5 ms·

Please tell me I'm misunderstanding something! By enabling by default the blocking of those third party scripts: https://disconnect.me/trackerprotection/blocked

Please tell me I'm misunderstanding something! By enabling by default the blocking of those third party scripts: https://disconnect.me/trackerprotection/blocked https://disconnect.me/trackerprotection/blocked This Wil have three consequences: Many websites will partially break? Which ones? webmaster will lack many data necessary to understand what users do on their platform, where they missclick, what they don't use etc, thus diminishing the ability of webmasters to make great products. *the most dramatic one: People will see ads but the owner of a website will no longer earn ad money, because those are the third party scripts that allowed to prove to the ad platform that a user had effectively seen X ads.

Nursie 7y ago
Sorry, but as a web user I never signed up for stalking by site owners, nor did I sign up to be stalked across sites by their advertisers. I certainly didn't sign up to let you co-opt my computer to do this. You're going to have to live with it. Get some beta testers onboard maybe.
- jamiequint 7y ago
  Actually you did, because the world does not exist to serve you, it's a mutual transaction between two parties. Websites need to make money and understand how users are using their service so they can survive and improve. 99% of the data anyone is collecting which you call "stalking" is either available in server logs or could be easily modified so that it was. I guess you might just have to stop using the internet.
  - Nursie 7y ago
    Actually I didn't, because it's my device and it will operate how I see fit. This includes not being coopted to spy on me. My only 'contract' with the other party is that I requested some information, and they supplied it. I can render it how I see fit, or not at all. Websites can find a way to operate without this information stream or go bust, it's no skin off my nose one way or another. > 99% of the data anyone is collecting which you call "stalking" is either available in server logs It's very unlikely that server logs will be able to contain mis-clicks and behavioural analytics to the same extent that analytics services use. > I guess you might just have to stop using the internet Or, you know, do exactly what the post I replied to was complaining about and use a browser that takes steps to protect my privacy, various blocking plugins etc etc
    - jamiequint 7y ago
      If you're not paying (via ads or otherwise), and you're actively trying to block analytics which make services better, then you're a leech that should not have access to the content/service. Fortunately blocking the Firefox agent for non-paying users is easy, as is detecting the blocking of these scripts in the case that you try to change the user agent.
      - Nursie 7y ago
        That's fine, block me. I'm not interested in your service anyway if you think you have the right to track everything I do. I'm perfectly happy with that arrangement. I think we ought to make it even more explicit so that folks like yourself get the message. It's my computer not your remote terminal.
zwaps 7y ago
Webmasters should have thought of that before littering their website with hundreds of off-site scripts and packaging all data and behavior and sending it off to dozens of tracking companies. "great products". Yeah, websites used to be much, much better before loading every bit of text with a remote javascript. Here's a behavioral data point: Go back to making good websites and stop leaking private data everywhere. That's a great product.
- antisemiotic 7y ago
  >loading every bit of text with a remote javascript. This update is only about a select list of "bad" domains, though. I don't think most users would want to block literally all third party scripts (Source: I use uMatrix set to do that, and every other site I visit requires a complicated ritual of unblocking layers of scripts, frames, and XHR. Don't even get me started on static sites that display blank without scripts from a dozen CDNs. At least it's a good opportunity to rethink if I really want to go there)
  - zwaps 7y ago
    What good is blocking google tracking subdomains while neatly packaging the exact same data and sending it off to google cdn and tagmanager?
- rhaksw 7y ago
  My website is broken by this feature [1]. It does not leak private data, as Mozilla devs said here [2] > According to the original screenshot in the thread, your web page is sending an HTTP request to https://www.reddit.com/api/v1/access_token https://www.reddit.com/api/v1/access_token. If the user has previously visited reddit.com, this request will include the user's reddit cookies normally. Also, the HTTP request I mentioned before has a Referer header that points to the address of your web page by default in most browsers. So Reddit will be able to tell which user has visited which page on your site. In other word, Reddit will be able to see the user's browsing history, as if they had access to the user's computer. > Note that nobody is blaming you or your site here. [1] https://revddit.com/user/rhaksw https://revddit.com/user/rhaksw [2] https://groups.google.com/d/msg/mozilla.dev.privacy/XO84EzrwWp0/t3cgc7H-AgAJ https://groups.google.com/d/msg/mozilla.dev.privacy/XO84Ezrw...
rhaksw 7y ago
> Many websites will partially break? Which ones? You can get an idea of which sites are blocked by reviewing the list of blocked domains [1] (this includes many APIs, such as reddit.com) and a 5 year old issue where people post websites broken by tracking protection [2]. [1] https://github.com/disconnectme/disconnect-tracking-protection/blob/master/services.json https://github.com/disconnectme/disconnect-tracking-protecti... [2] https://bugzilla.mozilla.org/show_bug.cgi?id=1101005 https://bugzilla.mozilla.org/show_bug.cgi?id=1101005

