221–230 of 278 posts
It is funny how my browser preferences has changed over last 5 years. 2014 me as a developer had Chrome as number 1 browser for both development and all rest. Firefox once a month just to check cross browser compatibility. And Safari was just installed without me using it. 2019 me uses Safari for everything except development. Excellent power consumption and UX. Firefox for development. And lastly Chrome for all web…
Earlier quoted context omitted.
> the API access sends the reddit cookie to reddit while not being on reddit. A few things, (1) Why does it matter in this case? Under what scenario can you imagine reddit abusing the knowledge that certain users are reading metadata about reddit accounts off-site? (2) It seems to me Firefox could selectively choose not to send cookies and the referrer header in this case, rather than rendering entire sites broken. I…
I would argue that 99% of sites sending cookies and personal information to social media do so for tracking purposes. You may be the exception. But its a privacy tradeoff that benefits the majority. And let me say: if webmasters had shown any respect for privacy in the first place, maybe this would not have occured.
You could click on the reports on this page [1] to find out which sites are broken. Maybe I'll do it when I have a chance.
Any site that uses an API published by one in the disconnect.me list is rendered unusable. That list is 3,000 domains long, so even if there were only an average of 1 legit non-tracking site accessing each domain, that's still 3,000 broken websites.
> You may be the exception. But its a privacy tradeoff that benefits the majority.
I don't know that a tradeoff is necessary. It seems to me it would be possible to not send cookies for the 3,000 domains in the disconnect.me list when tracking protection is enabled.
It is funny how my browser preferences has changed over last 5 years. 2014 me as a developer had Chrome as number 1 browser for both development and all rest. Firefox once a month just to check cross browser compatibility. And Safari was just installed without me using it. 2019 me uses Safari for everything except development. Excellent power consumption and UX. Firefox for development. And lastly Chrome for all web…
What do you recommend for adblocking on Safari?
https://safari-extensions.apple.com/details/?id=com.el1t.uBl...
Earlier quoted context omitted.
It seems like that would be today? I'm pretty sure they both work off the same Disconnect maintained list.
Privacy Badger uses heuristics to determine when a domain might be tracking you. https://www.eff.org/privacybadger/faq#How-does-Privacy-Badge...
This sounds more like Safari's newer behaviour, which sounds good in theory but in Safari's case where it can't be turned off, it breaks things in practice. This seems like a good solution for people that are aware of what's happening enough to pay attention and disable it when something is not working as expected, but makes a bad default for the typical user.
I'm an existing Firefox user. Is there a short list of settings to check to make sure this "Enhanced Tracking Protection" is enabled? In short, I'm looking for a list of instructions: go to Options > Privacy and Security > Content Blocking > make sure cookies is set to at least "All third party cookies...".
I think you’re just about right - it’s Options > Privacy > Content > Custom > “Block third-party trackers”. (It is not “Block all third-party cookies”, make sure to select the correct one.)
I'm not sure why the "Multi Account Containers" are not built into the browser but I found this add-on to be a motivating factor in switching to FF. https://addons.mozilla.org/en-US/firefox/addon/multi-account...
Chrome makes it easy to switch profiles/accounts with the account button in the top right, but Firefox profile management is clunky. You have to choose on startup and can’t launch a window with a different profile from the browser itself.
Next time I tried, I found Multi-containers! It’s EXACTLY what I was trying to do with Chrome Profiles (isolate cookies per persona) and it improves on Chrome in a couple ways:
- lighter than Chrome profiles, very fast to create new containers
- Not tied to a google account
- multiple containers in the same window
- Domain-specific rules make sure you don’t cross-contaminate containers accidentally
- Profile stuff like History and bookmarks is shared across containers and securely synced with client side encryption by default.
You can also get a REAL win for privacy by adding the Temporary Containers extension [0]. This lets you create arbitrarily many containers. It defaults to being an option (right click -> open in temp container) but can be set much more aggressively. I have it create a new temporary container every time I move to a new domain. Amazing.
That DOES require some manual configuration to avoid breaking complex products like Office365. I created a huge regex that identifies Office365 domains and triggers a whitelist with less aggressive isolation. Still, not too much more work than running uBlock Origin with 3rd party resources disabled by default.
[0] https://addons.mozilla.org/en-US/firefox/addon/temporary-con...
Earlier quoted context omitted.
Are there Chrome-only webapps you use that don't just work with a User-Agent switcher?
Not quite the same thing and I know it’s not fully rolled out yet, but I enable u2f support in Firefox and haven’t had any issues with my Yubikey... except when I try to add a new Yubikey To my gmail account in Firefox it makes me switch to Chrome because “u2f isn’t supported”. At least let me try and if it fails I’ll file an issue with FF so they can fix it and improve instead of locking me out with half-truths.
It sounds like this is similar to what Apple added to Safari two years ago ( https://techcrunch.com/2017/06/05/apple-adds-a-tracker-block... ), though I don't know the details. I will be excited for the day when Privacy Badger is an unnecessary extension.
Safari uses a machine-learning classifier algorithm to determine which third-party sites are trackers: https://webkit.org/blog/7675/intelligent-tracking-prevention... Disconnect may or may not use M-L classifiers in their selection process, I don’t know.
Starting to look forward to July when the next ESR will be out. Really tempted to just go ahead and upgrade to FF67 now but have grown fond of the stability of the ESR releases.