4 ms·

I value my privacy and use Firefox. Honestly, I have trust issues with volatile “security focused” forks. I feel the risk of them been tampered are greater than

by sdf4j 2y ago

I value my privacy and use Firefox. Honestly, I have trust issues with volatile “security focused” forks. I feel the risk of them been tampered are greater than the marginal gains.

threeseed 2y ago
Firefox like Chrome still allows long-lived i.e. 400 days first party cookies. This is being abused by advertisers to track you across the web. If they do care about privacy it would be good for them to copy Safari and make this 7 days.
- yjftsjthsd-h 2y ago
  > If they do care about privacy it would be good for them to copy Safari and make this 7 days. If I get logged out of every website on a weekly basis I'm going to be annoyed. > This is being abused by advertisers to track you across the web. How do they use first party cookies to track you?
  - davidfischer 2y ago
    There's a few ways first party cookies can track you. Probably the biggest single way is Google Analytics which by default uses only first party cookies. Even without cookies at all, GA could track you across the web although first party cookies do make this a little easier and "better". However, first party cookies can help trackers in other ways like for CNAME cloaking[1] which basically makes a first-party cookie function similarly to a third-party one. Disclosure: I work for a small privacy focused ad company. [1] https://webkit.org/blog/11338/cname-cloaking-and-bounce-tracking-defense/ https://webkit.org/blog/11338/cname-cloaking-and-bounce-trac...
  - threeseed 2y ago
    > If I get logged out of every website on a weekly basis I'm going to be annoyed. Then those websites should move to Passkeys. > How do they use first party cookies to track you? Because Meta and Google allows websites to submit advertising data to them server side using a self-hosted JS file which sets the first party cookies on your behalf.
    - yjftsjthsd-h 2y ago
      > Because Meta and Google allows websites to submit advertising data to them server side using a self-hosted JS How does ex. 7d expiration help with that?
  - majorchord 2y ago
    > How do they use first party cookies to track you? domain fronting
- cpeterso 2y ago
  Does a 7 day expiration matter if the tracker can just set new cookies with new 7 day expiration dates as it tracks you? Also, Firefox partitions cookies by site (aka Total Cookie Protection), so first-party facebook.com cookies, cross-site facebook.com cookies on example.com, and cross-site facebook.com cookies on example.net all get separate cookie jars. https://blog.mozilla.org/security/2021/02/23/total-cookie-protection/ https://blog.mozilla.org/security/2021/02/23/total-cookie-pr...
  - threeseed 2y ago
    Total Cookie Protection is a completely useless feature. Advertising industry has been moving to first party cookies ever since Apple implemented ITP.

by sdf4j 2y ago

I value my privacy and use Firefox. Honestly, I have trust issues with volatile “security focused” forks. I feel the risk of them been tampered are greater than the marginal gains.

threeseed 2y ago

Firefox like Chrome still allows long-lived i.e. 400 days first party cookies. This is being abused by advertisers to track you across the web. If they do care about privacy it would be good for them to copy Safari and make this 7 days.

yjftsjthsd-h 2y ago
> If they do care about privacy it would be good for them to copy Safari and make this 7 days. If I get logged out of every website on a weekly basis I'm going to be annoyed. > This is being abused by advertisers to track you across the web. How do they use first party cookies to track you?
- davidfischer 2y ago
  There's a few ways first party cookies can track you. Probably the biggest single way is Google Analytics which by default uses only first party cookies. Even without cookies at all, GA could track you across the web although first party cookies do make this a little easier and "better". However, first party cookies can help trackers in other ways like for CNAME cloaking[1] which basically makes a first-party cookie function similarly to a third-party one. Disclosure: I work for a small privacy focused ad company. [1] https://webkit.org/blog/11338/cname-cloaking-and-bounce-tracking-defense/ https://webkit.org/blog/11338/cname-cloaking-and-bounce-trac...
- threeseed 2y ago
  > If I get logged out of every website on a weekly basis I'm going to be annoyed. Then those websites should move to Passkeys. > How do they use first party cookies to track you? Because Meta and Google allows websites to submit advertising data to them server side using a self-hosted JS file which sets the first party cookies on your behalf.
  - yjftsjthsd-h 2y ago
    > Because Meta and Google allows websites to submit advertising data to them server side using a self-hosted JS How does ex. 7d expiration help with that?
- majorchord 2y ago
  > How do they use first party cookies to track you? domain fronting
cpeterso 2y ago
Does a 7 day expiration matter if the tracker can just set new cookies with new 7 day expiration dates as it tracks you? Also, Firefox partitions cookies by site (aka Total Cookie Protection), so first-party facebook.com cookies, cross-site facebook.com cookies on example.com, and cross-site facebook.com cookies on example.net all get separate cookie jars. https://blog.mozilla.org/security/2021/02/23/total-cookie-protection/ https://blog.mozilla.org/security/2021/02/23/total-cookie-pr...
- threeseed 2y ago
  Total Cookie Protection is a completely useless feature. Advertising industry has been moving to first party cookies ever since Apple implemented ITP.