You must log in or register to comment.
Does making it the default also set it on my already-downloaded Firefox or only to new downloads? Just to know if I’ll have to manually set it.
It very probably wont change your settings for you. That would be super annoying if it changed things you set on purpose.
What if I never changed it in the first place. So before I had it on “default” and now it would still be on “default”.
Good to know anyway
Take that, cookie monsters!
deleted by creator
Starting in what versions?
Does this stop me from adding to my website an iframe to facebook where facebook can keep its cookies for my user? That would be great but I doubt it.
IIRC an iframe contents is treated as a separate window, so cookies aren’t shared either
Sure, but the separate window can be on a different domain. Now you have a way to share cookies across multiple websites on different domains if all of them include an iframe to this external domain. And you can use in-browser messages (see window.postMessage()) to communicate between iframes and main window.
Indeed see sibling comment https://programming.dev/comment/11983146
That’s horrific WHY?
do not add any event listeners for
messageevents. This is a completely foolproof way to avoid security problems. 🤡🤡🤡🤡🤡🤡🤡🤡🤡🤡🤡
I haven’t worked with HTML since 1999; I hate that I’m just now finding out that iframes are somehow still a thing in the modern world. What the actual fuck. Why? Don’t we have some fancy HTML5 or Ajax or something that can replace them?
Yeah i don’t know why, probably exactly because is such a neglected feature that it offers workarounds for some limitations, like in the case of cookie-related patterns.
HTML5 can store HTML files inside of HTML files, allowing you to do what an iframe does but with a static (or updated when the page refreshes or whatever) html page
AJAX also has something that can replace iframes
But iframes continue to exist likely for legacy and how easy it is to get a basic page running using them for home projects
I wonder how long until all the distros have this.
I’m curious how this will affect OAuth (if at all). Does it use an offsite cookie to remember the session, or is that only created after it redirects back to the site that initiated the login?
I was also wondering that
I my experience it generally breaks it. Leveraging cookies on the auth domain is fine, but once you are redirected to another domain, that application needs to take the access and refresh tokens and manage reauthentication as a background process. Simply don’t store those things as cookies though.
Yeah that’s kind of what I was getting at. It’s been a while since I’ve worked with it so I couldn’t remember if it used cookies for the token exchange or some other mechanism.
Does this make containers unnecessary? Or basically built in?
Yeah this basically sounds like it takes the temporary container add on that I think was folded into Firefox at some point recently and basically just does it behind the scenes now on a per domain basis
Containers also handle other cached content besides cookies.
FREEEDOOOOOOOOOOOM
It is making the tracking protection part of containers obsolete, this is basically that functionality but built in and default. The containers still let you have multiple cookie jars for the same site, so they are still useful if you have multiple accounts on a site.
A lot different. Containers act as a separate instance of Firefox. So any sites you visit within a container can see each other as if you were using a browser normally. The containers can’t see the stuff from other containers though. So you have to actively switch containers all the time to make it work right.
This keeps cookies locked to each page that needs cookies. So a lot stronger.
So what you’re saying is, each site gets its own container?
I think there’s some confusion here. You’re talking about Multi-Account Containers, that person was talking about the Facebook Container. Both Firefox features with confusingly similar names, and honestly that’s on Firefox for naming them.
Facebook Container is similar to this TCP feature, but focused on Facebook. And of course it was a separate extension, so very opt-in. Now, Firefox has rolled it out for ALL sites by default, which is awesome and SHOULD HAVE BEEN HOW COOKIES WORKED IN THE FIRST PLACE!
Isn’t there just a non-extension container feature, I can’t tell what’s the difference between that one and multi-account containers.
I think this tips it over the edge for me to switch to Firefox
I hope so! It’s a wonderful side of the Internet to be on
I prefer waterfox. Hard to trust Mozilla Corpos.
As long as it’s not Chromium, I’m happy people aren’t just handing over the keys to the Internet to Google.
Yeah, Waterfox is just another browser built on top of the Mozilla’s GECKO engine. But without all the AI dickriding.
How terrible to offer client-side translation or webpage description for differently abled people!
Client side incorrect translations*
How incorrect is it?
Sentences are a lot like math problems. An incorrect part changes the entire outcome.
I haven’t seen anything to signal Mozilla is untrustworthy other than from that one right wing guy with a chip on his shoulder.
Most of the revenue of Mozilla Corporation comes from Google (81% in 2022[2]) in exchange of making it the default search engine in Firefox.
Source: wikipedia
Other issues I have with Firefox is the telemetry bits, the way they handle some of their employees (laying one guy off because he has cancer), the lack of meaningful updates and features in the last decade, CEO granting herself a nice pay rise after doing well nothing really. The list goes on and on honestly.
