Live data from Hacker News

Latest Firefox rolls out Enhanced Tracking Protection 2.0

blog.mozilla.org

251–260 of 480 posts

Re: Latest Firefox rolls out Enhanced Tracking Protection 2.0

#251
post #216
post #130

My friend who works in an adtech company: "Protip: Use Firefox instead of Chrome. We get very little data from Firefox users"

Latest Firefox still doesn't protect against browser fingerprinting. This from the EFF Panopticlick: Your browser fingerprint appears to be unique among the 303,579 tested in the past 45 days. Currently, we estimate that your browser has a fingerprint that conveys at least 18.21 bits of identifying information.

Two things:

1. Blocking redirect tracking is about more than just fingerprinting users. I'm a huge fan of Panopticlick's work here, but it's not a be-all end-all measure of whether a browser is getting more or less private. There are a lot of different, complicated things we're talking about when we bring up browser privacy.

2. Disable Javascript with something like uMatrix by default, and that number will drop dramatically. By default with JS disabled, I think my Firefox leaks about 8 bits of information, which Panopticlick lists as sufficient protection.

Major caveat in that non-JS users are likely disproportionately represented at Panopticlick, and people shouldn't use Panopticlick as more than an indicator of what's possible. In the real world, disabling Javascript will leak more bits since fewer other users will be doing it.

However, it's still likely worth doing if you can tolerate the inconvenience. And of course, the more people that block JS by default, the better protection it provides.

Re: Latest Firefox rolls out Enhanced Tracking Protection 2.0

#252

Earlier quoted context omitted.

Firefox > Preferences > Home > New Windows and Tabs (very first option!) > Homepage and New Windows, New Tabs > Blank Page I like that Firefox Home is the default option because you as the user are offered something. If you don't like it, you say no, go to the settings page, and are never offered it again. If you do like it or don't mind it, you keep it. Win-win. If Firefox Home wasn't on by default, those that might…

The default option should be "show options", letting you choose with one click between Blank, Mozilla Ads, Your Recent/Favorite Pages, and a custom URL or set of URLs. There are 6 levels to your process above. Imagine being tech-illiterate and asked to navigate that - or, maybe easier, imagine trying to dictate that process to someone you know who is tech-illiterate over the phone. Even if you know exactly what to do…

> The default option should be "show options"

I fully understand why you think that should be the case, but please understand that most people are not like you. Putting barriers between first start of an app before the user can actually do something with the app is the way to annoy your users.

Sane defaults are nearly always the right choice. You personally may not believe their default is sane, but you're in the minority, clearly.

(It's telling that you call it "Mozilla Ads"; such hyperbole only serves to weaken your point.)

Re: Latest Firefox rolls out Enhanced Tracking Protection 2.0

#253

Earlier quoted context omitted.

I'm running the same version of Firefox on FreeBSD (firefox-79.0,1) and I don't see this (with http2=true). I'm running 13-current (r363668) and using the 12-stable quarterly packages (FreeBSD:12:amd64/quarterly)

I'm running 12.1-RELEASE-p5 [quarterly], so that's interesting. We should be overlapping somewhat. I inclined to believe that it's just my luck. You need somebody to find edge-case bugs? I'm your stooge.

I hear that. The latest update to kde / plasma5 changed something enough that it took me 4 logins before I got a task manager. Dealing with these these super disruptive / breaking kde changes only a few times a year are why I run the stable packages rather than the -current packages. I think I'm just going to give up and switch to lxde

Re: Latest Firefox rolls out Enhanced Tracking Protection 2.0

#254
post #175

Earlier quoted context omitted.

Anecdotal, but I've pushed close friends who are reasonably technical to install an ad blocker. Without my urging, they wouldn't have had one at all. When I come across someone who doesn't adblock, it surprises me, but it really shouldn't, as it seems most people don't have an ad blocker.

I still don't use an ad blocker. I know all the arguments for ad blocking and I agree with many of them. I know what difference it makes in terms of performance and annoyance. But I just can't bring myself to indiscriminately block all ads, knowing how important they are as a funding source for the websites I use. There's only one thing that destroys privacy even more thoroughly than ad targeting: payment.

> There's only one thing that destroys privacy even more thoroughly than ad targeting: payment.

I disagree with this. Maybe you can elaborate?

If I am paying for a service then there is no incentive to mine my personal data for revenue. It's a mutually beneficial transaction. And there are plenty of ways to hide your personal information (even your name) when paying for something (e.g. using a service like privacy.com).

Re: Latest Firefox rolls out Enhanced Tracking Protection 2.0

#255

Earlier quoted context omitted.

