• ngwoo@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      22 days ago

      Advertisers track you with device fingerprinting and behaviour profiling now. Firefox doesn’t do much to obscure the more advanced methods of tracking.

        • hoot@lemmy.ca
          link
          fedilink
          English
          arrow-up
          0
          ·
          22 days ago

          Lots do. But do you know anyone that turns JS off anymore? Platforms don’t care if they miss the odd user for this - because almost no one will be missed.

          • pixelscript@lemm.ee
            link
            fedilink
            English
            arrow-up
            1
            ·
            22 days ago

            “Anymore”? I’ve never met a single soul who knows this is even possible. I myself don’t even know how to do it if I wanted to.

            I do use NoScript, which does this on a site-by-site basis, but even that is considered extremely niche. I’ve never met another NoScripter in the wild.

            • BalooWasWahoo@links.hackliberty.org
              link
              fedilink
              English
              arrow-up
              0
              ·
              21 days ago

              The people who I’ve tried to get on NoScript seem to have the brain capacity of goldfish. If the site doesn’t instantly work, it’s as if the sky has fallen and there is no way to convince them to pay attention to which scripts are actually needed.

              It’s a rare breed that is willing to put up with toggling different scripts on and off. I’ll also acknowledge that too many people (including me) are in a giant rush. For work-type stuff, I have the laptop without noscript, because sometimes I do need something to work absolutely right now.

              • papabobolious@feddit.nu
                link
                fedilink
                English
                arrow-up
                1
                ·
                21 days ago

                You don’t think you are being a tad judgemental?

                People whose lives revolve around fashion probably think you dress like shit.

                People who love food probably think you eat like shit.

                People who love cars probably think you are a shit driver.

                You probably love computers and care about privacy, and you are shitting on regular users(assumption, admittedly) for not being invested.

                They had something that was working, you present noscript, thing no longer works. If you are not invested, how are you going to see the appeal of extra work?

          • undefined@links.hackliberty.org
            link
            fedilink
            English
            arrow-up
            1
            ·
            edit-2
            21 days ago

            I go hard with DNS-based ad blocking and I’m constantly confirming it works by checking the network tab in developer tools. I’m basically only seeing first party scripts and CDN assets — 99% of websites load all the tracking garbage from third-party domains that can be easily blocked.

  • ArchRecord@lemm.ee
    link
    fedilink
    English
    arrow-up
    6
    ·
    22 days ago

    For those who don’t care to read the full article:

    This basically just confines any cookies generated on a page, to just that page.

    So, instead of a cookie from, say, Facebook, being stored on site A, then requested for tracking purposes on site B, each individual site would be sent its own separate Facebook cookie, that only gets used on that site, preventing it from tracking you anywhere outside of the specific site you got it from in the first place.

    • peopleproblems@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      22 days ago

      Hahahahaha so it doesn’t break anything that still relies on cookies, but neuters the ability to share them.

      That’s awesome

      • ripcord@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        22 days ago

        Honestly, I thought that’s how it already worked.

        Edit: I think what I’m remembering is that you can define the cookies by site/domain, and restrict to just those. And normally would, for security reasons.

        But some asshole sites like Facebook are cookies that are world-readable for tracking, and this breaks that.

        Someone correct me if I got it wrong.

        • ArchRecord@lemm.ee
          link
          fedilink
          English
          arrow-up
          1
          ·
          22 days ago

          Total Cookie Protection was already a feature, (introduced on Feb 23st 2021) but it was only for people using Firefox’s Enhanced Tracking Protection (ETP) on strict mode.

          They had a less powerful third-party cookie blocking feature for users that didn’t have ETP on strict mode, that blocked third party cookies on specific block lists. (i.e. known tracking companies)

          This just expanded that original functionality, by making it happen on any domain, and have it be the default for all users, rather than an opt-in feature of Enhanced Tracking Protection.

      • ours@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        22 days ago

        As long as it’s not Chromium, I’m happy people aren’t just handing over the keys to the Internet to Google.

      • croaker@lemmy.zip
        link
        fedilink
        English
        arrow-up
        0
        ·
        21 days ago

        I haven’t seen anything to signal Mozilla is untrustworthy other than from that one right wing guy with a chip on his shoulder.

        • FiniteBanjo@lemmy.today
          link
          fedilink
          English
          arrow-up
          0
          arrow-down
          1
          ·
          edit-2
          21 days ago

          The Mozilla Corporation is a for profit entity owned by the non-profit Mozilla Foundation, which lets them claim to be a nonprofit, which is a sketchy looking way to set up and promote your business if nothing else. They get most of their money from Google and they’ve been riding AI like all the other unethical companies.

          I see absolutely no reason to give them a chance, either. Just use an actual open source build instead of the mainstream one.

    • Doug7070@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      21 days ago

      You’re aware that LibreWolf is a Firefox fork, right? The quote is literally “major browser”, which obviously precludes fairly niche forks.

      • TCB13@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        20 days ago

        Of course I am… and that’s the point. Librewolf is Firefox without the spyware.

        • Doug7070@lemmy.world
          link
          fedilink
          English
          arrow-up
          0
          ·
          19 days ago

          But it’s not a “major browser.” It’s a niche fork that has valuable adjustments for power users, but would be unusable for your average non-technically inclined user. I use Librewolf myself and appreciate it, but it’s not something you can just drop on an older relative’s machine and expect to work fine. Firefox has plenty of issues out of the box with sneaking in ads and telemetry, but at the same time you still have to understand that it’s an important player in the market despite its flaws because it’s the only real mainstream competitor to an entirely Chromium-based ecosystem, and despite the issues it does have, it’s still lightyears ahead of Chrome.

  • intensely_human@lemm.ee
    link
    fedilink
    English
    arrow-up
    0
    ·
    22 days ago

    Aren’t cookies already limited to the site at which they were created??

    What the fuck? You mean to tell me sites have been sharing cookies?

    I thought all browsers only delivered cookies back to the same site.

    • Dave@lemmy.nz
      link
      fedilink
      English
      arrow-up
      0
      ·
      22 days ago

      The problem is that a website is generally not served from one domain.

      Put a Facebook like button on your website, it’s loaded directly from Facebook servers. Now they can put a cookie on your computer with an identifier.

      Now every site you visit with a Facebook like button, they know it was you. They can watch you as you move around the web.

      Google does this at a larger scale. Every site with Google ads on it. Every site using Google analytics. Every site that embeds a Google map. They can stick a cookie in and know you were there.

      • MonkderVierte@lemmy.ml
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        21 days ago

        Put a Facebook like button on your website, it’s loaded directly from Facebook servers. Now they can put a cookie on your computer with an identifier.

        Which is not allowed by GDPR btw, because they do that even if you don’t click them. There are plenty guides online, how to create your own, not tracking, facebook like button.

  • slowcakes@programming.dev
    link
    fedilink
    English
    arrow-up
    0
    arrow-down
    1
    ·
    21 days ago

    Yes we are going to enable this feature that is going to be irrelevant in the future, because where building an API in the browser to fetch browser History…

    Yeah maybe 10 years late…