Cookie extensions

❗️Sanitizing in-session is a false sense of privacy. They do nothing for IP tracking. Even Tor Browser does not sanitize in-session e.g. when you request a new circuit. A new ID requires both full sanitizing and a new IP. The same applies to Firefox

❗️Cookie extensions can lack APIs or implementation of them to properly sanitize: e.g.

⚠️ [last checked Nov 2024], Cookie Auto Delete even instructs it's users to disable Total Cookie Protection - ⚠️ DO NOT DO THIS ⚠️

As of Firefox 86, strict mode is not supported at this time due to missing APIs to handle the Total Cookie Protection [... followed by instructions]

https://github.com/arkenfox/user.js/wiki/4.1-Extensions

[-] eager_eagle@lemmy.world 2 points 1 day ago* (last edited 1 day ago)

"don't lock your door, it does not prevent scammers from getting your home address"

???

yeah, we know deleting cookies doesn't prevent IP tracking, that's also why I use a VPN

[-] pr3d@eviltoast.org 5 points 1 day ago

I don't get it. Of course it doesn't help with IP tracking of fingerprinting, but it deletes all cookies when I leave a site. My browsers runs very long on desktop and mobile, so Firefox's 'Delete cookies on close' doesn't help much.

[-] MangoPenguin@lemmy.blahaj.zone 2 points 2 days ago

Is that needed if ublock already stops all the tracking scripts from loading?

[-] dohpaz42@lemmy.world 22 points 2 days ago

Yes. Because cookies are used for tracking and can be set without the aid of Javascript.

For anyone interested, cookies pre-date Javascript and are baked in the HTTP protocol by way of a Set-Cookie header that the browser responds to by storing whatever information accompanies the Set-Cookie header; usually a unique id that can then be used to track what pages on a domain you visit.

[-] Quacksalber@sh.itjust.works 6 points 2 days ago* (last edited 2 days ago)

uMatrix once again to the rescue. It can block cookies. The only downside to uMatrix is that it dis-/allows based on su domain, so you can't accept a log-in cookie and reject the tracking cookie, if they are served by the same subdomain.