Live data from Hacker News

Facebook Container for Firefox

mozilla.org

401–406 of 406 posts

Re: Facebook Container for Firefox

#401
post #225

Third party cookies, and any way to fingerprint a specific user starting from high entropy user agents to screen resolution, font fingerprinting or canvas data, should be considered a breach of the browser security model. All sites should run in containers and no advertiser should be able to track you across sessions. When I want 3rd party interaction, I should need to opt in and connect the current site with Faceboo…

Exactly. Why aren't all websites run in containers by default (personally I'm envisioning per-domain containers)? What benefit do we get from full-coverage containerization not being the default?

This can be done with Firefox Multi-Account Containers[1] and Temporary Containers[2].

[1]: https://addons.mozilla.org/en-US/firefox/addon/multi-account...

[2]: https://addons.mozilla.org/en-US/firefox/addon/temporary-con...

Re: Facebook Container for Firefox

#402
post #243

Third party cookies, and any way to fingerprint a specific user starting from high entropy user agents to screen resolution, font fingerprinting or canvas data, should be considered a breach of the browser security model. All sites should run in containers and no advertiser should be able to track you across sessions. When I want 3rd party interaction, I should need to opt in and connect the current site with Faceboo…

The security model of the internet is whack. Javascript should be opt-in, especially from 3rd party sources. "This website wants/requires javascript for an enhanced viewing experience [allow/deny]". Instead not only will any stock browser gladly run anything thrown at it, it will also accept any cookies and now run WebGL code, trigger DRM engines and various other things. All that because the engineers who wrote the…

Hear hear! Is a mountain next to you occupied yet?

Re: Facebook Container for Firefox

#403

Earlier quoted context omitted.

> Most good corporate environments should be controlling what plugins they allow users to install in their browsers. For a very odd definition of the term 'good' I suppose that's may be the case. It's certainly not been in any place I've worked in the past 20 yrs.

I can't vouch for the security of any place you've worked in the past 20 years. But suffice to say, it's very common for Chrome extensions to be able to both modify any content on websites you view and read data you enter into them. Both adware and spyware is prolific on the Chrome Web Store, and it's the number one infection vector I see. Controlling extensions is downright basic competency for network security. Wit…

Considering that I've spent 15 of the last of those 20 years working at cybersecurity companies, I can say with some degree of assuredness that your level of control over browser extensions goes far beyond the typical work environment, and that goes doubly so for companies based in silicon valley. Do you really think that all those engineers at Google/FB/Apple/etc can't install browser extensions?

Re: Facebook Container for Firefox

#404
post #396

Earlier quoted context omitted.

Any idea what version of Chrome fixed it? I refill my Tarsnap balance only occasionally.

The bug was fixed on January 26th and was being merged to older supported branches expeditiously -- I don't know the exact version numbers but I'm sure that any releases they rolled after mid-February would have the fix.

I guess 65.0.3325.146 from March 5th probably works, then. Thanks!

Re: Facebook Container for Firefox

#405

Have been using Ghostery on Safari for quite some time, and I dont see how this Facebook Container can be anywhere close to what Ghostery provides. The number of trackers on any website, is just mind blowing. I believe Ghostery works with all browsers and I strongly suggest everyone use it, in addition to what ever ad blocker, container, VPN service you intend to use, even if you are using Facebook Container for Fire…

Ghostery has a shady history of selling data it collects on you to advertising companies. The data collection feature was previously called Ghostrank, and now it's called Human Web. I'm not sure what Ghostery does with the data since it got acquired by Cliqz in 2017, but I'd be careful.

Wow, good to know! thanks for sharing this info. Will check and figure out what is a better alternative.

Re: Facebook Container for Firefox

#406
post #277

Earlier quoted context omitted.

I've been using first party isolation for the last year or so, and I can't think of anything it's broken.

Good to know, I'm gonna try this starting now. Using the extention: https://addons.mozilla.org/en-US/firefox/addon/first-party-i...

2 week report: I haven't seen anything break.
Post reply on HN