Live data from Hacker News

Self-Destructing Cookies – add-on for Firefox

addons.mozilla.org

21–30 of 59 posts

Re: Self-Destructing Cookies – add-on for Firefox

#21
post #20

If this is added to the core (and simplified as mentioned by dotmanish), it can eradicate the chrome fever for good. The same reason why people are using DDG these days(btw, I do. for all my searches other than blockers while coding).

People use Chrome because it's better than Firefox. Much better.

Re: Self-Destructing Cookies – add-on for Firefox

#22

What looks to me as a counter-feature is that if I'm logged in to GMail, and want to stay logged-in, I have to whitelist the "google.com" cookies. Wouldn't that allow all the Adwords tracking cookies as well, across sites?

I wonder if a better (if probably impractical approach for in a plugin) approach would be to scope off-site cookies to the containing page's domain. So an ad network's cookies on facebook.com wouldn't be shared with them on google.com. This would eliminate a lot of the "follow you around the internet" privacy issues without forcing manual configuration.

So... Blocking third party cookies?

I thought there was a big fuss about FF doing this by default or something.

Re: Self-Destructing Cookies – add-on for Firefox

#23
post #21
post #20

If this is added to the core (and simplified as mentioned by dotmanish), it can eradicate the chrome fever for good. The same reason why people are using DDG these days(btw, I do. for all my searches other than blockers while coding).

People use Chrome because it's better than Firefox. Much better.

[deleted]

Re: Self-Destructing Cookies – add-on for Firefox

#24
post #6

As I understand -- I'll have to sign in to every website I visit each time? (or manage white-list) Well, then it seems like a not a fit for me. But still, thanks for reminding that I can disable 3rd-party cookies -- I just did that for my firefox.

The auto-fill for passwords still works. All the sites I have visited with the exception of Pingdom came with all the info filled in. I just had to click the button to login.

With Pingdom it asked me to reenter my timezone and site to monitor. It is like it totally lost my account without the cookie.

Re: Self-Destructing Cookies – add-on for Firefox

#25
post #17

There's another nice cookie manager for Firefox called Cookie Monster: https://addons.mozilla.org/en-US/firefox/addon/cookie-monste... It allows you to maintain a white-list of sites that are allowed to set cookies and allows you to pick whether the cookies the site sets are persistent or discarded at the end of the current browser session.

...which is a built-in Firefox feature.

... a built-in Firefox feature with an epically bad UI. If you set Firefox to ask whether to accept cookies from a domain and whether to keep them beyond the end of the session, you get asked per cookie not per domain the first time you visit a site. And FF presents the questions that pop up in a stack of modal dialog boxes, potentially dozens, and sometimes they appear out of order so you have to dig around to find the one that's willing to accept a click, which can be difficult on account of them all being modal.

Re: Self-Destructing Cookies – add-on for Firefox

#26

Clever idea... makes me wonder why no one came up with this in the past?

Really, all this is doing is updating the notion of a session cookie to account for the fact that tabbed browsing usage patterns mean that the browser process is usually much longer-lived than your visit to any one site. Browsers have long had the option to make cookies expire at the end of a session.

Re: Self-Destructing Cookies – add-on for Firefox

#27

Here is how I am using this: 1. Install the add-on. 2. Panic that it has deleted all "not open now" websites' cookies. 3. Choose the option to "Suspend Operation" via the add-on icon. 4. Repeatedly "Undelete" all cookies until it's all done. 5. Keep the add-on suspended. 6. Now, for the next few days, I will browse like normal, but will remember to "whitelist" the websites I like to stay logged-in (Hacker News, Webma…

Thank you for your feedback. I agree that the first-run experience makes for quite the adventure. Until a few months ago, I also considered the idea of starting the add-on in a paused state a no-brainer. After supporting my add-on for some time, however,I'm not so sure about that any more. There's a huge portion of users (probably not HN readers) that would not realize that the add-on is paused. Pop-ups, etc. only go so far. It's really about managing expectations and expectation mismatches. I hope that the portion of users who care about their pre-existing cookies overlaps with the portion of users who read the "What just happened to my cookies" blurb that pops up. I haven't had too many angry complaints since I added the undelete feature, so it might be working.

Re: Self-Destructing Cookies – add-on for Firefox

#28
post #21
post #20

If this is added to the core (and simplified as mentioned by dotmanish), it can eradicate the chrome fever for good. The same reason why people are using DDG these days(btw, I do. for all my searches other than blockers while coding).

People use Chrome because it's better than Firefox. Much better.

Chrome sure as hell isn't better than Firefox when it comes to security or privacy or even ad blocking.

Re: Self-Destructing Cookies – add-on for Firefox

#29

Earlier quoted context omitted.

I wonder if a better (if probably impractical approach for in a plugin) approach would be to scope off-site cookies to the containing page's domain. So an ad network's cookies on facebook.com wouldn't be shared with them on google.com. This would eliminate a lot of the "follow you around the internet" privacy issues without forcing manual configuration.

So... Blocking third party cookies? I thought there was a big fuss about FF doing this by default or something.

Slightly different, really, though maybe in practice for a lot of current uses of it, it comes out to the same thing. Scoping, though, not blocking.

Re: Self-Destructing Cookies – add-on for Firefox

#30
I'm the author of that add-on. Maybe I can add to the discussion by outlining my motivation for writing SDC. I'm currently in the process of compiling the results of an automated crawl of thousands of popular sites that I did last month. I think that every www user should be aware of this:

- The privacy model of browsers relies on the same-origin policy. The same origin policy is in practice routinely circumvented by active identifier sharing. The difference between 1st party identifiers and 3rd party identifiers has become meaningless.

- Self-Destructing Cookies is a proof of concept for a model that actively derives the minimum set of identifiers that you need to browse the web at any given moment. This is a possible workaround for a world without the same-origin policy.

- Cache abuse is rampant. The cache must be considered a store of identifying tokens. If you use SDC, you should definitely enable the automatic cache cleaning. Set the timeout to 3 minutes or so. Remember that identifiers are frequently shared. It only takes a single party to identify you from something they put in your cache.

Post reply on HN