2280

Firefox rolls out Total Cookie Protection by default to all desktop users worldwide | It is Firefox’s strongest privacy protection to date, confining cookies to the site where they were created (blog.mozilla.org)

submitted 3 months ago by ForgottenFlux@lemmy.world to c/technology@lemmy.world

226 comments fedilink hide all child comments

(page 3) 50 comments

sorted by: hot top controversial new old

[-] Cosmicomical@lemmy.world 5 points 3 months ago

Does this stop me from adding to my website an iframe to facebook where facebook can keep its cookies for my user? That would be great but I doubt it.

[-] monogram@feddit.nl 5 points 3 months ago

IIRC an iframe contents is treated as a separate window, so cookies aren’t shared either

[-] Feyd@programming.dev 6 points 3 months ago

https://developer.mozilla.org/en-US/docs/Web/API/Window/postMessage

[-] monogram@feddit.nl 2 points 3 months ago

That’s horrific WHY?

do not add any event listeners for message events. This is a completely foolproof way to avoid security problems. 🤡🤡🤡🤡🤡🤡🤡🤡🤡🤡🤡

[-] Cosmicomical@lemmy.world 2 points 3 months ago

Sure, but the separate window can be on a different domain. Now you have a way to share cookies across multiple websites on different domains if all of them include an iframe to this external domain. And you can use in-browser messages (see window.postMessage()) to communicate between iframes and main window.

load more comments (1 replies)

[-] Psythik@lemmy.world 3 points 3 months ago* (last edited 3 months ago)

I haven't worked with HTML since 1999; I hate that I'm just now finding out that iframes are somehow still a thing in the modern world. What the actual fuck. Why? Don't we have some fancy HTML5 or Ajax or something that can replace them?

[-] Cosmicomical@lemmy.world 2 points 3 months ago

Yeah i don't know why, probably exactly because is such a neglected feature that it offers workarounds for some limitations, like in the case of cookie-related patterns.

load more comments (1 replies)

[-] 01189998819991197253@infosec.pub 4 points 3 months ago

They call it TCP. All we need now is IP, and we'll be set lol

[-] unemployedclaquer@sopuli.xyz 3 points 3 months ago

Nah math is bad for internet.

[-] foremanguy92_@lemmy.ml 4 points 3 months ago

Maybe they should try to develop the uBlock Origin extension with the dev to make it last more.

[-] calcopiritus@lemmy.world 3 points 3 months ago

Does making it the default also set it on my already-downloaded Firefox or only to new downloads? Just to know if I'll have to manually set it.

[-] FiskFisk33@startrek.website 4 points 3 months ago

It very probably wont change your settings for you. That would be super annoying if it changed things you set on purpose.

load more comments (1 replies)

load more comments

this post was submitted on 28 Aug 2024

2280 points (99.3% liked)

Technology

59757 readers

2233 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 2 years ago

MODERATORS