Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Facebook Container for Firefox

mozilla.org

Post reply on HN
Print view View original

311–320 of 406 posts

Re: Facebook Container for Firefox

#311

Post by [deleted] »

mih wrote: post #231
cornholio wrote: post #200

Third party cookies, and any way to fingerprint a specific user starting from high entropy user agents to screen resolution, font fingerprinting or canvas data, should be considered a breach of the browser security model. All sites should run in containers and no advertiser should be able to track you across sessions. When I want 3rd party interaction, I should need to opt in and connect the current site with Faceboo…

Ever encountered Google ReCaptcha when you've turned off third party cookies or while in incognito/private mode? It's a nightmare, even if you're logged into a Google account. You can be shown upto 7-8 challenges, painfully slow loading images and Google's insistence that they encountered malicious traffic from your IP when attempting to use the audio version. What's even worse is they track your mouse movements and…

[deleted]

Re: Facebook Container for Firefox

#312

Post by LowDog »

isostatic wrote: post #216
dasanman wrote: post #214

Its funny with all the focus on Facebook, while Google tracking is so much more widespread

Google didn't elect Trump

Yeah, the American people elected Trump in an extremely rare case of the public taking back the election from corporate behemoths.

But let's pretend that Google hasn't had enormous sway over the White House and hasn't been rubbing shoulders with Obama and other Democrats [1][2][3][4]. Let's also ignore the fact that much of Silicon Valley publicly supported Hillary and opposed Trump, with big outspoken critics including Microsoft, Faceboook, and Apple.

It's a shame to see indoctrination stretching to users of this site such that people here legitimately believe that a bunch of Russians locked away in some computer lab single-handedly elected the only man who challenged the prospect of perpetually living under the oligarchical thumb of the Bushes and the Clintons.

[1] https://theintercept.com/2016/04/22/googles-remarkably-close...

[2] https://www.washingtonpost.com/politics/how-google-is-transf...

[3] https://www.theguardian.com/us-news/2015/dec/18/google-polit...

[4] http://dailycaller.com/2017/08/09/google-higher-ups-love-don...

Re: Facebook Container for Firefox

#313

Post by [deleted] »

pcl wrote: post #304
iamnothere wrote: post #294

Earlier quoted context omitted.

This is what finally made me switch my default search engine away from Google. I will put up with a lot of crap, but I'm not going to spend 60s to solve a CAPTCHA every time I do a search.

Bear in mind that Google might be correctly identifying your IP address as a botnet source. If you start seeing lots of CAPTCHAs, it's worth it to take a look around your network for open ports or weak ssh passwords etc., or just look at a traffic monitor to see if there's a lot of egress from your net.

[deleted]

Re: Facebook Container for Firefox

#314

Post by gorhill »

andypants wrote: post #273
mih wrote: post #231

Earlier quoted context omitted.

Ever encountered Google ReCaptcha when you've turned off third party cookies or while in incognito/private mode? It's a nightmare, even if you're logged into a Google account. You can be shown upto 7-8 challenges, painfully slow loading images and Google's insistence that they encountered malicious traffic from your IP when attempting to use the audio version. What's even worse is they track your mouse movements and…

I can't even get recaptcha to work when I have the umatrix extension turned on, even when I turn off the functionality of umatrix by whitelisting everything. I need to go into my browser extensions and turn off the whole extension just to get past a recaptcha.

Using the logger is key to solve that sort of issues. As stated in the documentation, the per-scope switches keep having an effect even if you disable matrix filtering. The logger will show you what is still modified by uMatrix if there is anything.

Re: Facebook Container for Firefox

#316

Post by dao- »

dingo_bat wrote: post #141
dao- wrote: post #129

Earlier quoted context omitted.

Mozilla and Google have a business contract with a well-defined scope. Google has a similar contract with Apple. Google isn't Mozilla's parent company just as it isn't Apple's.

Apple makes 97% of its revenue from Google? Because Mozilla does. Your comparison is not valid. Source: https://www.mozilla.org/en-US/foundation/annualreport/2016/

What I said is perfectly valid. Parent company is a well-defined term that doesn't apply here.

Now, may Google try to put pressure on Mozilla? Sure. Would Mozilla obey? Possibly...? None of this means that this has actually happened or will happen. Stop spreading conspiracy theories.

Re: Facebook Container for Firefox

#317

Post by johnchristopher »

omk wrote: post #241
indiv0 wrote: post #225

Earlier quoted context omitted.

Exactly. Why aren't all websites run in containers by default (personally I'm envisioning per-domain containers)? What benefit do we get from full-coverage containerization not being the default?

While micro-sites and CDNs could still be brought under the same SLD. The biggest blocker as is OAuth. I'd want to make a UX call to see if browser could elegantly prompt the user for a 3rd party interaction. While we are at it, I keep wondering (in a strictly SSL world) if it would be a good idea to restrict CORS calls only to sites using the same certificate as the webpage. Would make life easier for folks like fac…

Wouldn't Facebook just start promoting their super Facebook compliant certificate to their partners then ?

Re: Facebook Container for Firefox

#318

Post by baq »

andrewaylett wrote: post #258
newscracker wrote: post #170

If you use Firefox Containers, including the Facebook Container, please also use Cookie AutoDelete [1] to get rid of cookies from closed tabs across containers. Otherwise, in my observation, sites will still be able to track you if you reuse a container (even after closing all tabs of that container) for a specific site. [1]: https://addons.mozilla.org/en-US/firefox/addon/cookie-autode...

It sounds like you're after Temporary Containers: https://github.com/stoically/temporary-containers That gets you a clean container every time you click the button. Very useful for development testing, too :).

what's the use case difference between that and porn mode browsing? i can't really tell when i should use one and the other.

Re: Facebook Container for Firefox

#319

Post by johnchristopher »

andrewaylett wrote: post #258
newscracker wrote: post #170

If you use Firefox Containers, including the Facebook Container, please also use Cookie AutoDelete [1] to get rid of cookies from closed tabs across containers. Otherwise, in my observation, sites will still be able to track you if you reuse a container (even after closing all tabs of that container) for a specific site. [1]: https://addons.mozilla.org/en-US/firefox/addon/cookie-autode...

It sounds like you're after Temporary Containers: https://github.com/stoically/temporary-containers That gets you a clean container every time you click the button. Very useful for development testing, too :).

Does it also clean Firefox built-in DNS cache ?

Re: Facebook Container for Firefox

#320

Post by unethical_ban »

r3bl wrote: post #230
indiv0 wrote: post #225

Earlier quoted context omitted.

Exactly. Why aren't all websites run in containers by default (personally I'm envisioning per-domain containers)? What benefit do we get from full-coverage containerization not being the default?

In short: site breakage. We're so deep in this that a first party isolation would break almost every single website. In a cooperation with Tor, Mozilla actually ported the first-party isolation feature in mainstream Firefox (available in Nightly, don't know about stable), but since it would break almost every single website, there are no plans to turn it on by default. You can, of course, enable it yourself by turnin…

I tried it out and yes, it breaks AuthN with third party sites, but besides that I had a mostly good time with it. I did turn it off.

Is there any plan to create an exceptions mechanism? "Allow Facebook access to your activities on this webpage?" or something like that?

Post reply on HN