• ngwoo@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      1 month ago

      Advertisers track you with device fingerprinting and behaviour profiling now. Firefox doesn’t do much to obscure the more advanced methods of tracking.

        • hoot@lemmy.ca
          link
          fedilink
          English
          arrow-up
          0
          ·
          1 month ago

          Lots do. But do you know anyone that turns JS off anymore? Platforms don’t care if they miss the odd user for this - because almost no one will be missed.

          • undefined@links.hackliberty.org
            link
            fedilink
            English
            arrow-up
            1
            ·
            edit-2
            1 month ago

            I go hard with DNS-based ad blocking and I’m constantly confirming it works by checking the network tab in developer tools. I’m basically only seeing first party scripts and CDN assets — 99% of websites load all the tracking garbage from third-party domains that can be easily blocked.

          • pixelscript@lemm.ee
            link
            fedilink
            English
            arrow-up
            1
            ·
            1 month ago

            “Anymore”? I’ve never met a single soul who knows this is even possible. I myself don’t even know how to do it if I wanted to.

            I do use NoScript, which does this on a site-by-site basis, but even that is considered extremely niche. I’ve never met another NoScripter in the wild.

            • BalooWasWahoo@links.hackliberty.org
              link
              fedilink
              English
              arrow-up
              0
              ·
              1 month ago

              The people who I’ve tried to get on NoScript seem to have the brain capacity of goldfish. If the site doesn’t instantly work, it’s as if the sky has fallen and there is no way to convince them to pay attention to which scripts are actually needed.

              It’s a rare breed that is willing to put up with toggling different scripts on and off. I’ll also acknowledge that too many people (including me) are in a giant rush. For work-type stuff, I have the laptop without noscript, because sometimes I do need something to work absolutely right now.

              • papabobolious@feddit.nu
                link
                fedilink
                English
                arrow-up
                1
                ·
                1 month ago

                You don’t think you are being a tad judgemental?

                People whose lives revolve around fashion probably think you dress like shit.

                People who love food probably think you eat like shit.

                People who love cars probably think you are a shit driver.

                You probably love computers and care about privacy, and you are shitting on regular users(assumption, admittedly) for not being invested.

                They had something that was working, you present noscript, thing no longer works. If you are not invested, how are you going to see the appeal of extra work?

  • ArchRecord@lemm.ee
    link
    fedilink
    English
    arrow-up
    5
    ·
    1 month ago

    For those who don’t care to read the full article:

    This basically just confines any cookies generated on a page, to just that page.

    So, instead of a cookie from, say, Facebook, being stored on site A, then requested for tracking purposes on site B, each individual site would be sent its own separate Facebook cookie, that only gets used on that site, preventing it from tracking you anywhere outside of the specific site you got it from in the first place.

    • peopleproblems@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      1 month ago

      Hahahahaha so it doesn’t break anything that still relies on cookies, but neuters the ability to share them.

      That’s awesome

      • ripcord@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        1 month ago

        Honestly, I thought that’s how it already worked.

        Edit: I think what I’m remembering is that you can define the cookies by site/domain, and restrict to just those. And normally would, for security reasons.

        But some asshole sites like Facebook are cookies that are world-readable for tracking, and this breaks that.

        Someone correct me if I got it wrong.

        • ArchRecord@lemm.ee
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 month ago

          Total Cookie Protection was already a feature, (introduced on Feb 23st 2021) but it was only for people using Firefox’s Enhanced Tracking Protection (ETP) on strict mode.

          They had a less powerful third-party cookie blocking feature for users that didn’t have ETP on strict mode, that blocked third party cookies on specific block lists. (i.e. known tracking companies)

          This just expanded that original functionality, by making it happen on any domain, and have it be the default for all users, rather than an opt-in feature of Enhanced Tracking Protection.

      • ours@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 month ago

        As long as it’s not Chromium, I’m happy people aren’t just handing over the keys to the Internet to Google.

      • croaker@lemmy.zip
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 month ago

        I haven’t seen anything to signal Mozilla is untrustworthy other than from that one right wing guy with a chip on his shoulder.

        • FiniteBanjo@lemmy.today
          link
          fedilink
          English
          arrow-up
          0
          arrow-down
          1
          ·
          edit-2
          1 month ago

          The Mozilla Corporation is a for profit entity owned by the non-profit Mozilla Foundation, which lets them claim to be a nonprofit, which is a sketchy looking way to set up and promote your business if nothing else. They get most of their money from Google and they’ve been riding AI like all the other unethical companies.

          I see absolutely no reason to give them a chance, either. Just use an actual open source build instead of the mainstream one.

  • intensely_human@lemm.ee
    link
    fedilink
    English
    arrow-up
    0
    ·
    1 month ago

    Aren’t cookies already limited to the site at which they were created??

    What the fuck? You mean to tell me sites have been sharing cookies?

    I thought all browsers only delivered cookies back to the same site.

    • Dave@lemmy.nz
      link
      fedilink
      English
      arrow-up
      0
      ·
      1 month ago

      The problem is that a website is generally not served from one domain.

      Put a Facebook like button on your website, it’s loaded directly from Facebook servers. Now they can put a cookie on your computer with an identifier.

      Now every site you visit with a Facebook like button, they know it was you. They can watch you as you move around the web.

      Google does this at a larger scale. Every site with Google ads on it. Every site using Google analytics. Every site that embeds a Google map. They can stick a cookie in and know you were there.

      • MonkderVierte@lemmy.ml
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        1 month ago

        Put a Facebook like button on your website, it’s loaded directly from Facebook servers. Now they can put a cookie on your computer with an identifier.

        Which is not allowed by GDPR btw, because they do that even if you don’t click them. There are plenty guides online, how to create your own, not tracking, facebook like button.

  • slowcakes@programming.dev
    link
    fedilink
    English
    arrow-up
    0
    arrow-down
    1
    ·
    1 month ago

    Yes we are going to enable this feature that is going to be irrelevant in the future, because where building an API in the browser to fetch browser History…

    Yeah maybe 10 years late…