4 ms·
FireFox just follows in the steps of Chrome now. Whatever Google decides Firefox will just go along with it.
by gscott 6y ago
FireFox just follows in the steps of Chrome now. Whatever Google decides Firefox will just go along with it.
- youngtaff 6y agoAs far as consumer usage goes Firefox is effectively dead It's rare that see FF usage above 1% on any of my customers' sites and I think it's only at something like 2% on gov.uk Of course there's a debate to be had over how much FF users blocking analytics affects the numbers but the numbers tie up with the log mining I've done too
- 0xy 6y agoHence why Firefox fully implemented the privacy disaster known as the AudioContext API, which leaks sensitive information about your audio peripherals without your consent or notification, even on sites with no audio whatsoever. It's abused almost exclusively by ad networks, including Google's DoubleClick on major sites like StackOverflow. These new APIs are used almost entirely for fingerprinting, and this was implemented after the Chrome team claimed they would carefully consider the security ramifications of new APIs. I guess it doesn't matter if the business unit next door prints money as a result.
- junon 6y agoThis is the first I've heard of this - why is it being downvoted? I'd like to know more. Do you have any more info about this?
- 0xy 6y agoSure do. StackOverflow's Google ad partner explicitly allows the abuse of AudioContext and other audio APIs for tracking purposes, ruining user security. [1] These APIs leak sensitive information about your peripherals without your consent or notification [2], and is used rampantly on Google's ad network. Try it yourself and see. Simply open up the browser console and type: (new AudioContext()) Google Chrome developers have claimed that they consider privacy and security while implementing APIs, while they actively tear down privacy and destroy security (which benefits Google's ad unit). The separation between Google Chrome's security team and DoubleClick, is, in my opinion, non-existent. As another example, DoubleClick has a hard-coded backdoor in Chrome that sends a unique browser install ID as telemetry via headers to DoubleClick domains in all requests. [3] [1] https://meta.stackexchange.com/questions/332229/stack-overflow-is-not-trying-to-start-audio https://meta.stackexchange.com/questions/332229/stack-overfl... [2] https://developer.mozilla.org/en-US/docs/Web/API/AudioContext https://developer.mozilla.org/en-US/docs/Web/API/AudioContex... [3] https://chromium.googlesource.com/chromium/src/+/e51dcb0c148a1b0ab0080808d8d1b914d02f6057/chrome/browser/metrics/variations/variations_http_header_provider.cc https://chromium.googlesource.com/chromium/src/+/e51dcb0c148...
- junon 6y agoThank you, I've got some reading to do.