deleted by creator

Sounds frustrating and I can see how that can be confusing. Had similar peeves with other imposed limitations that initially drove motivation of developing this project so can relate!

While we have to recognize that there is inherent conflict in expectations of “browser doesn’t disclose my location” and “website knows my timezone” and that Konform Browser will continue defaulting to privacy, you highlight gap in UX and user control that I agree can be improved on. Shouldn’t be too much work to add more make more discoverable selective settings UI for this too in a future release.

There’s some other aspects that often play into this particular scenario and can vary per site:

• Apps showing relative time like “10 hours ago” or “in 15 minutes” should not be affected by any of this.
• Scheduling for events on services like the ones you mention also shouldn’t be affected by this: Time for events is global but display will be affected.
• There are are a lot of bugs in webapps out there that can be interacting with localtime in incorrect ways. It’s complicated¹.

Try being a part of a team in multiple timezones, some of which follow Daylight Savings Time (from different dates) and some not. Now schedule a recurring weekly meeting for the same time and coordinate that over chat. This is just inherently messy. Communicating this properly in UI is subtle and confusion like the one you described often arise when webapp developers assumptions and user assumptions don’t align. Some even say we should do away with timezones alltogether.

¹: Someone even made list of lists of falsehoods programmers believe about time

deleted by creator

If you’re talking about Librewolf’s “resist fingerprinting”:

To set the record straight, ResistFingerprinting was originally developed by Tor Browser developers, and is for some time now part Firefox (and therefore all forks) behind the privacy.resistFingerprinting (“RFP”) preference. So credit there goes to those devs, Tor Projectt, ad Mozilla. Konform Browser and Tor Browser have this on by default. There is also the related more recent and complex privacy.fingerprintingProtection (“FPP”) system. LibreWolf has historically been on RFP too - I’m not up to date if that’s still the case or if they’ve migrated over to FPP yet as I understand that is the intention of maintainers. The difference between the two is more than I bear to explain here and a bit of a rabbit hole x)

Hm, could you be more specific exactly what your issue is, and what behavior you are expecting? It sounds like you could be referring to this: https://bugzilla.mozilla.org/show_bug.cgi?id=1364261

There is a workaround mentioned at the bottom of that thread which should have the same result on all three browsers (and sounds like what you want, except having to disable ResistFingerprinting?). Just like for the forced-light-theme, I think it can make sense to provide a more convenient and obvious way to change the timezone without having to impact the other privacy protections. Might take a look at that but most likely after ESR153.0 is out of the way. If I read you right: Do you expect to be able to toggle this per-site, or would you be satisfies with a global toggle similar to the one we already have for allowing dynamic themes under RFP?

Thanks! Would be great to hear your thoughts and experience after trying it out, if you do! BTW, I keep fishing for feedback not just because I like hearing user stories but also since with no telemetry (or a qa team; lol), user reports become that much more valuable in development, catching issues and better understanding the UX ^^

But can it fool creepjs?

What does that mean for you, exactly? I know that there is a lot of different ideas out there on how to interpret these results and what “good” means so would be helpful to know what your expectations are to give meaningful answer to such question.

Anyway, I just tried running the test at creepjs.org and this is result: Test hangs at “57/58: Currently collecting: Private Click Measurement complete”, with no errors in the js console.

Having compared results with some other fingerprinting suites previously, default settings should give plausible fingerprint corresponding to user base of existing browser. Only Cloudflare seems to hate it: Turnstile on sites in strict mode currently often throw a redirect loop when their troubleshooting tool says all is fine. Is that because fingerprinting protection “works to good” or is broken? You tell me!

I would appreciate an outside and less biased review, comparison or benchmark on stuff like this! Want to try and report back?

“Facebook Container” seems redundant if you already use Multi-Account Containers and set it up accordingly, yes. Other than that it doesn’t sound over-the top at all and a reasonable configuration.

