[Closed]Disable Google and other accounts sharing in Firefox

[tis]

Hi,

I have 78.6.1esr (64 bit) and I'm very frustrated with security in firefox. If I logged in to e.g. gmail and open the search-engine in new tab e.g. youtube will automaticly log in, but my firefox settings is strict and youtube is a different domain than google.com. What setting do I need if I don't want to get accounts/profiles everywhere in the world where google search throw?

Can anybody explain what datas can access this accounts from my google profile?

[tis]

I've tied custom settings, disable all cookies, I can't login to my gmail they need cookies.
And browsing in Private also haven't solved this.
I'm not using ff while I'm logged in but sometimes I need to access emails and the other tab at the same time.

Meanwhile I've found a 3rd solution:
Firefox Google Container Addon - https://addons.mozilla.org/hu/firefox/a ... container/
Maybe something like this is the solution, but this way it is harder to use Firefox always need to create open things in new "different/detached" container.

I think I need something like inverse of this, by default.

Maybe I have to setup thunderbird to download emails....

[tis]

I've found a similar addon by Mozilla (Multi-Account Containers Addon https://addons.mozilla.org/hu/firefox/a ... ontainers/ ), it doesn't have predefined sites, so you have to open all tabs in new container, there are open in new conatiner popup menu by clicking right mouse button.
This should be good if you have main acc for mailing, but use a different e.g. for community sharing...

[doktor5000]

Hi there, this is not really a question regarding Mageia, you should ask that upstream, e.g. in firefox or google groups/forums.

But you could use a private window, which you keep open for gmail.

[tis]

Ty,

You're right again, but mga7 includes this version of Firefox and I don't have acc. for other forums, twitter, face, ... Maybe I'm too old for this...
(And I'm not lame to create profiles, I just don't want them)

And also it's about security, as it can be read at https://www.mageia.org/en-gb/about/: "Beyond just delivering a secure, stable and sustainable operating system, the goal is also to become and maintain a credible and recognised community in the free software world." unfortunately the problem comes from big non-eu companies and small data-collector websites. And as Mageia French based project maybe it would like to be GDPR ready as much as they can. My example started with Google, I'm speaking with them about this.

But Pivate windows has the same problem, maybe if I open only one, but the second access first's cookies...

[doktor5000]

And as Mageia French based project maybe it would like to be GDPR ready as much as they can.

This is not about what Mageia stores, but how you use your box, and self-imposed restrictions.
Maybe have a look at something like https://webapps.stackexchange.com/quest ... separately

[tis]

And yesterday I forgot to write, - before someone misunderstand, - the GDPR ans Cookie Law problem comes from big companies and not from Mageia or Firefox, but as Firefox Strict setting and enhanced tracking protection helped a lot, I would like to get ideas how can I configure it to keep my accounts and data safe.

[tis]

I've inspected more a little. I've made a test:

I've tried opera browser and a site with google acc. login capable (I choose quora). Opera/website asked automatic If I would like to use my google acc I have signed in other tab, but haven't used it.
Same situation in Firefox: Quora loads without asking anything, It didn't know anything about my google acc. Asked to login somhow.

So the FF protection mostly works well, maybe google "hacked"/cheated it somehow. Could any other site do the same?

[tis]

Another observations:
- that firefox has changed something in enhanced tracking protection (at ver. 68.6 -> 78.x) , now it don't show all the cookies, you may think everything is all right, but there are lots of permanent cookies accepted!!!!!
- signin at Google, doesn't mention that it will make cookie for youtube too, maybe you sign to youtube too ( Please do not say it is the same, 2 diff. company, 2 diff domain, 2 diff service, ... - only the boss is same)

[tis]

Closed...
- Containers helps a lot!
- at Google acc. I could erase/delete Youtube account again as previously, but I must open things in new container...

[kajosim]

This is a google feauture and has nothing to do with the security of Mageia.
When you login to a google app you login to every google app, eg login to mail and then the calendar, maps (including personal info such as TimeLine) and fotos will also be available without further login.
In google mail at top right corner you have a button for all google apps and you will see that youtube is also included.
Whether diff domains it is still one login for all google apps.
Regards

[tis]

Thanks for answering...

Yeah, this is not Mageia feature, but Google tricks browser security at Mageia...
- Youtube is not Google just an attached account
- Youtube is a different domain than Google

and strictly, you just login to google account and it is used without asking that if I would like to use it at gmail, drive, ... and youtube... I think this is a security problem. But I accept google apps in google domain can automaticly use google acc if I logged in, but no other sites like youtube...

