Showing questions tagged: Show all questions

Privacy bugs in Firefox 88 on Linux

Hi, The privacy and security settings don't work on Firefox 88 on Linux (Ubuntu 18.04.5 LTS). Many sites will offer the option to 'Login with google/facebook/whatever' … (read more)

Hi,

The privacy and security settings don't work on Firefox 88 on Linux (Ubuntu 18.04.5 LTS). Many sites will offer the option to 'Login with google/facebook/whatever' rather than creating a new account for that specific site. One really annoying (and dangerous) consequence of 'logging in with google' is that it remains logged in. So for example if I log in to non-google siteX using my google credentials and then hours later open gmail in a different tab I get straight through to my gmail inbox without having to supply any credentials (and indeed any other user of the same machine could do the same). Obviously this highly insecure and dangerous policy of keeping me logged in indefinitely is implemented by Google for their own agenda and has nothing to do with Firefox. The bug in Firefox is that when I clear all data to work around this google problem FIREFOX does not work as advertised. So to try to 'force' a logout from my Google account I go to Firefox -> Preferences -> Privacy & Security -> Cookies & Site Data -> Clear Data, after a few minutes of churning away at my harddrive Firefox informs me that 'Your stored cookies, site data, and cache are currently using 0 bytes of disk space.' For good measure I then hit the 'Clear History' button. After this I open a fresh tab and go to gmail and I get straight into my inbox, no credentials required, so clearly Firfox is NOT deleting all cookies etc and is mis-reporting that 0 bytes are being used. So, does anyone know where/how I should report this dangerous privacy bug ?

Thanks MH

Asked by mharpes1 7 hours ago

restrict extension access permissions by url

if an extension requires an 'Access your data for all websites' permission then firefox requires me to choose either allow this extension to steal all my sensitive data, … (read more)

if an extension requires an 'Access your data for all websites' permission then firefox requires me to choose either allow this extension to steal all my sensitive data, or not to use the extension at all.

for such cases, chrome allows me to choose when and where i prefer to allow the extension to see these data and when and where to restrict it from accessing them: Site access Allow this extension to read and change all your data on websites you visit:

  • On click
  • On specific sites
  • On all sites

does firefox allow this somehow? i'd prefer to have an option to restrict such access in some cases by clicking the extension button, in some - by white or black listing specific sites (mostly whitelisting), and for some cases - do not restrict.

Asked by musilla 23 hours ago