Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Google Chrome to remove detailed cookie and site data controls

lapcatsoftware.com

Post reply on HN
Print view View original

121–130 of 372 posts

Re: Google Chrome to remove detailed cookie and site data controls

#121

Post by crazygringo »

foota wrote: post #82

I don't get why people think this is a move with some agenda, most likely they just don't think enough people use the single cookie deletion functionality to warrant having it in the settings vs the dev tools.

Exactly this. All the functionality is already built into Chrome right here:

https://developer.chrome.com/docs/devtools/storage/cookies/

Contrary to the headline, Chrome isn't removing the ability to do anything -- they're just removing it from the preferences interface, where I'm not sure it really ever made sense to include in the first place.

Truly, editing/deleting individual cookies isn't something any regular user ever needs to do -- just clearing per-site, which continues to exist in preferences.

Re: Google Chrome to remove detailed cookie and site data controls

#122

Post by forgotmypw17 »

chrononaut wrote: post #78
forgotmypw17 wrote: post #63

As of today, my main workstation is an "early 2008" iMac, at El Capitan and Chrome maxed out at 83.x... In addition to Chrome, I'm using six other browsers which work well with HN, my own sites, fb, gmail, ... I think in today's Web we've achieved an incredible level of compatibility, interoperability, and accessibility. Are there many sites which don't work across 25 years or 15 years or even 5 years worth of client…

Are you not worried about security vulnerabilities?

From where?

Re: Google Chrome to remove detailed cookie and site data controls

#124

Post by Sunspark »

chrononaut wrote: post #78
forgotmypw17 wrote: post #63

As of today, my main workstation is an "early 2008" iMac, at El Capitan and Chrome maxed out at 83.x... In addition to Chrome, I'm using six other browsers which work well with HN, my own sites, fb, gmail, ... I think in today's Web we've achieved an incredible level of compatibility, interoperability, and accessibility. Are there many sites which don't work across 25 years or 15 years or even 5 years worth of client…

Are you not worried about security vulnerabilities?

Speaking for myself here, no. It's not actually that easy to just "own" people randomly through their browser or network connection. First you have to be malicious, then you have to get them to engage with you directly, then you have to be skilled enough to have code ready to go for their specific circumstances.

Most of the sites I visit are normal ones like HN. The ones that are not, there's only so much malware an advertising network can stuff in when ublock is present.

Re: Google Chrome to remove detailed cookie and site data controls

#125

Post by krono »

vimy wrote: post #48
booi wrote: post #37

Earlier quoted context omitted.

It’s more and more obvious we need competition in the browser space. Firefox as an excellent and performant alternative. Personally I use Chrome for work and Firefox for personal stuff.

Why not use Edge if you need to use a chromium based browser?

It's like Chrome, but better in pretty much every way. Never thought I'd say this but Edge is actually pretty good!

Very frequent and large feature updates, deepening ecosystem integration that uncharacteristically doesn't get the way if you don't use it.

I always get a bit anxious when one of these massive enterprises suddenly gets up and starts moving with newfound focus, and MS is pretty much sprinting on Adderall at this point.

Re: Google Chrome to remove detailed cookie and site data controls

#127

Post by dylan604 »

wyager wrote: post #86
codezero wrote: post #73

Earlier quoted context omitted.

Not trying to defend anyone here, but I wonder if there's a non-nefarious reason for this. Specifically, there have been a lot of changes to cookies lately because malicious actors (malware/adware) figured out how to access the cookie store and infer/determine cookie information from other sites. I suspect that maybe this cookie store is kept in a more secure part of the application and only the cookies relevant to t…

If the browser is designed properly (this does not apply to Safari), the UI can and should have totally different permissions from the site executor/renderer.

>If the browser is designed properly (this does not apply to Safari),

Slow clap. Well done.

Re: Google Chrome to remove detailed cookie and site data controls

#128

Post by qutreM »

foota wrote: post #82

I don't get why people think this is a move with some agenda, most likely they just don't think enough people use the single cookie deletion functionality to warrant having it in the settings vs the dev tools.

Chrome in 10 years will be like a TV... all you will be able to do is switch between a few hundred channels

Re: Google Chrome to remove detailed cookie and site data controls

#129

Post by sroussey »

duskwuff wrote: post #98
BoorishBears wrote: post #71

Earlier quoted context omitted.

Not that I think this has actually been applied by anyone in the wild, but it'd be fun to make a site that take advantage of this You can detect developer tools being open in Chrome pretty reliably, so detect dev tools have been open then "clean up your act" before there's a chance to view anything of note

This has absolutely been used "in the wild". One particularly nasty strain of ad-block-evasion scripts would detect the developer tools being opened, and would reload the page and disable most of its features to prevent them from being analyzed.

Way back when, we thought about this for Firebug. One thing that came out of it was browsers started adding the console object (also because devs forgot to remove the calls on it).

Even so, we added CSS and stuff to highlight elements and that was easily found.

What do people look for today?

Re: Google Chrome to remove detailed cookie and site data controls

#130

Post by tyingq »

foota wrote: post #82

I don't get why people think this is a move with some agenda, most likely they just don't think enough people use the single cookie deletion functionality to warrant having it in the settings vs the dev tools.

Maybe it's changed, but walking a customer through clearing some specific cookies was a common help desk thing. To deal with shitty websites...PayPal had this problem for a long time where you would get an obscure error until you manually cleared a cookie.

This will be harder, especially where you need to clear cookies on different domains like a login page, saml page, account page, etc.

Post reply on HN