Facebook Container Extension: Take control of how you’re being tracked

Re:Facebook Container Extension: Take control of how you’re ... by cryptonector on Tuesday March 27, 2018 @12:23PM (#16690022)

It breaks things like "sign-in with github credentials" in CIs. But you know, these should be exceptional, therefore the default should be to load third-party content without cookies. The problem is that some content is loaded without your having to click on something (where you'd have a chance to right-click and request loading with selected credentials).

[ Parent | on HN ]

Re:Facebook Container Extension: Take control of how you’re ... by andor on Tuesday March 27, 2018 @12:43PM (#16690274)

Not necessarily: OAuth Basic Flow does not require third-party cookies. With Basic Flow, you'd get redirected to github.com, making it a first party request. Github will then redirect you back passing an authentication code as a URL parameter.

[ Parent | on HN ]

Re:Facebook Container Extension: Take control of how you’re ... by moosingin3space on Tuesday March 27, 2018 @03:46PM (#16692093)

I use uMatrix for this purpose, and to block third-party frames to defend against clickjacking. That said, Multi-Account Containers still are very useful.

[ Parent | on HN ]

Re:Facebook Container Extension: Take control of how you’re ... by latexr on Wednesday March 28, 2018 @07:27AM (#16696874)

I’ve been blocking third-party cookies for years and using OAuth authentication in several places. Don’t remember ever having an issue.

[ Parent | on HN ]