6 ms·

I often think that instead of completely blocking cookies, it would be better to accept them and then throw them away. Same with localStorage. Just store it tem

by mcv 4y ago

I often think that instead of completely blocking cookies, it would be better to accept them and then throw them away. Same with localStorage. Just store it temporarily.

admax88qqq 4y ago
That's basically incognito/private browsing mode.
- stinos 4y ago
  Just wondering, is there a fully automatic way in e.g. FF to do this? Like right-click 'open in new private tab which automatically accepts all cookie dialogs' ?
- sabjut 4y ago
  Are there ways to do this while whitelisting sites where you want to retain and keep login tokens?
  - handity 4y ago
    Cookie AutoDelete
  - jonas-w 4y ago
    Firefox has this when you say delete browsing data on close, next to it is a manage exceptions button
stickfigure 4y ago
This is the answer. Blocking the APIs is just asking for a broken internet, and I have very little sympathy. Furthermore, blocking the API is a detectable characteristic and increases the surface area of your fingerprint. It has exactly the opposite of the intended effect on privacy.
npteljes 4y ago
I do this with Firefox's Temporary Containers. Every manually opened tab is a new browsing session, with no cookies etc. Closed tabs' data get deleted after 15 mins. Fantastic addon, and the usage is as seamless as it gets. https://addons.mozilla.org/en-US/firefox/addon/temporary-containers/ https://addons.mozilla.org/en-US/firefox/addon/temporary-con...
- discardedrefuse 4y ago
  I do this too! I pair Temporary Containers with the Containerise add-on which lets me create persistent containers for a few specific sites that I want stay logged in to. This setup works well with one glaring exception... Cloudflare and their stupid boats. Using temporary containers for everything has really shone a light on just how much of the web Cloudflare is gobbling up. Cloudflare throws a captcha at me every time I visit any website they gatekeep for. I'm talking mostly about random sites that turn up in web searches. Its annoying enough that when I encounter a Cloudflare captcha, I just close the tab and try the next site. Now I'm wondering if there's a way to eliminate results from web searches that use Cloudflare with something like the uBlackList add-on.
  - npteljes 4y ago
    I do something very similar, but with just the built-in Multi-Account Containers addon. Although its usage is not the most intuitive.
cbsks 4y ago
I’ve been using Cookie AutoDelete for that purpose for the last few years. It works flawlessly for me and brings me comfort in knowing that I am only being tracked online by my browser fingerprint and IP. https://addons.mozilla.org/en-US/firefox/addon/cookie-autodelete/ https://addons.mozilla.org/en-US/firefox/addon/cookie-autode...
- egoisticalgoat 4y ago
  I do the same! The whitelisting is the best part, since now i can stay logged in to sites that i trust not to track me.
- bmismyname 4y ago
  Same, I absolutely love this extension. You can whitelist the websites you use frequently, and for everything else it's like a groundhog day every day. The cookie banners can be super annoying sometimes, but they are easily removed with uBlock Origin. I also frequently have to solve captchas, but it's not so bad. For example, every time I visit amazon.com to order toilet paper or whatever, it thinks I'm a bot, but at least amazon's captchas are less annoying than some of the others.
  - hennell 4y ago
    A bot with a bowel apparently.
  - vxNsr 4y ago
    If you go to Amazon a lot why not whitelist?
    - worble 4y ago
      I personally wouldn't whitelist any site that has my card details saved.
    - soperj 4y ago
      One of the last companies I'd whitelist.
Comevius 4y ago
This is how I use Firefox, things only stored for the session, for the given container. Containers are better than first-party isolation, because many sites expect to share data with third-parties. It is also better to fake API responses than to block access to them. In Firefox the privacy.resistFingerprinting option takes care of this. It was originally developed for the Tor Browser.
sdflhasjd 4y ago
Unfortunately doesn't signal the rejection of tracking by things like fingerprinting.
marcosdumay 4y ago
Well, I've reacted to the article with an "of course, the Google's browser breaks everything if you try to block tracking". There is absolutely no reason for letting the javascript know that you've blocked some functionality. It just adds new tracking. Anyway, the sensible thing to do is to store the values for the lifetime of the page. Simply throwing them away can be an option, but it's a bad default. Non ad based browsers do get it.
- aendruk 4y ago
  > absolutely no reason An editor warning you that your work hasn’t been saved?
  - oconnor663 4y ago
    Or a page settings/preferences dialog reminding you that saving your settings isn't going to work. Sure maybe the user "should know that", but not everyone is totally in command of their own browser's settings. Or a game warning you that your progress will be lost. There must be tons of legit use cases.
josefresco 4y ago
"Delete cookies and site data when Firefox is closed"
- abrookewood 4y ago
  Yes, this is the way. Only issue is needing to login to everything again on restart/reboot, but it's a small price to pay.
  - kevin_thibedeau 4y ago
    There are extensions that will aggressively delete cookies while letting you maintain a whitelist.
  - fdgdd 4y ago
    "Manage Exceptions…"
pessimizer 4y ago
I pick between the two. Of late that responsibility has been pretty well taken care of by the Forget Me Not extension on Firefox, although I think it's endangered (like a lot of things that have to do with Firefox and its extensions.) You can set rules with three clicks, four clicks if you want that rule to be temporary and thrown away on browser restart. You may choose between never deleting, deleting on browser close, deleting on tab close, or just throwing them away. The initial setup for default policy has a few UI issues, but the author put a lot of work into it. https://addons.mozilla.org/en-US/firefox/addon/forget_me_not/ https://addons.mozilla.org/en-US/firefox/addon/forget_me_not...
yashap 4y ago
Agreed - Firefox have very legit, useable workflows for avoiding tracking while still having the web function for you. Chrome has IMO a purposefully unusable approach. It’s theatre, they give you the option, but that option breaks the web so badly that you’re not going to want to use it. Which makes sense, they’re an ad sales company, tracking is crucial to their business.
Maursault 4y ago
I agree. Private browsing takes care of this for me. I close the tab, cookies are deleted, and I will randomly confirm this occurs occasionally just to be certain. There's no need to get all OCD or self-righteous about cookies when Javascript is the scourge. I can not respect any that block cookies but do not surf with Javascript disabled. Though html5 has nearly but not quite made Javascript irrelevant, the scourge seems to now be built in to html.
oliwary 4y ago
Maybe. I run a word game (https://squareword.org https://squareword.org) that uses localstorage to store stats. This allows me to give users statistics without requiring any sort of account or signup. Even so, I often hear from people that have their stats cleared, for example by iOS evicting localstorage after 7 days of not visiting a site.
deleted 4y ago
[deleted]
creatonez 4y ago
Check out Forget Me Not - https://addons.mozilla.org/en-US/firefox/addon/forget_me_not/ https://addons.mozilla.org/en-US/firefox/addon/forget_me_not...

