[tor-bugs] #26345 [Applications/Tor Browser]: Disable tracking protection UI in FF67-esr

[Tor Bug Tracker & Wiki]

#26345: Disable tracking protection UI in FF67-esr
-------------------------------------------------+-------------------------
 Reporter:  cypherpunks                          |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:
                                                 |  reopened
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  ff68-esr, tbb-9.0-must-alpha,        |  Actual Points:  1
  TorBrowserTeam201909R                          |
Parent ID:                                       |         Points:  1
 Reviewer:                                       |        Sponsor:
                                                 |  Sponsor44-can
-------------------------------------------------+-------------------------
Changes (by ghfsdhsdgsdgs):

 * status:  closed => reopened
 * resolution:  fixed =>


Comment:

 >With respect to that, Firefox moved the UI for changing cookie blocking
 preference (network.cookie.cookieBehavior) to the new content blocking
 section in about:preferences. If we hide that (as the patch currently
 does), there is no way that users can change it via UI. I'm not sure if
 that's so bad, since this would only be for advanced users that know what
 they are doing, and still is possible to modify it via about:config.

 Hello.

 As you know, the current patch makes it impossible for normal users to
 disable cookies.

 Disabling the tracking protection ui option is essential to prevent
 damaging fingerprinting.

 But forcing users to accept cookies on their computer by hiding the ui
 button is a breach of trust and depending on the user/website usage
 pattern could compromise a users privacy.

 There is legitimate reasons for users to want to block all cookies.
 There is legitimate reasons for users to want to
 manage/whitelist/blacklist cookies.

 Telling normal users to disable cookies via about:config is unrealistic.

 I do not ask for the patch that hides dangerous options to be reverted.
 But can you please move the cookie blocking preference back out of the
 hidden section?
 Or can you hide all other dangerous options in the new tracking protection
 section except the cookie blocking preference?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26345#comment:16>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online