Doesn’t Strict mode block third-party cookies anyway?

Almost, but not entirely. For that you need First-party Isolation (privacy.firstparty.isolate pref: https://bugzilla.mozilla.org/show_bug.cgi?id=1330467),

containerises first-party cookies too, but I wouldn’t need that.

It does do that - if it didn’t, there wouldn’t be any “multi-account” to it.

With a profile like that you might also find Konform Browser relevant to your interests with more private defaults and convenient toggling of modes and features. https://konform-browser.codeberg.page/

It comes with a debloated version of Multi-Account Containers, which can also be installed as a normal addon into other Firefox builds: https://codeberg.org/konsortium/multi-account-containers-lite

There is some talk about this on the readme (“About”) page with more detail on differences in the release notes.

On “AI”, tooted about this here. As one example, the “AI chatbot” feature is disabled and hidden by default. If user still chooses to enable it via preferences, stock configuration only has one available provider: localhost where user runs their own app (for example llamafile.ai) locally outside of the browser while proprietary integrations¹ and telemetry are removed even when feature enabled. I think for all of the AI-features, both the default-disabling and making them work better (or at all) without remote cloud goes deeper in Konform Browser than others like Librewolf.

Another example is about:translations, which when enabled² actually works properly when offline after translation models have been downloaded; they are not bundled with browser.

Let me know if any more questions after reading that!

¹: Like ChatGPT and others

²: “Basic Functionality” and “Just Make It Work” presets enable local translations feature and downloading of translation models.

Unnecessary hostility. They can not and are not retroactively changing license on past contributions. The only thing affected is upstream future contributions. If nothing was lost, how can it be “theft”?

So can we take the code from up to about a mo the ago

Yes. As long as you also comply with license.

It’s that time again!

Firefox ESR 140.10.0

Firefox RR 150.0

Relevant for AUR users this time, there is a regression with rustc 1.95¹ affecting both releases. So those building from source will need to either:

• Ensure they compile with compatible rust version (1.94)
• Apply fix for Bug 2033279
• Use PKGBUILD that sorts it out. firefox and konform-browser² have upstream patch ported for RR and ESR, respectively.

Removing ac_add_options --enable-rust-simd from mozconfig might also be a workaround.

¹: Which is what Arch currently ships.

²: Only fork delivering the security fixes from this monthly security release as of writing.

It’s that time again!

Firefox ESR 140.10.0

Firefox RR 150.0

Relevant for AUR users this time, there is a regression with rustc 1.95¹ affecting both releases. So those building from source will need to either:

• Ensure they compile with compatible rust version (1.94)
• Apply fix for Bug 2033279
• Use PKGBUILD that sorts it out. firefox and konform-browser have upstream patch ported for RR and ESR, respectively.

Removing ac_add_options --enable-rust-simd from mozconfig might also be a workaround but have not tested that.

¹: Which is what Arch currently ships.

You still need to use a privacy-centric browser

Check out Konform Browser. Least leaky one out there.

deleted by creator

Redditors have long been the best bullshit detectors, and increasingly great Turing testers.

🦾

deleted by creator

The Lemmy community is broadly 50:50 on their support for said calls for the violence.

1. There’s astroturfing. Careful with judging community vibes by obviously votes but also comments.

2. There is more to “The Lemmy community” than what’s on display on .ml.

I also believe nobody here is sending threats.

I wouldn’t be so sure of your tribe. 19 users so far upvoted a comment with among other concerning bits:

if you’re anti this bullshit “law” then you are also pro physically harming poor FOSS “contributors”.

You missed this option:

• Ignore the feature and don’t use it.

systemd is quite modular. For example, if you abhor systemd-resolved (not at unreasonable stance) it’s NBD to disable it.

Recently (<1 year?) I frequently see the notion that software is “tainted” by having been touched by Bad. I find this a bit silly. Especially if it’s from a user who’s not even spending time in the codebase.