Nursie 7y ago

Sorry, but as a web user I never signed up for stalking by site owners, nor did I sign up to be stalked across sites by their advertisers. I certainly didn't sign up to let you co-opt my computer to do this. You're going to have to live with it. Get some beta testers onboard maybe.

jamiequint 7y ago
Actually you did, because the world does not exist to serve you, it's a mutual transaction between two parties. Websites need to make money and understand how users are using their service so they can survive and improve. 99% of the data anyone is collecting which you call "stalking" is either available in server logs or could be easily modified so that it was. I guess you might just have to stop using the internet.
- Nursie 7y ago
  Actually I didn't, because it's my device and it will operate how I see fit. This includes not being coopted to spy on me. My only 'contract' with the other party is that I requested some information, and they supplied it. I can render it how I see fit, or not at all. Websites can find a way to operate without this information stream or go bust, it's no skin off my nose one way or another. > 99% of the data anyone is collecting which you call "stalking" is either available in server logs It's very unlikely that server logs will be able to contain mis-clicks and behavioural analytics to the same extent that analytics services use. > I guess you might just have to stop using the internet Or, you know, do exactly what the post I replied to was complaining about and use a browser that takes steps to protect my privacy, various blocking plugins etc etc
  - jamiequint 7y ago
    If you're not paying (via ads or otherwise), and you're actively trying to block analytics which make services better, then you're a leech that should not have access to the content/service. Fortunately blocking the Firefox agent for non-paying users is easy, as is detecting the blocking of these scripts in the case that you try to change the user agent.
    - Nursie 7y ago
      That's fine, block me. I'm not interested in your service anyway if you think you have the right to track everything I do. I'm perfectly happy with that arrangement. I think we ought to make it even more explicit so that folks like yourself get the message. It's my computer not your remote terminal.

zwaps 7y ago

Webmasters should have thought of that before littering their website with hundreds of off-site scripts and packaging all data and behavior and sending it off to dozens of tracking companies. "great products". Yeah, websites used to be much, much better before loading every bit of text with a remote javascript. Here's a behavioral data point: Go back to making good websites and stop leaking private data everywhere. That's a great product.

antisemiotic 7y ago
>loading every bit of text with a remote javascript. This update is only about a select list of "bad" domains, though. I don't think most users would want to block literally all third party scripts (Source: I use uMatrix set to do that, and every other site I visit requires a complicated ritual of unblocking layers of scripts, frames, and XHR. Don't even get me started on static sites that display blank without scripts from a dozen CDNs. At least it's a good opportunity to rethink if I really want to go there)
- zwaps 7y ago
  What good is blocking google tracking subdomains while neatly packaging the exact same data and sending it off to google cdn and tagmanager?
rhaksw 7y ago
My website is broken by this feature [1]. It does not leak private data, as Mozilla devs said here [2] > According to the original screenshot in the thread, your web page is sending an HTTP request to https://www.reddit.com/api/v1/access_token https://www.reddit.com/api/v1/access_token. If the user has previously visited reddit.com, this request will include the user's reddit cookies normally. Also, the HTTP request I mentioned before has a Referer header that points to the address of your web page by default in most browsers. So Reddit will be able to tell which user has visited which page on your site. In other word, Reddit will be able to see the user's browsing history, as if they had access to the user's computer. > Note that nobody is blaming you or your site here. [1] https://revddit.com/user/rhaksw https://revddit.com/user/rhaksw [2] https://groups.google.com/d/msg/mozilla.dev.privacy/XO84EzrwWp0/t3cgc7H-AgAJ https://groups.google.com/d/msg/mozilla.dev.privacy/XO84Ezrw...

rhaksw 7y ago

> Many websites will partially break? Which ones? You can get an idea of which sites are blocked by reviewing the list of blocked domains [1] (this includes many APIs, such as reddit.com) and a 5 year old issue where people post websites broken by tracking protection [2]. [1] https://github.com/disconnectme/disconnect-tracking-protection/blob/master/services.json https://github.com/disconnectme/disconnect-tracking-protecti... [2] https://bugzilla.mozilla.org/show_bug.cgi?id=1101005 https://bugzilla.mozilla.org/show_bug.cgi?id=1101005