I still don't use an ad blocker. I know all the arguments for ad blocking and I agree with many of them. I know what difference it makes in terms of performance and annoyance. But I just can't bring myself to indiscriminately block all ads, knowing how important they are as a funding source for the websites I use. There's only one thing that destroys privacy even more thoroughly than ad targeting: payment.

Out of curiosity, do you mind sharing what sorts of websites you use that you feel this loyalty towards? News, community, educational, etc? Is it a small group of sites, or a wide variety?

Not GP, but I don't block youtube and I block most other stuff (because uBlock Origin blocks be default). Google is probably the most likely to track more info about me, but it's also obvious that the ads played factor into the money the content creators get, and I felt bad after a while of blocking their revenue stream.

It's also got me really close to paying for YouTube red, which is the other option,and o e I wouldn't consider without the annoyance of ads.

Re: Latest Firefox rolls out Enhanced Tracking Protection 2.0

#256
post #175

Earlier quoted context omitted.

Anecdotal, but I've pushed close friends who are reasonably technical to install an ad blocker. Without my urging, they wouldn't have had one at all. When I come across someone who doesn't adblock, it surprises me, but it really shouldn't, as it seems most people don't have an ad blocker.

I still don't use an ad blocker. I know all the arguments for ad blocking and I agree with many of them. I know what difference it makes in terms of performance and annoyance. But I just can't bring myself to indiscriminately block all ads, knowing how important they are as a funding source for the websites I use. There's only one thing that destroys privacy even more thoroughly than ad targeting: payment.

That's basically my position as well. I don't like ads, etc., but I don't run an ad-blocker. I did briefly have on installed, before browsers got better at preventing auto-playing audio though. That annoyed me enough to tip me over the edge. Now, it still happens here and there, but it doesn't seem to be as prevalent.

Re: Latest Firefox rolls out Enhanced Tracking Protection 2.0

#257
post #248
post #130

My friend who works in an adtech company: "Protip: Use Firefox instead of Chrome. We get very little data from Firefox users"

Protip #2, for what cant be traced using conventional methods, they will use fingerprinting and those add-ons take care about most common methods of fingerprinting - canvas, webgl, fonts and audio: https://addons.mozilla.org/en-US/firefox/addon/canvas-finger... https://addons.mozilla.org/en-US/firefox/addon/webgl-fingerp... https://addons.mozilla.org/en-US/firefox/addon/font-fingerpr... https://addons.mozilla.org/en-…

[deleted]

Re: Latest Firefox rolls out Enhanced Tracking Protection 2.0

#258
post #24

Earlier quoted context omitted.

> This is fantastic. I never liked the cookies sticking around forever, and managing them manually was a massive pain if you wanted to keep some of them. You might like the CookieAutoDelete plugin[1]. It's a recommended plugin which allows you to set a list of domains and domain patterns which retain their cookies while others are deleted. I've been using it for a couple of months now, and I love it. [1] https://addo…

Or "Temporary Containers" which is the same as Cookie Autodelete but for all cached data instead of just cookies. https://addons.mozilla.org/en-US/firefox/addon/temporary-con...

I just tried it based on your recommendation. Unfortunately it doesn't support private mode and I run Firefox in private mode.

Cookie AutoDelete works in private mode.

Re: Latest Firefox rolls out Enhanced Tracking Protection 2.0

#259

Earlier quoted context omitted.

You've got it completely backwards. Invert your questions: What cookies shouldn't be deleted, and why shouldn't they be deleted? The continued existence of a cookie requires justification, not the deletion of a cookie. Only a small minority of cookies exist for the users' benefit.

I don't personally care if some ad network made a few pennies off me, and preventing that wouldn't be worth the inconvenience to me.

Disable it then, just because you're apathetic to such matters doesn't mean the application should assume everybody is.

>inconvenience

It's seriously doubtful you or any other user will notice any negative ramifications from third party cookies being deleted, because there basically are none.

Re: Latest Firefox rolls out Enhanced Tracking Protection 2.0

#260
post #242
post #173

Earlier quoted context omitted.

Hi! We at Mozilla certainly don't see that! I'm at 815 tabs in this window alone and switching is instantaneous. Did you happen to file a bug report about this atypical behavior?

"Hi! We at Mozilla certainly don't see that! I'm at 815 tabs ..." Sorry ... hijack ... Could you please implement a special: settings://tabs ... URL that just gives a plaintext list of tab URLs currently open ? As it stands, the only way to get this list is to poke around in /Library/ files and then use JSON command line tools to export ... etc., etc. I just want a built-in page that gives me all the URLs of current…

Workaround:

1. Shift+Ctrl+D to bookmark all open tabs (in the current browser window) in a new bookmark folder.

2. Right-click on the new bookmark folder and select "Copy".

3. Then paste into your favorite text editor.

Post reply on HN