5 ms·

Just in case you're unaware, you've seen Container Tabs, right? Now exactly what you want, but a pretty big step towards it. Containers are built-in; this exte

by joecot 8y ago

Just in case you're unaware, you've seen Container Tabs, right? Now exactly what you want, but a pretty big step towards it. Containers are built-in; this extension adds the interface for showing it per tab. https://addons.mozilla.org/en-US/firefox/addon/multi-account-containers/ https://addons.mozilla.org/en-US/firefox/addon/multi-account...

rolleiflex 8y ago
Yeah, I know it's a big step towards it. But it's not tab isolation — what I want is a container for every tab by default. In other words, if you can think of containerising a website as a blacklist, I don't want a blacklist, I want a whitelist, everything should be containerised by default on every tab.
- nicoburns 8y ago
  You could almost certainly build this as an extension if you wanted to. It's basically what the "Facebook Container" extension does, except that extension only does it for facebook.com.
  - erinnh 8y ago
    There are extensions for this. Temporary Container (for temporary sites)+Multi-Account Container (for sites you want to allow to keep cookies etc)
- NikolaeVarius 8y ago
  https://addons.mozilla.org/en-US/firefox/addon/temporary-containers/ https://addons.mozilla.org/en-US/firefox/addon/temporary-con... Doesn't this already do it?
rsync 8y ago
"Just in case you're unaware, you've seen Container Tabs, right? Now exactly what you want, but a pretty big step towards it." Container tabs are better than nothing but what I have been wishing for for years is the ability to chroot jail a GUI application. There would be very little performance penalty (vs. a full VM for each browser) since you aren't emulating the entire machine - it's just a chroot. The idea is that in addition to their own root store of cookies/metadata/history/etc., each browser container could have its own IP address. I don't want to just keep my banking tab from talking to my throwaway-gmail-account tab - I want them to operate on different networks. You can do this right now, with significant performance penalty, by running a full blown VM for each browser. There should be a way to run a GUI app in a chroot jail, but displaying to the same display. EDIT: In fact, I have lamented this not existing for so many years I think I will have rsync.net fund it...
- e12e 8y ago
  This is what firejail tries to do? https://github.com/netblue30/firejail https://github.com/netblue30/firejail Anything beyond that, and I think you need qubes-os: https://www.qubes-os.org/ https://www.qubes-os.org/

by joecot 8y ago

rolleiflex 8y ago

Yeah, I know it's a big step towards it. But it's not tab isolation — what I want is a container for every tab by default. In other words, if you can think of containerising a website as a blacklist, I don't want a blacklist, I want a whitelist, everything should be containerised by default on every tab.

nicoburns 8y ago
You could almost certainly build this as an extension if you wanted to. It's basically what the "Facebook Container" extension does, except that extension only does it for facebook.com.
- erinnh 8y ago
  There are extensions for this. Temporary Container (for temporary sites)+Multi-Account Container (for sites you want to allow to keep cookies etc)
NikolaeVarius 8y ago
https://addons.mozilla.org/en-US/firefox/addon/temporary-containers/ https://addons.mozilla.org/en-US/firefox/addon/temporary-con... Doesn't this already do it?

rsync 8y ago

"Just in case you're unaware, you've seen Container Tabs, right? Now exactly what you want, but a pretty big step towards it." Container tabs are better than nothing but what I have been wishing for for years is the ability to chroot jail a GUI application. There would be very little performance penalty (vs. a full VM for each browser) since you aren't emulating the entire machine - it's just a chroot. The idea is that in addition to their own root store of cookies/metadata/history/etc., each browser container could have its own IP address. I don't want to just keep my banking tab from talking to my throwaway-gmail-account tab - I want them to operate on different networks. You can do this right now, with significant performance penalty, by running a full blown VM for each browser. There should be a way to run a GUI app in a chroot jail, but displaying to the same display. EDIT: In fact, I have lamented this not existing for so many years I think I will have rsync.net fund it...

e12e 8y ago
This is what firejail tries to do? https://github.com/netblue30/firejail https://github.com/netblue30/firejail Anything beyond that, and I think you need qubes-os: https://www.qubes-os.org/ https://www.qubes-os.org/