Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Facebook Container for Firefox

mozilla.org

Post reply on HN
Print view View original

381–390 of 406 posts

Re: Facebook Container for Firefox

#381

Post by camgunz »

mih wrote: post #231
cornholio wrote: post #200

Third party cookies, and any way to fingerprint a specific user starting from high entropy user agents to screen resolution, font fingerprinting or canvas data, should be considered a breach of the browser security model. All sites should run in containers and no advertiser should be able to track you across sessions. When I want 3rd party interaction, I should need to opt in and connect the current site with Faceboo…

Ever encountered Google ReCaptcha when you've turned off third party cookies or while in incognito/private mode? It's a nightmare, even if you're logged into a Google account. You can be shown upto 7-8 challenges, painfully slow loading images and Google's insistence that they encountered malicious traffic from your IP when attempting to use the audio version. What's even worse is they track your mouse movements and…

Yeah we need to have a talk about captchas and privacy. They're pretty plainly used by providers (Google) to force people into being tracked.

Re: Facebook Container for Firefox

#382

Post by yetanotherjosh »

TekMol wrote: post #267

Looks like what it does is deleting a bunch of cookies. If it only was that easy! The real problem is not cookies. I can already delete those. The real problem is fingerprinting.

And all this talk of cookies leaves out html5 features like localStorage. Targeting only mechanism for tracking does not solve the tracking problem.

Re: Facebook Container for Firefox

#383

Post by iamnothere »

pcl wrote: post #304
iamnothere wrote: post #294

Earlier quoted context omitted.

This is what finally made me switch my default search engine away from Google. I will put up with a lot of crap, but I'm not going to spend 60s to solve a CAPTCHA every time I do a search.

Bear in mind that Google might be correctly identifying your IP address as a botnet source. If you start seeing lots of CAPTCHAs, it's worth it to take a look around your network for open ports or weak ssh passwords etc., or just look at a traffic monitor to see if there's a lot of egress from your net.

Oh, I'm sure there are a million reasons for them to block me. I normally use a VPN, incognito searches, limited script blocking, and cookie blocking. Pretty sure they don't want me as a customer, not that I can completely blame them. Anyway, I've discovered that there are other reasonably effective search engines with a different business model, and I'm fine using those and giving them a modest amount of revenue. (I don't block ads that don't track me.)

Re: Facebook Container for Firefox

#385

Post by user5994461 »

eugeniub wrote: post #331
ldjb wrote: post #262

Earlier quoted context omitted.

The optimist in me thinks that if browsers started to disallow third party cookies, ReCaptcha might have to adapt to the change and make it easier to solve if third party cookies are blocked. After all, if they didn't, they'd risk website owners moving away from ReCaptcha because visitors could no longer interact with the site. The pessimist in me thinks that if a browser were to disallow third party cookies, users m…

I don't think it has so much to do with reCAPTCHA as much as it has to do with Cloudflare and website owners themselves. Most reCAPTCHA challenges come in the form of Cloudflare challenge passage pages. Website owners have 5 options to choose from regarding challenges:[1] — Essentially off: Challenges only the most grievous offenders — Low: Challenges only the most threatening visitors — Medium: Challenges both moder…

It doesn't ruin the experience of anyone except a couple of overly technical users and customers in the wrong locations.

It's very good at blocking malicious traffic though and it's totally worth losing a pair of users for that.

Re: Facebook Container for Firefox

#386

Post by jhasse »

maxerickson wrote: post #305
simias wrote: post #243

Earlier quoted context omitted.

The security model of the internet is whack. Javascript should be opt-in, especially from 3rd party sources. "This website wants/requires javascript for an enhanced viewing experience [allow/deny]". Instead not only will any stock browser gladly run anything thrown at it, it will also accept any cookies and now run WebGL code, trigger DRM engines and various other things. All that because the engineers who wrote the…

Javacript running automatically is a decision made at the user agent level, it isn't really part of the "internet" security model. If browsers didn't run scripts automatically I think that would be the #1 support question, "How do I turn off those prompts!?".

Prompts could include a checkbox "Allow scripts for all sites".

Also: Some user would ask the site's support about the prompts, not the browser's, which would be an incentive to get rid of JavaScript for the site.

Re: Facebook Container for Firefox

#387

Post by kgoutham93 »

dao- wrote: post #108
kgoutham93 wrote: post #96

What's a Firefox container and why should I use one ?

As the page explains: it prevents Facebook from tracking you across the Web.

No I read it, but I want to understand the technical details like how is this different from using Facebook in incognito window.

Re: Facebook Container for Firefox

#388

Post by DonaldFoss »

mih wrote: post #231
cornholio wrote: post #200

Third party cookies, and any way to fingerprint a specific user starting from high entropy user agents to screen resolution, font fingerprinting or canvas data, should be considered a breach of the browser security model. All sites should run in containers and no advertiser should be able to track you across sessions. When I want 3rd party interaction, I should need to opt in and connect the current site with Faceboo…

Ever encountered Google ReCaptcha when you've turned off third party cookies or while in incognito/private mode? It's a nightmare, even if you're logged into a Google account. You can be shown upto 7-8 challenges, painfully slow loading images and Google's insistence that they encountered malicious traffic from your IP when attempting to use the audio version. What's even worse is they track your mouse movements and…

I sympathize. It's terrible when a computer thinks you must not be human because you're not slow and don't make enough mistakes.

I've been accused of being a bot before also.

Re: Facebook Container for Firefox

#389

Post by DonaldFoss »

cornholio wrote: post #200

Third party cookies, and any way to fingerprint a specific user starting from high entropy user agents to screen resolution, font fingerprinting or canvas data, should be considered a breach of the browser security model. All sites should run in containers and no advertiser should be able to track you across sessions. When I want 3rd party interaction, I should need to opt in and connect the current site with Faceboo…

There are valid uses for some of these. Imagine where online User eXperience and User Interfaces would be without services that help tell someone what is working and what is not.

Fortunately, many US companies are starting to consider a GUID and your IP address to be PII, and no longer allow that information to be stored.

Re: Facebook Container for Firefox

#390

Post by priccis »

strogonoff wrote: post #351

Made a jump to Firefox as primary browser on macOS this month. My setup involves heavy use of the new containers feature and a tree-style vertical tab panel, which AFAIK is unique to Firefox and offers neat visual browsing history. Extension rundown: — kesselborn’s Conex, a Spotlight-like quick container switcher/tab finder. It’s set to auto-hide tabs not in the current container, and I use it to routinely create one…

I guess you are already using uBlockO in advanced mode to block all 3rd-party scripts and frames by default?
Post reply on HN