5 ms·

Ah, third-party cookies, the bad idea to begin with, is causing problems again. Hopefully this will force browser vendors to disable that misfeature by default

• lossolo 10y ago
  You mean those vendors that make money using third party cookies to track users?
  • Grom_PE 10y ago
    Sure. Those who haven't modernized their money-making technologies yet should stop relying on this security hole. There are alternatives.
    • lossolo 10y ago
      If this would be so simple you would not see flash anywhere in the web for years already. Unfortunately it's not the case.
      • beedogs 10y ago
        I haven't seen flash on the web in years, because I've uninstalled it. Good riddance to bad rubbish.
  • gcb0 10y ago
    why not call them by name: google
• cesarb 10y ago
  Another option, for those sites which rely on third-party cookies to work (they're rare, but they do exist; so far, I've only found one), would be to scope the third-party cookies. That is, if both foo.com and bar.com do a request to thirdparty.com, each would have their own set of cookies for thirdparty.com, and both would be different from the cookies used when thirdparty.com is accessed directly.
• gima 10y ago
  Does the Firefox option "Accept third-party cookies: Never" mean that origin server is disallowed from setting 3rd-party cookies OR that website-initiated fetches to 3rd-party origins don't include cookies ..or both?
  • Grom_PE 10y ago
    This setting disables both reading and writing third-party cookies. I just found a cookie testing webpage: https://www.grc.com/cookies/forensics.htm https://www.grc.com/cookies/forensics.htm