by mcv 4y ago

I often think that instead of completely blocking cookies, it would be better to accept them and then throw them away. Same with localStorage. Just store it temporarily.

admax88qqq 4y ago

That's basically incognito/private browsing mode.

stinos 4y ago
Just wondering, is there a fully automatic way in e.g. FF to do this? Like right-click 'open in new private tab which automatically accepts all cookie dialogs' ?
sabjut 4y ago
Are there ways to do this while whitelisting sites where you want to retain and keep login tokens?
- handity 4y ago
  Cookie AutoDelete
- jonas-w 4y ago
  Firefox has this when you say delete browsing data on close, next to it is a manage exceptions button

stickfigure 4y ago

This is the answer. Blocking the APIs is just asking for a broken internet, and I have very little sympathy. Furthermore, blocking the API is a detectable characteristic and increases the surface area of your fingerprint. It has exactly the opposite of the intended effect on privacy.

npteljes 4y ago

I do this with Firefox's Temporary Containers. Every manually opened tab is a new browsing session, with no cookies etc. Closed tabs' data get deleted after 15 mins. Fantastic addon, and the usage is as seamless as it gets. https://addons.mozilla.org/en-US/firefox/addon/temporary-containers/ https://addons.mozilla.org/en-US/firefox/addon/temporary-con...

discardedrefuse 4y ago
I do this too! I pair Temporary Containers with the Containerise add-on which lets me create persistent containers for a few specific sites that I want stay logged in to. This setup works well with one glaring exception... Cloudflare and their stupid boats. Using temporary containers for everything has really shone a light on just how much of the web Cloudflare is gobbling up. Cloudflare throws a captcha at me every time I visit any website they gatekeep for. I'm talking mostly about random sites that turn up in web searches. Its annoying enough that when I encounter a Cloudflare captcha, I just close the tab and try the next site. Now I'm wondering if there's a way to eliminate results from web searches that use Cloudflare with something like the uBlackList add-on.
- npteljes 4y ago
  I do something very similar, but with just the built-in Multi-Account Containers addon. Although its usage is not the most intuitive.