Don’t get me wrong, you should still use Firefox or a Firefox derived browser if you care about a free internet. I myself use firefox (although I just switched to Zen browser on my PC which is based on Firefox). However we shouldn’t be blind ourselves just because we hate anything google based and/or closed sourced. Firefox is still back by a for profit company which is, as I quoted earlier, backed at least by 80% by google.
For the positive side now it seems that in the last 2-3 months firefox has been pumping out meaningful updates (even on mobile). Things seem to be taking a positive turn recently and I’m actually a bit excited to see where firefox is going to go from here.
The Mozilla Corporation is a for profit entity owned by the non-profit Mozilla Foundation, which lets them claim to be a nonprofit, which is a sketchy looking way to set up and promote your business if nothing else. They get most of their money from Google and they’ve been riding AI like all the other unethical companies.
I see absolutely no reason to give them a chance, either. Just use an actual open source build instead of the mainstream one.
Really? This is what does it for you?
Ur… Yeah?
I miss Mozilla the product.
I unironically miss Netscape Communicator. Yes most of that went into Firefox but not all and I really miss the frame layout.
I used the shit out of their WYSIWYG HTML editor when I was an up and coming little script kiddie.
ah yes, the other TCP
Tasty Consensual Photos
Maybe they should patent it, to protect their TCP IP.
Or have some higher tier version called Ultimate Cookie Protection {UDP)
Id prefer a security security oriented Secure Cookie Total Protection (SCTP)
Wouldn’t that be Ultimate Dookie Protection?
danvit, yes
LOL
It baffles me that this was ever not the case.
It was - in the ancient times. Then, there were 3rd party cookies which you had to manually approve upon the initial creation. And then it went all down south and got abused via CDNs and ad networks.
Is this the reason why I have to “confirm it’s you” every time I sign into a Google service now? I appreciate the fact that Firefox’s protection is so good that Google doesn’t recognize my PC anymore, but it’s extremely annoying to have to pull out my phone every time I want to watch YouTube.
This might be what finally convinces me to ditch Google for good. Good job, Firefox devs.
but it’s extremely annoying to have to pull out my phone every time I want to watch YouTube
This sounds wild. What is your setup? You are using Youtube directly and unmitigated?
At the moment yes cause I’m too lazy/ADHD to switch to NewPipe.
It’s okay to say lazy. Not everything is ADHD. You’re just lazy.
FWIW I’ve been using the lazy excuse all my life until I got the ADHD diagnosis a year ago in my 30s.
Hahaha that’s right in my feels and I’m not in this thread
No. That’s just Google trying to pester you into using Chrome.
I actually had a problem where on Chrome, I would be signed out of my google account every time I restart my computer, while on Firefox, everything works normally. I use Firefox now lol.
This wouldn’t make you have to log in every time you watch YouTube. It means by signing in to google.com, youtube.com can’t tell that you’re signed in. If you sign in on youtube.com, you’ll stay signed in on youtube.com unless you have something else deleting your cookies.
Well have had my cookies set to delete every time I close the browser for several years now but FF only now started doing this verification thing. A week ago all I had to do was enter my email and password.
This article is from 2022
It was updated today. 2 years ago it was just an announcement of a beta function in private browsing, the full rollout happened with 129.0.2 which was released a few days back.
Cool, thanks. How’d you find the version number? I was looking on the linked post but didn’t find it. Maybe just me being tired.
I don’t think it was in the article, but I updated to 192.0.2 yesterday and checked the enhanced tracking protection settings, and block cross-site cookies is now in the default profile, so that was my assumption since it wasn’t there previously.
If you’re already deleting all your cookies every time you close, then this new change should be identical to your first login of the day when your browser has no cookies. If you’re only getting 2fa requests after this change, then maybe you weren’t actually deleting every cookie, and Google was still fingerprinting you somehow.
You may want to just use tab containers for youtube, so that it maintains your session, but also isolates it.
Best way to use such (para)sites.
Very good! Please remove anonym/PPA, DoH to cloudflare, Google search, telemetry, and pocket next, and I’ll make a consideration to stop calling your browser malware!
Shocker, FF troll hates on FF even when it does good things
1 step forwards 3 steps back is still 1 step forward 3 steps back
Couldn’t help but notice there were zero “steps back” in this post. Are they in the room with you now?
Such a chad move. Respect!
Chrome, I’m looking at you. When are you getting it?
Never, because Chrome is a data harvesting platform.
Made by an advertising company
Google recently cancelled their 3rd party cookie plan because they realized its not gonna work for their data harvesting goals
Drats, I may need to switch.