This is a problem at all of the companies I think, maybe they want to make it easier and automatic... I comes from smart mobiles, I think. This is a security problem if you use them for important things, maybe there is a hole where someone can capture your account session...

But all right noone else interested or everybody accepted.

[kajosim]

Hi

I still do not see you point about a particular URL / domain name.

If you at https://sitereport.netcraft.com/ lookup youtube you will see that eg the domain name, hosting company, the name server, DNS admin all are part of google.
And youtube translate to an IP within the IP range 74.125.x.x owned by google.
In fact when I lookup google.com - it and youtube both run in the 74.125.193.x IP range. What can be more related.
So youtube is just another (domain) name for google.
Youtube has 3 web trackers all owned by google.

Concerning capture account. Whenever I login to my google acc from a new/another computer or OS (like upgrading from Mag6 til Mag7) I am imformed by 2 mails and an sms, so I can take action if needed. And if password is changed I can regain my account using my own password.

Depending on how you define important things I would recommend that you never use the internet for private and really important things.
Regards.

[tis]

Ty,

As I see, you don't want to understand that youtube is not google, a different company maybe the owner is same and/or connected to the same group.

My domain has exactly the same ip as some more which is not mine, 'cause it is hosted at the same server. Lot of people has the same ip range as my machine, because the internet service provider is the same, but they are not the same people/companies...

Stricly you have to give the permission to each app to use your google acc, even gmail, drive.... You may have more accounts e.g. personal/company/family .... so where the browser know which one would you like to use!?

And I know the internet is not safe, so I don't have face and face like things, and I just share some thing and some only with some people... I don't know the internet is younger or me, but I know some technologies that can grant safe internet using if the service provider don't loose the rules...

Thanks

[sturmvogel]

Maybe you should inform yourself
https://support.google.com/accounts/thread/4382937?hl=en
https://blogs-on-gmail.blogspot.com/2019/02/googleaccounts.html
https://support.google.com/accounts/answer/76194?hl=en&ref_topic=7189242

If you check your Google account (Google Dashbord) you will see which services are connected to your account.
If you sign into one of them (e.g Gmail) you are automatically signed in into all connected Google services (Youtube, Google Maps, Contacts, Chrome, Pictures, Drive, Calendar, Payments,... ). Because...big surprise....that are all Google services https://about.google/products/

If you want to remove one of the Google Services from your account you can do this here: https://myaccount.google.com/intro/delete-services-or-account

There is no security flaw in Firefox, Chrome, Opera, Mageia or whatever you believe. It's a function from Google. You can use ALL Google services by singning in into only ONE of them. If you want to complain about it, you should raise your concerns at the Google forums.
Or use the provided tips like private browsing or containers.

[tis]

Ty,

As you said most of them google products and that services in the google domain... so maybe the security problem at google about these, they made loose rules to their service.
BUT YOUTUBE IS DIFFERENT! different company, different service, different domain, different cookie, different account.............
So there is at least one security problem, why youtube is an exception of enhanced tracking protection....

But as I said conatiners can give a solution.
Thanks

[sturmvogel]

Even Google says that Youtube is their service. You doǹ't believe the owner? Also Wikipedia and many other sources tells you that Youtube was bought 2006 by Google and is now one of their subsidiaries. Use a search engine and convince yourself. No security problem at all.

https://support.google.com/youtube/answer/69961?hl=en
https://en.wikipedia.org/wiki/YouTube
https://en.wikipedia.org/wiki/Google#Web-based_services

[doktor5000]

BUT YOUTUBE IS DIFFERENT! different company, different service, different domain, different cookie, different account.............

No, it's not. Just go to google.com, and click the google apps button. All those use your google account, and all those belong to google.

And even then, you're barking up the wrong tree. If you think that is a security problem, feel free to contact google, or youtube.

[tis]

Youtube Llc is a different company connected to Google group, and Google LLC. They have changed all docs to make you fool...
as MS and Skype....

And youtube is a different connected account!

I don't want to argue about this, this is the true.


I usually writing to these companies so I just wanted a solution. And If you forget which company, different domains accessing cookies left by different domain, this is the cookie security problem.... I stop answering. Unfortunately this is the trend with accounts...
Thanks