[deleted]
Logging out of Facbook is not enough
41–50 of 126 posts
Re: Logging out of Facbook is not enough
#42> The entire process was so flaky and frustrating that I haven't bothered sending them two XSS holes that I have also found in the past year. You realise you're hurting innocent users much more than Facebook itself by not reporting them, right?
It's not his duty to report such things. No one is "honor-bound" to report vulnerabilities; in fact, it seems unethical to expect any random person to try to fix any random problem they stumble upon, don't you think? My philosophy: it's backwards to look down on those who don't report vulnerabilities; it's better to be pleasantly surprised when someone does . But he's certainly not "hurting" anyone at all. He didn't…
I guess I'm too nice myself. It'd be nice if we all did that extra 10% to make the world better.
Normally these things are incredibly easy to report—sending a quick summary of the problem to a specific email address is all it takes.
(Facebook has a web form for it[1].)
Re: Logging out of Facbook is not enough
#43I blackhole facebook.com at the domain level using pdnsd:
neg { name=facebook.com; types=domain; }
I have no idea why people are so eager to give away their privacy to Facebook and others to sell and whore-out to the highest bidder. It's akin to getting a handful of bright, pretty beads for your property.
Re: Logging out of Facbook is not enough
#44Earlier quoted context omitted.
Are you sure that setting "Accept cookies" to "off" will prevent third-party sites from reading cookies as well?
Good question and I'm not sure. I would guess that if it doesn't accept them then it wouldn't read them either. The first step in the cookie transaction would be to check whether that cookie already exists (an attempt to read the cookie). It would seem easiest to stop that process at that point based on user preferences rather that just programming it to check at the actual write time. This is all speculation though.
But once you sign in to Facebook, you have the cookie, so browser will send it if there's no read blocking.
Re: Logging out of Facbook is not enough
#45Re: Logging out of Facbook is not enough
#46Even after deleting FB cookies, what prevents them from tracking you (with reasonably good accuracy) using your IP address. In that case, you might as well just blacklist all of facebook.com. In my opinion, internet users must be aware that there is no easy way to be totally anonymous, whether it be Facebook, Google, etc. If you require complete anonymity, you might as well unplug your internet cable.
Or, indeed, using your combination of locale, useragent, etc. These are often unique. You can test yours here: http://panopticlick.eff.org/
you're partly right - the only resolution here would be to disable javascript, which makes a great part of panopticlick work (identifying installed fonts, etc.). however I think this kind of user recognition would be an overkill for a site with so many impressions like facebook - the computational effort to assign an account to each set of features must be huge (thou maybe sometime later ... when privacy laws get more restrictive).
Re: Logging out of Facbook is not enough
#47I use Disconnect for chrome. https://chrome.google.com/webstore/detail/jeoacafpbcihiomhla...
It makes me nervous that it hasn't been updated since July. I switched to adblock plus with the fb rules above, and "disable all third-party cookies" in about:flags.
Re: Logging out of Facbook is not enough
#48I use the Android Facebook app not the browser so yesterday I looked at it but can't see any way to log off. I'll probably have to delete it. On my Facebook page all I have is stupid stuff but still I would like to log off.
Re: Logging out of Facbook is not enough
#49Earlier quoted context omitted.
In the Firefox preferences go to the Privacy tab and select Use Custom Setting for History in the History section. From there you will see the check box to accept 3rd party cookies. Keep in mind this will prevent webmasters from using things like Google Analytics. Which you may want anyway but I thought it was worth mentioning.
Are you sure that setting "Accept cookies" to "off" will prevent third-party sites from reading cookies as well?
Cookies can still be read if this is set to "off."
Re: Logging out of Facbook is not enough
#50Earlier quoted context omitted.
But then some sites stop working, like Twitter and even some parts of Google :(
Could you elaborate? I routinely run with only direct cookies permitted (no third party ones) and with all cookies except those I have explicitly whitelisted being deleted each time my browser is closed. I am not aware of any problem this has caused me for a long time, including on the sites you mentioned. Maybe there is some useful feature I'm not seeing at all because of the cookie restrictions I impose, but maybe…
> maybe they've just got better over time at not relying on cookies for things they shouldn't?
It may be that. I just tried and Twitter is working perfectly without third-party cookies. Some months ago it didn't allow me to login.
With Google I had a similar problem, I couldn't login into my Google Account in sites that weren't the search engine (Docs, YouTube, etc). I just tried them, and again, it seems that it works now.
I use Chrome stable. Maybe something changed in the management of third-party cookies in recent releases?