This reminds me so much of the ACID tests[1] from the late 90's, early 2000s. I wonder if it will have a similar effect, i.e. to drive people away from Chrome in the same way it eventually drove people away from IE. [1] https://en.wikipedia.org/wiki/Acid1
Open-source tests of web browser privacy
11–20 of 34 posts
Re: Open-source tests of web browser privacy
#12This is under the assumption that each browser is being used with the default settings, firefox can do much better with customizable settings.
That is the only valid assumption. The absolute vast majority of users will use any and all software under default settings.
Re: Open-source tests of web browser privacy
#13Firefox with these settings from Librewolf looks very much equivalent: https://gitlab.com/librewolf-community/settings/-/blob/maste...
Re: Open-source tests of web browser privacy
#14Firefox with these settings from Librewolf looks very much equivalent: https://gitlab.com/librewolf-community/settings/-/blob/maste...
[1] https://github.com/arkenfox/user.js
Re: Open-source tests of web browser privacy
#15For instance I clicked on the Blob line and the code looks to fetch and URL with a Blob encoded and fetches it again? There is so little context to say what is really wrong... or if there is anything really wrong.
I looked up Blobs myself and read through the specs on MDN and I just dont see a problem.
Re: Open-source tests of web browser privacy
#16To me, it seemed that if a browser had passed every test, the user might not be able to use many web sites. Perhaps the current status is a conscious decision by developers to keep users from hating their browser. Security vs usability.
Re: Open-source tests of web browser privacy
#17These really need context or better explanations. For instance I clicked on the Blob line and the code looks to fetch and URL with a Blob encoded and fetches it again? There is so little context to say what is really wrong... or if there is anything really wrong. I looked up Blobs myself and read through the specs on MDN and I just dont see a problem.
In the Blob case: the test code is storing a unique string in a Blob URL under one website (first party), and then attempting to read back that string under a second, different website. (See "result, different first party".) If the string is accessible under a different first party, then it is possible to use a Blob URL to track a user between two different websites.
Re: Open-source tests of web browser privacy
#18More useful would be showing what can be enabled (if it's not on by default), how useful it actually is (not every checkmark is created equally heh), and what can be added (especially on the tracking side) by simply installing μblock origin (which everyone would/should do in every browser anyway).
Re: Open-source tests of web browser privacy
#19Re: Open-source tests of web browser privacy
#20Firefox with these settings from Librewolf looks very much equivalent: https://gitlab.com/librewolf-community/settings/-/blob/maste...
Where would I put this file on my Firefox install ?
(On my machine it's under "C:\Program Files\Mozilla Firefox\distribution".)