News for hackers. Stuff that matters.
Re:Firefox 59 to strip path information from referrer values... by badrabbit on Thursday February 01, 2018 @07:23PM (#16287242)
As a user I don't want you to know that information. I wish there was a way to click on links with the referer field removed entirely from the request(maybe via context menu)
Re:Firefox 59 to strip path information from referrer values... by lovelearning on Thursday February 01, 2018 @09:13PM (#16287842)
If you're using Firefox, open 'about:config' and set 'network.http.sendRefererHeader' to 0.

http://kb.mozillazine.org/Network.http.sendRefererHeader

Re:Firefox 59 to strip path information from referrer values... by nyolfen on Friday February 02, 2018 @12:36AM (#16288649)
this seems like it turns it off for everyone, not just third parties
Re:Firefox 59 to strip path information from referrer values... by lovelearning on Friday February 02, 2018 @12:59AM (#16288719)
Yes, it strips off for any URL. For only third parties, I believe 'network.http.referer.XOriginPolicy' is the relevant flag (haven't tried it out myself).

"Can one disable the HTTP referrer for only when one is going to a third-party domain?" https://support.mozilla.org/en-US/questions/1130505

Re:Firefox 59 to strip path information from referrer values... by mirimir on Thursday February 01, 2018 @08:12PM (#16287535)
I use RefControl in Firefox. I've set the default to be the root of the destination site. That is, for example, clicking a link to https://foo.com sends https://foo.com as the referrer.
Re:Firefox 59 to strip path information from referrer values... by robocat on Thursday February 01, 2018 @09:29PM (#16287919)
There is an about:config setting called spoofSource which does the same thing I think - see comment https://news.ycombinator.com/item?id=16286542
Re:Firefox 59 to strip path information from referrer values... by mirimir on Thursday February 01, 2018 @10:09PM (#16288092)
Thanks. Good to know.
Re:Firefox 59 to strip path information from referrer values... by nayuki on Friday February 02, 2018 @07:47AM (#16290106)
RefControl is a great add-on, but it isn't compatible with the new Firefox Quantum (57+). https://addons.mozilla.org/en-US/firefox/addon/refcontrol/
Re:Firefox 59 to strip path information from referrer values... by mirimir on Friday February 02, 2018 @11:49AM (#16291978)
Yes, Quantum will break lots of stuff. Maybe too much for me to use it. Recent Firefox changes have already broken some of my iMacros scripts :(
Re:Firefox 59 to strip path information from referrer values... by arghwhat on Friday February 02, 2018 @04:23AM (#16289400)
https://wiki.mozilla.org/Security/Referrer

A stock Firefox can tune the referer behavior through about:config, including completely disabled or spoofed to the target URL.

Re:Firefox 59 to strip path information from referrer values... by ams6110 on Thursday February 01, 2018 @07:24PM (#16287249)
You can sort of do that, context menu -> copy url -> open a new tab -> paste url
Re:Firefox 59 to strip path information from referrer values... by zamber on Thursday February 01, 2018 @08:00PM (#16287462)
Re:Firefox 59 to strip path information from referrer values... by paulie_a on Friday February 02, 2018 @06:18AM (#16289745)
Is there a way to randomize the ref url?

It's increasingly becoming impossible to have any actual privacy, so in my opinion the best option is to make the data collected worthless.

Re:Firefox 59 to strip path information from referrer values... by nofunsir on Thursday February 01, 2018 @07:32PM (#16287299)
I do this quite often, and it is indeed usually because I don't want the site to know where I came from.
Re:Firefox 59 to strip path information from referrer values... by fnl on Friday February 02, 2018 @09:01AM (#16290513)
As nobody mentioned it yet, I think: I use the smart referrer plugin.

https://addons.mozilla.org/en-US/firefox/addon/smart-referer...