12 votes

Security researchers partner with Chrome to take down over 500 browser extensions in a fraud network affecting 1.7 million users

12 comments

  1. [11]
    envy
    Link
    I've segmented my browsing into distinct browsers for well over a decade. Chrome: Google/ News/ Social media. Has 14 plugins. Firefox: For secured accounts. Has no plugins.

    I've segmented my browsing into distinct browsers for well over a decade.

    Chrome: Google/ News/ Social media. Has 14 plugins.

    Firefox: For secured accounts. Has no plugins.

    7 votes
    1. [10]
      Keegan
      Link Parent
      I just use two versions of Firefox. I use Beta for regular browsing and use the regular release for things such as work or finance stuff. Both just have uBlock Origin and uMatrix installed.

      I just use two versions of Firefox. I use Beta for regular browsing and use the regular release for things such as work or finance stuff. Both just have uBlock Origin and uMatrix installed.

      3 votes
      1. [9]
        pseudolobster
        Link Parent
        I know this thread is about plugins, and this advice isn't applicable to that, but if you're just trying to sandbox sensitive stuff from regular surfing, I highly recommend mozilla's official...

        I know this thread is about plugins, and this advice isn't applicable to that, but if you're just trying to sandbox sensitive stuff from regular surfing, I highly recommend mozilla's official Container Tabs addon. It basically gives you five different flavours of incognito tabs, which don't share cookies between each other. Also related, the Facebook Container addon (also an official Mozilla addon) gives you one more type specifically for Zuckerberg sites. If you install FB Container you don't need to install the Multi-User Containers extension separately.

        8 votes
        1. [8]
          sron
          Link Parent
          Just started using multi account containers this week. A problem I've found though is that there's not a way I can find to open new tabs in a certain container by default so automatically...

          Just started using multi account containers this week. A problem I've found though is that there's not a way I can find to open new tabs in a certain container by default so automatically redirecting certain sites to different containers doesn't work (it's just a normal tab). Is there a way to work around this?

          1 vote
          1. [7]
            TheJorro
            Link Parent
            It seems the only way is to open the MAC panel, and then select the container that you want to open a new tab in. I would like keyboard shortcuts but perhaps that's a down-the-road feature. From...

            It seems the only way is to open the MAC panel, and then select the container that you want to open a new tab in. I would like keyboard shortcuts but perhaps that's a down-the-road feature.

            From the extension documentation, this is the only supported keyboard command:

            Ctrl + . (period) keyboard shortcut is available to open the containers panel. You can then use tab and the enter keys to open new container tabs.

            2 votes
            1. [4]
              pseudolobster
              Link Parent
              I use Alt+F, B, P to open a new Personal tab, Alt+F,B,W for a Work tab, etc. I'm now realizing the Firefox Container addon has fewer features than MAC. For instance there's no Ctrl+. shortcut, and...

              I use Alt+F, B, P to open a new Personal tab, Alt+F,B,W for a Work tab, etc.

              I'm now realizing the Firefox Container addon has fewer features than MAC. For instance there's no Ctrl+. shortcut, and it appears you can't assign sites to specific containers. Apparently I can install both, and they don't conflict, but the FB Container addon is fine for my needs. What I do for my gmail/hangouts is open them in a personal tab, then hit "Pin tab" on them. They shrink down to just their icon and open up automatically when I start firefox.

              The documentation seems to imply you can assign certain sites to certain containers, but I don't think it forcibly segregates them like the FB Container plugin does for facebook.com, so I'm not quite sure what the point is.

              1 vote
              1. [3]
                TheJorro
                Link Parent
                I use them to separate my personal stuff from my work stuff. MAC lets me handle that very easily when dealing with multiple websites or web products. For example, I have two use cases where I...

                I use them to separate my personal stuff from my work stuff. MAC lets me handle that very easily when dealing with multiple websites or web products. For example, I have two use cases where I would go between, say, Outlook mail, GitHub, and Google Drive: personal and work. I have an account of each type for each of those services. MAC lets me separate them without much fuss, and the containers don't mix up the accounts so there's no cross-contamination.

                The Facebook Container is pretty heavy against Facebook in comparison because it was specifically designed to shut off Facebook access to any other site and keep it in basically a barbed-wire topped walled garden. MAC came a bit later and for general use, so it's more friendly for other sites. I run both because I want Facebook in high-security jail while my other containers are more like different rooms with different guests.

                3 votes
                1. [2]
                  pseudolobster
                  Link Parent
                  Oh for sure, I get that, but I'm not sure what the point of assigning certain sites to certain tabs is, if it doesn't automatically segregate those sites into their defined tab type. The...

                  Oh for sure, I get that, but I'm not sure what the point of assigning certain sites to certain tabs is, if it doesn't automatically segregate those sites into their defined tab type. The documentation talks about assigning sites to a container and ensuring you don't have facebook.com assigned to one before installing the FB Container addon. I guess they mean just don't have any facebook tabs open in containers at the moment of install, or they'll stay in their current container until closed and reopened?

                  1 vote
                  1. TheJorro
                    Link Parent
                    Ah, that was my use case when I realized that I was still opening other sites in the Facebook container with MAC. Basically, it seems like whichever one is configured first overrides the other's...

                    Ah, that was my use case when I realized that I was still opening other sites in the Facebook container with MAC. Basically, it seems like whichever one is configured first overrides the other's rules, so if you set up MAC for Facebook and then installed Facebook Container, then Facebook Container would be inert. So I had to remove all Facebook rules from MAC and then Facebook Container could take over.

                    There are use cases where you would want to open other sites with a Facebook account to integrate some features or accounts, but then have it separated in other containers (i.e. personal vs. professional Facebook accounts). In that case, you would only use MAC. Facebook Container is a step above and walls Facebook in tightly and then all different accounts would have to be juggled within there. For people with only one Facebook account, this may be the preferred method.

                    But otherwise, I don't think MAC is supposed to be as strict as the specific Facebook Container. It seems to be Firefox's solution to how Chrome will let you run different instances in different profiles, except all handled in the same window with the tabs simply being of different instances.

                    1 vote
            2. [2]
              sron
              Link Parent
              Yeah, I did see the keyboard shortcut but having it implemented this way kind of diminishes the point of the feature in my view. Thanks anyway

              Yeah, I did see the keyboard shortcut but having it implemented this way kind of diminishes the point of the feature in my view. Thanks anyway

              1. TheJorro
                Link Parent
                Well the good news is that the recently updated the extension to make use of Firefox Sync, so they're still actively working on it.

                Well the good news is that the recently updated the extension to make use of Firefox Sync, so they're still actively working on it.

                1 vote
  2. skybrian
    Link
    Good work but it's not enough to be able to trust most browser add-ons. It would be nice to see the browser plugin stores support a trusted build and release process directly from Github. While...

    Good work but it's not enough to be able to trust most browser add-ons.

    It would be nice to see the browser plugin stores support a trusted build and release process directly from Github. While it's no substitute for code review, it seems like it would making looking a the source before installing more feasible.

    5 votes