this post was submitted on 18 Jun 2024
59 points (91.5% liked)
Firefox
20333 readers
132 users here now
/c/firefox
A place to discuss the news and latest developments on the open-source browser Firefox.
Rules
1. Adhere to the instance rules
2. Be kind to one another
3. Communicate in a civil manner
Reporting
If you would like to bring an issue to the moderators attention, please use the "Create Report" feature on the offending comment or post and it will be reviewed as time allows.
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
What they said isn't exactly true. The actual concerns are far more narrow than the way they worded it
it would be nice if you would narrow it down for everybody while we are here?
Well I'm not an expert and I don't feel like digging up all the specifics but the concerns generally are cookies. The person who replied here made it sound like Mozilla is letting websites steal your credit card number from open tabs or something
deleted by creator
Yeah, the graphene people hate Firefox, but I don't really put too much stock in their opinion because there are places where they mention it in an alarmist way imo
While I respect the work that they have done, leader handling of Lois rossmann was out of line.
I am not really sure what his deal is or was, but he should stay away from making public appearances until he learns to behave in public facing situation. The spazzing was uncalled for.
He is nuts in general. I would stay far far away from graphene
alright i see, that does make more sense but they can still ID with you a cookie on all your concurrent sessions?
i guess this aint a security risk per see but wtf.. why they even need cross site cookies if they can do this.
Cross site cookies specifically are the concern here. Other cookies cannot be read arbitrarily
i see, i thought they are turn off now by default? or at least there is a setting to block hem.
I'm not certain. The "strict" privacy setting in FF probably does block them. Not sure if it's default or not.
On FF on my android phone, I just checked and "strict" privacy mode is not on so I guess by default cross site cookies may be enabled. Thanks for asking these questions -- I'm setting that to Strict now.
You did all the work...
I do keep mine on strict tho
I don't see why it is not set by default tbh prolly breaks some bullshot websites
Yeah. Probably due to the fact that people will ignorantly declare firefox broken if they experience something like that. I don't think the standard setting is terrible for privacy either, btw, just a bit more permissive than "strict"