cbsks 4y ago

I’ve been using Cookie AutoDelete for that purpose for the last few years. It works flawlessly for me and brings me comfort in knowing that I am only being tracked online by my browser fingerprint and IP. https://addons.mozilla.org/en-US/firefox/addon/cookie-autodelete/ https://addons.mozilla.org/en-US/firefox/addon/cookie-autode...

egoisticalgoat 4y ago
I do the same! The whitelisting is the best part, since now i can stay logged in to sites that i trust not to track me.
bmismyname 4y ago
Same, I absolutely love this extension. You can whitelist the websites you use frequently, and for everything else it's like a groundhog day every day. The cookie banners can be super annoying sometimes, but they are easily removed with uBlock Origin. I also frequently have to solve captchas, but it's not so bad. For example, every time I visit amazon.com to order toilet paper or whatever, it thinks I'm a bot, but at least amazon's captchas are less annoying than some of the others.
- hennell 4y ago
  A bot with a bowel apparently.
- vxNsr 4y ago
  If you go to Amazon a lot why not whitelist?
  - worble 4y ago
    I personally wouldn't whitelist any site that has my card details saved.
  - soperj 4y ago
    One of the last companies I'd whitelist.

Comevius 4y ago

This is how I use Firefox, things only stored for the session, for the given container. Containers are better than first-party isolation, because many sites expect to share data with third-parties. It is also better to fake API responses than to block access to them. In Firefox the privacy.resistFingerprinting option takes care of this. It was originally developed for the Tor Browser.

sdflhasjd 4y ago

Unfortunately doesn't signal the rejection of tracking by things like fingerprinting.

marcosdumay 4y ago

Well, I've reacted to the article with an "of course, the Google's browser breaks everything if you try to block tracking". There is absolutely no reason for letting the javascript know that you've blocked some functionality. It just adds new tracking. Anyway, the sensible thing to do is to store the values for the lifetime of the page. Simply throwing them away can be an option, but it's a bad default. Non ad based browsers do get it.

aendruk 4y ago
> absolutely no reason An editor warning you that your work hasn’t been saved?
- oconnor663 4y ago
  Or a page settings/preferences dialog reminding you that saving your settings isn't going to work. Sure maybe the user "should know that", but not everyone is totally in command of their own browser's settings. Or a game warning you that your progress will be lost. There must be tons of legit use cases.

josefresco 4y ago

"Delete cookies and site data when Firefox is closed"

abrookewood 4y ago
Yes, this is the way. Only issue is needing to login to everything again on restart/reboot, but it's a small price to pay.
- kevin_thibedeau 4y ago
  There are extensions that will aggressively delete cookies while letting you maintain a whitelist.
- fdgdd 4y ago
  "Manage Exceptions…"

pessimizer 4y ago

I pick between the two. Of late that responsibility has been pretty well taken care of by the Forget Me Not extension on Firefox, although I think it's endangered (like a lot of things that have to do with Firefox and its extensions.) You can set rules with three clicks, four clicks if you want that rule to be temporary and thrown away on browser restart. You may choose between never deleting, deleting on browser close, deleting on tab close, or just throwing them away. The initial setup for default policy has a few UI issues, but the author put a lot of work into it. https://addons.mozilla.org/en-US/firefox/addon/forget_me_not/ https://addons.mozilla.org/en-US/firefox/addon/forget_me_not...

yashap 4y ago

Agreed - Firefox have very legit, useable workflows for avoiding tracking while still having the web function for you. Chrome has IMO a purposefully unusable approach. It’s theatre, they give you the option, but that option breaks the web so badly that you’re not going to want to use it. Which makes sense, they’re an ad sales company, tracking is crucial to their business.

Maursault 4y ago

I agree. Private browsing takes care of this for me. I close the tab, cookies are deleted, and I will randomly confirm this occurs occasionally just to be certain. There's no need to get all OCD or self-righteous about cookies when Javascript is the scourge. I can not respect any that block cookies but do not surf with Javascript disabled. Though html5 has nearly but not quite made Javascript irrelevant, the scourge seems to now be built in to html.

oliwary 4y ago

Maybe. I run a word game (https://squareword.org https://squareword.org) that uses localstorage to store stats. This allows me to give users statistics without requiring any sort of account or signup. Even so, I often hear from people that have their stats cleared, for example by iOS evicting localstorage after 7 days of not visiting a site.

deleted 4y ago

[deleted]

creatonez 4y ago

Check out Forget Me Not - https://addons.mozilla.org/en-US/firefox/addon/forget_me_not/ https://addons.mozilla.org/en-US/firefox/addon/forget_me_not...