<story><title>Facebook Container for Firefox</title><url>https://www.mozilla.org/en-US/firefox/facebookcontainer</url></story><parent_chain><item><author>cornholio</author><text>Third party cookies, and any way to fingerprint a specific user starting from high entropy user agents to screen resolution, font fingerprinting or canvas data, should be considered a breach of the browser security model.&lt;p&gt;All sites should run in containers and no advertiser should be able to track you across sessions. When I want 3rd party interaction, I should need to opt in and connect the current site with Facebook or some other 3rd party.</text></item></parent_chain><comment><author>mih</author><text>Ever encountered Google ReCaptcha when you&amp;#x27;ve turned off third party cookies or while in incognito&amp;#x2F;private mode? It&amp;#x27;s a nightmare, even if you&amp;#x27;re logged into a Google account. You can be shown upto 7-8 challenges, painfully slow loading images and Google&amp;#x27;s insistence that they encountered malicious traffic from your IP when attempting to use the audio version. What&amp;#x27;s even worse is they track your mouse movements and fast solvers like me are penalized since they think I&amp;#x27;m not human anymore.&lt;p&gt;As much as I hate third party cookies, turning them on drastically simplifies the captcha solving process. So much so, I now use a separate browser profile with third party cookies allowed, just for the sake of captcha heavy sites.&lt;p&gt;Given that Google benefits by tracking my activities and free labor from my captcha solving, they will always punish privacy conscious users via such dark patterns.</text></comment>
<story><title>Facebook Container for Firefox</title><url>https://www.mozilla.org/en-US/firefox/facebookcontainer</url></story><parent_chain><item><author>cornholio</author><text>Third party cookies, and any way to fingerprint a specific user starting from high entropy user agents to screen resolution, font fingerprinting or canvas data, should be considered a breach of the browser security model.&lt;p&gt;All sites should run in containers and no advertiser should be able to track you across sessions. When I want 3rd party interaction, I should need to opt in and connect the current site with Facebook or some other 3rd party.</text></item></parent_chain><comment><author>simias</author><text>The security model of the internet is whack. Javascript should be opt-in, especially from 3rd party sources. &amp;quot;This website wants&amp;#x2F;requires javascript for an enhanced viewing experience [allow&amp;#x2F;deny]&amp;quot;. Instead not only will any stock browser gladly run anything thrown at it, it will also accept any cookies and now run WebGL code, trigger DRM engines and various other things. All that because the engineers who wrote the standards had enough hubris to think that a turing complete language with access to such a large API surface (from the DOM to the GPU to threads to a lot of the browser state) could be successfully sandboxed.&lt;p&gt;The web is a lost cause as far I&amp;#x27;m concerned, it was under-engineered at the start and as a result people kept pilling mounds of crap on top to make up for it. What started as a way to display basic markup and images has been arm wrestled into handling complex web applications and videogames. The thing is so complex that it would probably take me less time to write a basic operating system and run Firefox on it than implementing my own browser from scratch on Linux. And despite all of this you end up having to use a billion of 3rd party javascript libraries to do anything remotely complex in the browser, things that have been standard in Qt or GTK since forever with a fraction of the code base and memory footprint.&lt;p&gt;And now people seem to enjoy reimplementing all the internet protocols on top of HTTP. The world has gone mad. I&amp;#x27;m going to get a &amp;quot;gopher should&amp;#x27;ve won&amp;quot; tatoo and live in as an hermit on some nearby mountain.&lt;p&gt;I&amp;#x27;m glad that there appears to be a lot of discussion surrounding internet privacy lately, including in the mainstream. However I think that focusing all the discussion of Facebook is becoming counter-productive. Facebook exploited the weaknesses of the web very successfully but it only exploited tools that existed long before it was created. I have absolutely no illusion that Google &amp;amp; friends are doing pretty much the same thing, and if you have an Android phone the amount of info Google can harvest is nothing short of terrifying when you think about it from an Orwellian perspective. Don&amp;#x27;t miss the forest for the Facetree.&lt;p&gt;Assuming that internet giants will adhere to some &amp;quot;code of conduct&amp;quot; is naive at best. &amp;quot;Do no evil&amp;quot;, yeah right. We let them have to tools to do these things, we need to pry some of them away from their hands through technology and regulation (probably in that order).</text></comment>