News for hackers. Stuff that matters.

A comment on Firefox rolls out Total Cookie Protection by default to all users. Parent comment

Re:Firefox rolls out Total Cookie Protection by default to a... by dec0dedab0de on Tuesday June 14, 2022 @10:04AM (#31739670)
The web was designed to be highly interconnected. Deep linking is a feature. Cookies are set via headers. If you load an image from another domain, the headers from that domain could set their own cookies, and your browser will give each domain every cookie it has set.

That is, cookies aren't shared, they're locked down to the domain that set them. It's just that some domains have content loaded by millions of pages. This change won't protect you much if you have a relatively stable IP address without many users on it, because your IP is still in the third party domains logs. This welcome change makes it harder to differentiate people on the same IP, or to track a browser as it changes IPs.

As I'm typing this, I'm remembering how helpful IPv6 is for people who want to track everyone.

[ Parent | on HN ]
Re:Firefox rolls out Total Cookie Protection by default to a... by tialaramex on Tuesday June 14, 2022 @11:48AM (#31741186)
If you need Onion Routing then you need Onion Routing. IPv6 Privacy Addressing gives you roughly the same properties you had with IPv4 NAT except now when you did want a stable address you've got one.

Multi address is much healthier in IPv6, so it's reasonable for your browser to even spin up an address associated with a Porn tab, and then destroy it again when you close that tab, while still using your other IPv6 address for a post you make meanwhile to Hacker News. It's also reasonable (while it was often likely to cause mysterious problems in IPv4) to give your local web server a long-lived IPv6 address while your web browser's address changes every hour.

[ Parent | on HN ]
Re:Firefox rolls out Total Cookie Protection by default to a... by diea on Tuesday June 14, 2022 @11:50AM (#31741205)
Hmm... I think IPv6 might be actually better. Apple for example will generate and use a temporary IPv6 which changes every few hours to protect your privacy.
[ Parent | on HN ]
Re:Firefox rolls out Total Cookie Protection by default to a... by leaflets2 on Wednesday June 15, 2022 @04:17PM (#31758883)
Can't one look at the first parts of an IPv6 and roughly know anyway who it is? I've read that one can only control the last parts of ones IPv6 space -- the first, one gets from ones ISP?, can they be enough to know who one is?
[ Parent | on HN ]