Conversation

Notices

1. Embed this notice
   Rich Felker (dalias@hachyderm.io)'s status on Sunday, 03-Nov-2024 13:23:48 JST Rich Felker

   Wow, Mozilla publishes a convenient List of Domains to Block for Firefox!

   https://support.mozilla.org/en-US/kb/domains-allow-firefox

   Except somehow they typo'd the title.

   • Embed this notice
     stephen-fox (stephen0x2dfox@hachyderm.io)'s status on Sunday, 03-Nov-2024 13:28:51 JST stephen-fox

     in reply to

     @dalias "Tracking Protection (What exactly does it do)?"

     @_@

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Sunday, 03-Nov-2024 13:32:28 JST Rich Felker

     in reply to

     • stephen-fox

     @stephen0x2dfox @_ It tracks you for your protection 🤪

   • Embed this notice
     wizzwizz4 (wizzwizz4@fosstodon.org)'s status on Monday, 04-Nov-2024 02:15:19 JST wizzwizz4

     in reply to

     @dalias You should provide http://detectportal.firefox.com (though replacing it with a local version is sensible), and it looks like https://tracking-protection.cdn.mozilla.net is just an S3 bucket full of hashes. The others, though, I could do without.

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Monday, 04-Nov-2024 02:15:19 JST Rich Felker

     in reply to

     • wizzwizz4

     @wizzwizz4 A list of hashes that could probably be used to break extensions...

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Monday, 04-Nov-2024 03:16:50 JST Rich Felker

     in reply to

     • wizzwizz4

     @wizzwizz4 No, they cannot modify the source code on my machines *after I compiled it* (or rather after the distro I trust did). The whole violation is them having power to retroactively change things after I got it.

   • Embed this notice
     wizzwizz4 (wizzwizz4@fosstodon.org)'s status on Monday, 04-Nov-2024 03:16:51 JST wizzwizz4

     in reply to

     @dalias Mozilla could simply modify the source code of Firefox to do that. Your threat model should be data exfiltration, imo, not remote reconfiguration.

     Check the source, to see if tracking protection is applied to extensions. I doubt it would be.