News for hackers. Stuff that matters.
Re:Containers Come to Firefox Test Pilot by vsviridov on Thursday March 02, 2017 @01:18PM (#13776628)
Containers are great. I've been using them for a bit. They definitely need a few things. Like an ability for the "new tab" to be sticky (if I'm in a container - new tab should open in the same container), and the ability to pick which container to open things in when the OS triggers the browser to open a URL. Right now it's very leaky... Say I start a registration process for a site in a container, they send a email confirmation, I click the link and it opens outside of the container, leaking the cookies. Bad for OPSEC.
Re:Containers Come to Firefox Test Pilot by groovecoder on Thursday March 02, 2017 @03:48PM (#13778048)
We have an issue in the GitHub repo for this ... the more upvotes it gets, the more likely we will put it into a next release. :)

https://github.com/mozilla/testpilot-containers/issues/306

Re:Containers Come to Firefox Test Pilot by jgruen on Thursday March 02, 2017 @01:26PM (#13776709)
Agreed. Right now we're pretty hands off about modifying default behaviors, link handling etc. Chalk this up to us wanting to be unopinionated about specific use cases, but there are definitely some optimizations to be made to shore up the situations you describe. Test Pilot is for WIP software, so don't be shy about filing issues.
Re:Containers Come to Firefox Test Pilot by Ar-Curunir on Thursday March 02, 2017 @03:28PM (#13777879)
Would it be possible to have an add-on for this? One that automatically opens each website in a new container? That would allow default behaviour for most people, but for those that want isolation, it would be easy to get it.
Re:Containers Come to Firefox Test Pilot by cpeterso on Thursday March 02, 2017 @03:45PM (#13778021)
There is a Contextual Identities API for WebExtensions shipping in Firefox 53:

https://developer.mozilla.org/en-US/Add-ons/WebExtensions/AP...

Re:Containers Come to Firefox Test Pilot by pmontra on Thursday March 02, 2017 @02:41PM (#13777486)
It would be great if it could create automatically one container per domain: every site would be neatly separated from all the other ones. If you logged in Facebook the other tabs for other sites wouldn't know about it. Doing that manually every time is almost impossible.
Re:Containers Come to Firefox Test Pilot by detaro on Thursday March 02, 2017 @03:30PM (#13777892)
There is a feature called First Party Isolation that (I think) does what you want for normal tabs, and can already be enabled through about:config. (initially developed for the Tor Browser Bundle, their description of it is here https://www.torproject.org/projects/torbrowser/design/#ident... )
Re:Containers Come to Firefox Test Pilot by Sammi on Thursday March 02, 2017 @04:57PM (#13778640)
Thanks for that. Found it and enabled it.

privacy.firstparty.isolate

Re:Containers Come to Firefox Test Pilot by cpeterso on Friday March 03, 2017 @01:02AM (#13781049)
Beware that privacy.firstparty.isolate might break some sites that depend on third-party services for login authentication or comment systems. If you find any broken sites, you can report them in Bugzilla and mention this Firefox bug:

https://bugzilla.mozilla.org/show_bug.cgi?id=1299996

Re:Containers Come to Firefox Test Pilot by kybernetikos on Friday March 03, 2017 @02:25AM (#13781288)
I use noscript to by default turn off scripts from 3rd party sites (unless whitelisted). It breaks quite a few sites, but it also makes lots of sites load quicker and doesn't load a bunch of advertising/tracking stuff that I don't really want loaded anyway.
Re:Containers Come to Firefox Test Pilot by alyandon on Thursday March 02, 2017 @03:19PM (#13777792)
I would pay actual money to help get a feature like that into Chromium or Firefox. Hell, if Firefox added that exact feature I might actually rethink my decision to switch to Chrome once they drop support for all the addons I use.
Re:Containers Come to Firefox Test Pilot by cpeterso on Thursday March 02, 2017 @03:50PM (#13778066)
There is an experimental implementation of that feature, called "First Party Isolation", in Firefox today. You just need to set the `privacy.firstparty.isolate` pref = true in about:config.

With this pref enabled, advertiser X will serve you different cookies on site A and B. They won't be able to track your browsing history from site to site. However, this breaks a lot of sites that depend on third-party services for login authentication or comment systems.

Here is the Firefox bug where you can report broken sites:

https://bugzilla.mozilla.org/show_bug.cgi?id=1299996

Re:Containers Come to Firefox Test Pilot by kingstonTime on Thursday March 02, 2017 @04:08PM (#13778228)
This would actually be implementable with the new WebExtensions for containers https://developer.mozilla.org/en-US/Add-ons/WebExtensions/AP...

Essentially building a new container per origin.

Re:Containers Come to Firefox Test Pilot by groovecoder on Thursday March 02, 2017 @04:02PM (#13778170)
We are also hard at work supporting add-on authors porting to WebExtension APIs. I'm especially trying to help Privacy & Security add-on authors.
Re:Containers Come to Firefox Test Pilot by pmontra on Thursday March 02, 2017 @05:41PM (#13778977)
uBlock, NoScript, Self Destructing Cookies. Also DisableWebRTC. Firefox would be Opera, Chrome or Vivaldi without them. No particular reason to use it or a random one among the others. Stylish and Greasemonkey are useful too, when sites insist doing the wrong things. I hope all of them survive the switch. Will they?
Re:Containers Come to Firefox Test Pilot by groovecoder on Thursday March 02, 2017 @05:58PM (#13779124)
Re:Containers Come to Firefox Test Pilot by MikusR on Thursday March 02, 2017 @10:46PM (#13780617)
uBlock Origin started as a Chrome extension.
Re:Containers Come to Firefox Test Pilot by tylerflick on Thursday March 02, 2017 @02:05PM (#13777134)
They're great, but they seem to force me to change my workflow to work around them.

If a FF PM is reading this: being able to register a domain for a container type would be a killer feature.

Re:Containers Come to Firefox Test Pilot by cpeterso on Friday March 03, 2017 @01:08AM (#13781072)
The following GitHub issue tracks that feature request. It might be cool to ship a default classification list for common banking and shopping sites so they are already "contained".

https://github.com/mozilla/testpilot-containers/issues/306

Re:Containers Come to Firefox Test Pilot by potch on Thursday March 02, 2017 @02:38PM (#13777455)
Not the PM you're looking for, but: that feedback has definitely already been recorded.
Re:Containers Come to Firefox Test Pilot by jgruen on Thursday March 02, 2017 @03:49PM (#13778056)
1. Hello potch! 2. Yes, this is among the most requested features we've seen so far. Containers in Test Pilot will remain in active development for the foreseeable future, so I wouldn't be surprised to see such a feature forthcoming.
Re:Containers Come to Firefox Test Pilot by wybiral on Thursday March 02, 2017 @11:57PM (#13780848)
My only problem is that at my monitor resolution the little color strip is almost invisible. I'd like for it to be more visually clear.