Recent submissions

Comment · 4 years ago
It also blocks network requests made by third-party sites to FB. So unless you're already running ETP with the content blocker on (strict mode, private browsing mode) or another ad blocker kind of addon that also blocks FB strictly, then that's an additional measure.
Comment · 4 years ago
I'm not sure if it offers any stricter cookie-specific behavior, but it also blocks network requests Facebook makes on third party pages. So unless you're running in ETP strict/custom mode with the content blocker on, or in private browsing, or maybe an ad blocker that also blocks FB in general, that's probably worth noting.
Comment · 4 years ago
Right, Total Cookie Protection has been baking for a while to try to minimize that kind of breakage, and we're already in discussions with other browser vendors and companies to get everyone onboard on the Privacy CG.

In a nutshell, adding new case-specific web APIs seems to be the likely way forward here. There are proposals floating around like an "is logged in" API, the Federated Credential Management API, and so on.

I'm not sure there's ever going to be a perfect solution for everything, but I would certainly rather have users more informed and empowered about their privacy than they currently are (even if some folks prefer to just "allow all").

I guess we'll just have to wait and see which proposals win out, and in the meantime rely on heuristic-based solutions like Total Cookie Protection to iteratively get us to a better place.

Comment · 4 years ago
Comment · 4 years ago
Total Cookie Protection is already on by default in private browsing mode, or strict ETP. Also Firefox Focus on Android. It's being rolled out to everyone in the standard ETP mode now.

It's currently controlled by setting `network.cookie.cookieBehavior` to `5`. (There is also a similar setting for private browsing mode which is already 5 by default).

Comment · 4 years ago
To be precise, it's third party cookie/storage partitioning, with web compatibility fixes to keep sites working.
Comment · 4 years ago
Yes, you can follow the meta-bug here to see the current issues we're working on resolving in a better way: https://bugzilla.mozilla.org/show_bug.cgi?id=1537702

Perhaps unsurprisingly, Microsoft logins are the most glaring exceptions right now (Teams, Logins, Office, Live), and we're working with MS to see if we can find an acceptable fix (or work-around while it's fixed). There are also exceptions for github.dev and history.com right now.

It's worth mentioning that these aren't simply exceptions which blanket enable tracking for those sites, it's just to work around specific breakage.

We're also working around some other specific site logins or features breaking, which would not break if sites called the new requestStorageAccess API appropritately. We're using SmartBlock to shim those cases until the sites can fix it themselves.

Comment · 4 years ago
Comment · 4 years ago
Facebook Container is a stricter form of protection for Facebook specifically, so no, you should continue using it if you're interested in isolating Facebook.

Total Cookie Protection is about isolating third party cookies/web storage, without breaking as much of the web as simply blocking third party cookies does.

Comment · 5 years ago
Just FYI, Firefox is working on Total Cookie Protection and other features like SmartBlock to keep third party storage access blocked while not breaking web pages. It's definitely nice to see the anti-tracking space getting so active over the past couple of years.
Comment · 5 years ago
Firefox already has Total Cookie Protection and other features like SmartBlock, which aren't exactly the same, but also work to block third party web-storage access while keeping web sites working.

It would definitely be interesting to compare and contrast the various approaches of different browsers.

Comment · 5 years ago
The latter. This isn't about freedoms or who is better than who. It's about being part of the change you want to see, versus dragging everything down with endless negativity. I'm no one special, but I at least put my money where my mouth was. I know there are others who could do the same, yet they choose not to because it's easier to merely act like they care.
Comment · 5 years ago
I would only like a bit more than the endless negativity, that's all. If you can't even offer that much, then why would I ever expect anything more?

It's easy to blame others and excuse yourself, but if I could find the will to get a job at Mozilla to try to help the company to a better end, then why can't some of you folks who always act like you have all the answers?

If we aren't willing or able to do better than Mozilla, then we're stuck with the Mozilla we get, no matter how much we complain about it.

Comment · 5 years ago
Sure, keep telling yourself that you're the real hero. If folks like you really meant make a positive difference, you would have by now. Instead you endlessly try to take credit for "raising awareness" and "pressuring", which in reality just means leaving the actual work to others. You give yourself every excuse to not contribute anything tangible, then you blame them for failing while acting like some neglected oracle. Good on you for showing us how much better you are.
Comment · 5 years ago
Yet if all you ever do is talk about how sucky it is, then you're effectively just part of the PR wings of Firefox's competition.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton