-party cookies, and fails. There are a few bugs open on websites that don't work with this feature: https://wiki.mozilla.org/Security/FirstPartyIsolation#First_...

Atlassian actually rely on referrer headers as well! Extensions such as smart referrer break their single SSO system.

Re: Facebook Container for Firefox

#283

Post by eeZah7Ux »

janvidar wrote: post #263
eeZah7Ux wrote: post #249

Earlier quoted context omitted.

Spot on. And most of website should not even need javascript but some simple extension to xhtml to allow interactive websites in a declarative fashion rather than having a Turing-complete language.

CSS is Turing-complete. https://news.ycombinator.com/item?id=2300836 (2011) https://news.ycombinator.com/item?id=10734966 (2015)

So?

Re: Facebook Container for Firefox

#284

Post by chicob »

yoavm wrote: post #253
chicob wrote: post #217

Firefox Containers don't seem to work in Private Mode. Also Privacy Badger, btw.

How would you use Firefox Containers in Private Mode? Private Mode is essentially a container that destroys itself when you close it.

Well, I didn't know that Private Mode worked as a container.

I thought it merely didn't store browsing history and cookies between sessions by default, while allowing tabs to share data between them for each session.

Re: Facebook Container for Firefox

#285

Post by seqizz »

amelius wrote: post #257
mih wrote: post #231

Earlier quoted context omitted.

Ever encountered Google ReCaptcha when you've turned off third party cookies or while in incognito/private mode? It's a nightmare, even if you're logged into a Google account. You can be shown upto 7-8 challenges, painfully slow loading images and Google's insistence that they encountered malicious traffic from your IP when attempting to use the audio version. What's even worse is they track your mouse movements and…

Perhaps Firefox could fake thirdparty cookies instead of disallowing them.

Then you'd probably never pass captcha.

Re: Facebook Container for Firefox

#286

Post by mih »

andypants wrote: post #273
mih wrote: post #231

Earlier quoted context omitted.

Ever encountered Google ReCaptcha when you've turned off third party cookies or while in incognito/private mode? It's a nightmare, even if you're logged into a Google account. You can be shown upto 7-8 challenges, painfully slow loading images and Google's insistence that they encountered malicious traffic from your IP when attempting to use the audio version. What's even worse is they track your mouse movements and…

I can't even get recaptcha to work when I have the umatrix extension turned on, even when I turn off the functionality of umatrix by whitelisting everything. I need to go into my browser extensions and turn off the whole extension just to get past a recaptcha.

With umatrix, try unchecking the 'Spoof HTTP header' option. I was able to get it working this way. There's no need to disable the extension itself.

Re: Facebook Container for Firefox

#287

Post by sourcesmith »

ReverseCold wrote: post #97
jakecopp wrote: post #94

In my opinion Containers are the best thing in Firefox. I'm sacrificing battery life just so I can use them on my Mac. I finally feel free to search for whatever I want and not have second thoughts.

> I finally feel free to search for whatever I want and not have second thoughts. Doesn't Google also link sessions through IP Address? That combined with "how you usually browse" + interests is a very powerful deanonymization tool.

If they do, then you can turn it off through My Account -> Google Search personalization -> Signed out search activity.

Re: Facebook Container for Firefox

#288

Post by sound1 »

bmurphy1976 wrote: post #118
jdironman wrote: post #76

Earlier quoted context omitted.

How about just whitelist the good guys?

That's what I do on Android, except I use Brave instead of Chrome/Firefox. I change the default settings to block all JavaScript by default, and then use the Brave button to whitelist sites I trust and actually want to use. Browsing the web (especially news sites) on my Android has gone from "a complete nightmare" to "tolerable" because of this.

You should try Naked Browser (or NB Pro , their paid app with some extra features). I have been using it for close to 6 years and it is awesome :-) In my opinion it has one of the simplest and nicest UI with features like script blocking. [Disclaimer: I am not associated with the developer in any way]. Ad blocking is sorely missing though.

Re: Facebook Container for Firefox

#289

Post by Tepix »

yAnonymous wrote: post #272
Tepix wrote: post #220

Earlier quoted context omitted.

Indeed. Safari blocks 3rd party cookies by default, I see no reason why Firefox can't do the same. The fact that they don't is a direct contradiction to their claims that they care about user privacy. The only explanation I have is that they do not want to anger their long-time money sources Google and other advertisers.

I agree, but blocking third-party cookies does break a whole lot of sites. Apple can do this, because they have a limited yet consistent market share that mostly consists of their own customers. But Firefox? If they block third-party cookies and Chrome does not, they might just end up losing even more users.

Sure you can argue that way. But it's not as big of a problem as you think it is. The fact that Apple does it is enough proof for that.

Websites can be changed to work without third party cookies. I'm blocking cookies since years and I have come across less than 10 sites that require it. When that happens, most of the time I just go elsewhere or I'll send them an email.

Re: Facebook Container for Firefox

#290

Post by z29LiTp5qUC30n »

mih wrote: post #231
cornholio wrote: post #200

Third party cookies, and any way to fingerprint a specific user starting from high entropy user agents to screen resolution, font fingerprinting or canvas data, should be considered a breach of the browser security model. All sites should run in containers and no advertiser should be able to track you across sessions. When I want 3rd party interaction, I should need to opt in and connect the current site with Faceboo…

Ever encountered Google ReCaptcha when you've turned off third party cookies or while in incognito/private mode? It's a nightmare, even if you're logged into a Google account. You can be shown upto 7-8 challenges, painfully slow loading images and Google's insistence that they encountered malicious traffic from your IP when attempting to use the audio version. What's even worse is they track your mouse movements and…

ReCaptcha means to me that I need to blacklist your site and never come back. F@ck that noise
Post reply on HN