Firefox rolls out Total Cookie Protection by default to all users

Post by galaxyLogic » Tue, Jun 14, 2022, 10:28 PM UTC

Agamus wrote: post #178

dahart wrote: post #118

Earlier quoted context omitted.

> Why weren’t separate cookie jars the default in the first place? Tracking today is an interaction between cookies and pages, not really because cookies were designed to be shared between domains. Because of that, ads on web pages are a reason that information gets shared across sites. Any ad or other iFramed content that’s served on a site can get the domain name of where it’s be served from and then access the iFr…

The solution still seems to be to: 1. Use Firefox, block .js by default, and selectively allow. 2. Set browser to block cross-site cookies, and to purge all cookies when closing browser. 3. Avoid tabbed browsing, and restart browser after using a website. I've been doing this since about 2006. It's inconvenient, but gives some peace of mind.

Post by jszymborski » Tue, Jun 14, 2022, 10:51 PM UTC

roughly wrote: post #275

mdp2021 wrote: post #258

Earlier quoted context omitted.

It is possible to enable obstacles to fingerprinting. In Firefox, it is configuration entry privacy.resistFingerprinting Some details (the list is not exhaustive): > * Your timezone is reported to be UTC; * Not all fonts installed on your computer are available to webpages; * The browser window prefers to be set to a specific size; * Your browser reports a specific, common version number and operating system; * Your…

I’ve got this enabled - the only one that’s been more than a mild pain in the ass is the UTC timezone change. Always takes a minute to remember why a site is telling me my appointment is at 2:30 in the morning.

Post by recursive » Tue, Jun 14, 2022, 11:10 PM UTC

dylan604 wrote: post #279

recursive wrote: post #267

Earlier quoted context omitted.

If the contents of the cookie is a JSON array of recently viewed items, then the size is correlated to whether I've been actively viewing items recently. Adding random padding makes it harder to get a signal, but with a high enough sample size, it's still possible to get some information. If you always pad to a fixed size, then there's probably no useful information. At the moment, I think I have enough to do, but I'…

>If That's are really big word in that sentence. You have NO idea, like 0, what is stored in an encrypted cookie. To even think you do is just pure folly.

Post by chiefalchemist » Wed, Jun 15, 2022, 12:25 AM UTC

tamha wrote: post #145

madmax108 wrote: post #80

I wonder if there's anyone from any advertising/ad-targeting companies on HN who can shed some light on if/how much this change may affect their "product". Asking this since I know friends working at companies that were DRASTICALLY affected by the Apple advertising changes in terms of user targetability (and hence revenue) and I'm wondering if this change will be similar.

I work in advertising. this change is nothing compared to what Apple did. Edit : It's better than ETP.

Post by Agamus » Wed, Jun 15, 2022, 12:37 AM UTC

madacol wrote: post #276

dahart wrote: post #190

Earlier quoted context omitted.

That’d certainly prevent most tracking, yeah. This new Firefox feature should make #2 and #3 unnecessary. I think this feature by Firefox is great, and privacy options are getting objectively better, if slowly. But the cynic in me guessing that server side tracking methods are going to start getting secretly better, if they haven’t already.

I'm not sure about #3. there's still sessions, localstorage, indexDB, etc