this post was submitted on 28 Aug 2024
2297 points (99.3% liked)

Technology

61227 readers
3079 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
(page 5) 29 comments
sorted by: hot top controversial new old
[–] [email protected] 48 points 5 months ago (8 children)

Does this make containers unnecessary? Or basically built in?

load more comments (8 replies)
[–] [email protected] 5 points 5 months ago (4 children)

Does this stop me from adding to my website an iframe to facebook where facebook can keep its cookies for my user? That would be great but I doubt it.

[–] [email protected] 5 points 5 months ago (3 children)

IIRC an iframe contents is treated as a separate window, so cookies aren’t shared either

load more comments (3 replies)
[–] [email protected] 38 points 5 months ago (1 children)

Good to see Firefox still has value to provide

[–] [email protected] 31 points 5 months ago

Firefox is awesome.

[–] [email protected] 309 points 5 months ago (12 children)

For those who don't care to read the full article:

This basically just confines any cookies generated on a page, to just that page.

So, instead of a cookie from, say, Facebook, being stored on site A, then requested for tracking purposes on site B, each individual site would be sent its own separate Facebook cookie, that only gets used on that site, preventing it from tracking you anywhere outside of the specific site you got it from in the first place.

[–] [email protected] 6 points 5 months ago (1 children)

I don't know why this wasn't the case long ago.

[–] [email protected] 11 points 5 months ago

It increases implementation complexity of the browser and loses people who fund Firefox and contribute code $$$

[–] [email protected] 16 points 5 months ago

For those who don't care to read the full article

Or even the whole title, really

[–] [email protected] 206 points 5 months ago (4 children)

Hahahahaha so it doesn't break anything that still relies on cookies, but neuters the ability to share them.

That's awesome

[–] [email protected] 61 points 5 months ago* (last edited 5 months ago) (2 children)

Honestly, I thought that's how it already worked.

Edit: I think what I'm remembering is that you can define the cookies by site/domain, and restrict to just those. And normally would, for security reasons.

But some asshole sites like Facebook are cookies that are world-readable for tracking, and this breaks that.

Someone correct me if I got it wrong.

[–] [email protected] 31 points 5 months ago (1 children)

Total Cookie Protection was already a feature, (introduced on Feb 23st 2021) but it was only for people using Firefox's Enhanced Tracking Protection (ETP) on strict mode.

They had a less powerful third-party cookie blocking feature for users that didn't have ETP on strict mode, that blocked third party cookies on specific block lists. (i.e. known tracking companies)

This just expanded that original functionality, by making it happen on any domain, and have it be the default for all users, rather than an opt-in feature of Enhanced Tracking Protection.

[–] [email protected] 9 points 5 months ago* (last edited 5 months ago) (1 children)

That's not what I was thinking of, which was even more fundamental. But that's good info (and another way to cover stuff in the article).

Edit: what I was thinking originally was really stupid, that 3rd-party cookies weren't allowed at all. Which was really dumb since of course they are.

load more comments (1 replies)
[–] [email protected] 26 points 5 months ago (4 children)

They've been doing this with container tabs, so this must be the successor to that idea (I'm going to assume they'll still have container tabs).

load more comments (4 replies)
load more comments (3 replies)
[–] [email protected] 29 points 5 months ago

Basically creates a fake VM like environment for each site.

load more comments (8 replies)
[–] [email protected] 12 points 5 months ago* (last edited 5 months ago) (4 children)

Forgive me if this is an overly simplistic view but if the ads with cookies are all served on Google's platform say then would all those ads have access to the Google cookie jar?

If they don't now then you can bet they are working on just that.

[–] [email protected] 7 points 5 months ago

So that's what third party cookies are. What this does is make it so that when you go to example.com and you get a Google cookie, that cookie is only associated with example.com, and your random.org Google cookie will be specific to that site.

A site will be able to use Google to track how you use their site, which is a fine and valid thing, but they or Google don't get to see how you use a different site. (Google doesn't actually share specifics, but they can see stuff like "behavior on one site led to sale on the other")

[–] [email protected] 2 points 5 months ago

They are usually separate things. Cookies are produced/saved locally, to be read in the next visit (by the same website or maany websites basically forever unless you use firefox containers or at least clear them once in a while). There's also local storage which is different but can also be used to identify you across the web. Ads, trackers, all of these categories are often made of many small components: you read a single article on a "modern" newspaper website, hundreds of connection are being made, different tiny scripts or icons or images are being downloaded (usually from different subdomains for different purposes but there's no hard rule). It's possible to block one thing and not another. For example I can block Google Analytics (googletagmanager) which is a tracker, but accept all of Google's cookies.

[–] [email protected] 6 points 5 months ago (3 children)

We'll have to see what happens but what you are talking about is what Mozilla calls Third-Party Cookies and... they are aware of it.

https://support.mozilla.org/en-US/kb/third-party-cookies-firefox-tracking-protection#:~:text=Third%2Dparty%20cookies%20are%20cookies,considered%20a%20third%2Dparty%20cookie.

I can't entirely tell if that means they will be put in the facebook cookie jar or if it will be put in the TentaclePorn Dot Org (don't go there, it is probably a real site and probably horrifying) cookie jar. If the former? Then only facebook themselves have that which... is still a lot better I guess? If the latter then that is basically exactly what we all want but a lot of sites are gonna break (par for the course with Firefox but...).

[–] [email protected] 0 points 5 months ago

The cookie would go to the Facebook or tentacleporn cookie jar depending on which site the user has actually visited. Whatever the domain in the address bar says.

load more comments (1 replies)
[–] [email protected] 32 points 5 months ago

The way I'm reading it, they allow the third party cookies to be used within the actual site you're on for analytics, but prevent them from being accessed by that third party on other sites.

But I just looked at the linked article's explanation, and not a technical deep dive.

[–] [email protected] 425 points 5 months ago (2 children)
[–] [email protected] 4 points 5 months ago

There is still plenty of fish for advertisers, sadly.

[–] [email protected] 136 points 5 months ago (16 children)

Advertisers track you with device fingerprinting and behaviour profiling now. Firefox doesn't do much to obscure the more advanced methods of tracking.

[–] [email protected] 37 points 5 months ago (18 children)

Don't all the advanced ways rely on JavaScript?

load more comments (18 replies)
load more comments (15 replies)
load more comments
view more: ‹ prev next ›