News for hackers. Stuff that matters.
Re:Firefox 65.0 released by bubblethink on Tuesday January 29, 2019 @11:24AM (#19027569)
Last I checked, containers weren't working properly, and I gave up on the idea because false sense of security is worse. My test website was web.whatsapp.com. I think this is the tracker, although I didn't really look too much into it (https://github.com/mozilla/multi-account-containers/issues/8...

Edit: fixed link

Re:Firefox 65.0 released by snazz on Tuesday January 29, 2019 @11:36AM (#19027659)
Have you tried that again since September 2017? I can’t seem to reproduce the issue on my machine. (By the way, the link includes an extra underscore. The correct one is https://github.com/mozilla/multi-account-containers/issues/8... )
Re:Firefox 65.0 released by bubblethink on Tuesday January 29, 2019 @11:43AM (#19027721)
Yes, I can still reproduce it on 64. I'm on linux though.
Re:Firefox 65.0 released by kbenson on Tuesday January 29, 2019 @03:40PM (#19029604)
Pretty sure I figured this out, since I was able to reproduce it as well. It has to do with caching and something Whatsapp is doing to restore the page from local data most likely, as once you clear the local data for web.whatsapp.com, it correctly requests redirecting to the correct container.

If I had to guess, I suspect that Firefox triggers the container switch dialog on the first network request, and that page is so optimized that after the first visit it loads entirely from cache and/or localstorage data without any network activity at all.

If true, it might be that while it didn't switch, it actually wasn't leaking data between containers at all, since there was no network activity. I'm not sure if a background request would have triggered a container switch dialog, been blocked quietly, or have been allowed through some root page permissions cascade.

I may be far off, and this is trivially checkable, but I'm out of time.

Re:Firefox 65.0 released by bubblethink on Wednesday January 30, 2019 @04:09AM (#19033697)
I had a look at the github issue, and what worked was this comment: https://github.com/mozilla/multi-account-containers/issues/8...

You can try this if it affects you.

Re:Firefox 65.0 released by lugg on Tuesday January 29, 2019 @12:12PM (#19027968)
On Linux, works for me. Using add-on version if that helps. There is a bug that opening a url via e.g. xdg isn't able to prevent default tab opening on first startup.