Slashdot Mirror


Firefox 57's Speed Secret? Delaying Requests from Tracking Domains (zdnet.com)

An anonymous reader quotes ZDNet: A Mozilla engineer has revealed one of the hidden techniques that Firefox 57 -- known as Quantum -- is using to improve page load times... It delays scripts from tracking domains, such as www.google-analytics.com. The technique was developed by Mozilla engineer Honza Bambas, who calls it "tailing". It works by delaying scripts from tracking domains when a page is actively loading and rendering...

Tailing only briefly prevents the tracking scripts loading, rather than disabling them entirely. Page load performance is improved by saving on network bandwidth and computing resources while loading a page, in a way that prioritizes site requests over tracking requests. "Requests are kept on hold only while there are site sub-resources still loading and only up to about 6 seconds. The delay is engaged only for scripts added dynamically or as async. Tracking images are always delayed. This is legal according all HTML specifications and it's assumed that well built sites will not be affected regarding functionality," explains Bambas.

21 of 119 comments (clear)

  1. With adblocking this is not even an issue. by Z00L00K · · Score: 4, Insightful

    Everyone that already runs adblocking won't notice this anyway.

    --
    If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
    1. Re:With adblocking this is not even an issue. by squiggleslash · · Score: 4, Informative

      An advertising site serves ads. A tracking site tracks you.

      To clarify:

      Advert: a picture, movie, or some text, intended to impart a message not associated with the core article, that is there because someone paid for it to be shown.

      Tracking: the act of determining a user's path through a website or collection of websites. Typically used by marketing departments to determine the success of a page in terms of keeping users engaged within a so-called 'funnel', a series of webpages that delivers a user to a store front, sometimes by UI designers and developers to debug usability issues.

      Does this help?

      --
      You are not alone. This is not normal. None of this is normal.
    2. Re:With adblocking this is not even an issue. by Anonymous Coward · · Score: 2, Informative

      don't run the default... duh.

      abp only enables easylist by default.

      https://adblockplus.org/subscr...

      you should run easylist+easyprivacy, any easylist specific to your country, fanboy annoyances, then whatever extras near the bottom of that list you want (nocoin, malware domains, spam404, etc).

    3. Re:With adblocking this is not even an issue. by Darinbob · · Score: 2

      Noscript will.

  2. Save even more time and block them altogether by Noishkel · · Score: 5, Insightful

    And why shouldn't we? No one wanted to be tracked. And even more corporatist a-holes like Google have persistently gone out of their way to obscure the end users ability to even know how the system works. Screw them. It's our hardware, and it's our data. If you have a problem with this then Google should release a version of their OS that you can pay and doesn't track us and avoid the situation entirely.

    1. Re:Save even more time and block them altogether by Anonymous Coward · · Score: 2, Informative

      You can enable this in Options/Preferences > Privacy & Security > Tracking Protection, fyi.

  3. Re:Clickbait article. Not related to speed by not+flu · · Score: 3, Informative

    It isn't a false sense of speed at all, you really are getting the content you actually want faster.

  4. Re:How about just forbidding XSS entirely by Aighearach · · Score: 3, Interesting

    That's why I use both noscript and also uMatrix!

    Unless I, the user, have a reason for wanting javascript I won't turn it on . And even if I do, I don't want your cross-site scripting! uMatrix prevents that. And if something really needs a third party script, I can turn on just the specific third parties that are related. For example, I might allow a few google domains if I'm intentionally loading a map, but if I'm not using the map I'm not going to turn those on. And even if I am, I certainly don't want the analytics.

    It seems to be getting better, actually; 5 years ago almost every site had third party JS for important functions, now more and more sites are hosting their own scripts for core functionality.

  5. Re:But ... by Aighearach · · Score: 5, Informative

    Too bad some websites have noticed the NoScripters and made their website unusable once your disable JS execution.

    I say to them, Thank you! I'm glad we agree that it is best if I use another site. Everybody wins!

    Lets not fight about this adblock stuff. Not everybody agrees, and that is wonderful, it is a sign of Freedom. There is no need to be passive-aggressive and make the site appear to work at first, and then fail later when you get to the heart of the content. Detect what is detectable, and be honest and straightforwards; if you don't want me as a user, great! I can agree to that, no problem!

  6. Ghostery and Privacy Badger by baomike · · Score: 3, Informative

    I notice that no one has mentioned these, why not?

    1. Re:Ghostery and Privacy Badger by Misagon · · Score: 3, Informative

      I saw "Google Analytics" listed as one of the sites that Firefox delays. I run Privacy Badger in Chromium, so I checked quickly what it blocks on this site and apparently, Slashdot uses Google Analytics but Privacy Badger does not block it.
      I suppose that there could be lots of other sites that are let through but which Firefox prioritises down when loading.
      This means that running Privacy Badger is not a replacement for the prioritisation scheme that Firefox is doing.

      --
      "We mustn't be caught by surprise by our own advancing technology" -- Aldous Huxley
    2. Re:Ghostery and Privacy Badger by Sannemen · · Score: 4, Informative

      Ghostery, probably because it keeps you private while, guess what?, selling your data... https://www.ghostery.com/faqs/...

  7. Who is going to write the mod? by Required+Snark · · Score: 3, Informative
    The one that doesn't even send the tracking data back, or even better sends random results?

    It's not like any of us asked to be tracked, or get any benefit out of it. Our online existence has become a huge source of income while government and big business know far too much about our private lives. Maybe we should be taking the initiative to "opt out" of tracking in a way that will make a real difference.

    --
    Why is Snark Required?
  8. There's an even simpler method by quonset · · Score: 2

    Block all such scripts using add-ons such as uMatrix.

    It's truly amazing how fast pages load even on older systems when this technique is employed.

  9. Waiting for the escalation by McFortner · · Score: 2

    How long before cleaver web programmers have the page require the tracking be completed before it sends vital parts of the page to the browser?

    The clock is ticking.... (pun intended)

    --
    Beware of Sales Reps bearing gifts.
  10. Re:Not in the browser by flex941 · · Score: 2

    You probably did DROP instead of REJECT.

  11. Really kill those third party user trackers by Anaerin · · Score: 5, Interesting

    FireFox inherited a small security update from the Tor project called "First Party Isolation". It's in newer versions of FF, but isn't turned on by default as it can break some authentication systems.

    What it does, is only allow cookies to be sent and received by the site in the page's URL. So, for instance, while visiting YouTube.com, images and the like from google.com can load, but have no cookies attached, and do not receive those cookies.

    To enable it, go to about:config and find "privacy.firstparty.isolate". Set it to true and restart the browser, and enjoy surfing the web knowing that you're not being tracked from site to site.

    1. Re:Really kill those third party user trackers by Pieroxy · · Score: 4, Informative

      Exactly what Apple has done with Safari, on both iOS and OSX. Except that Apple enabled the option by default.

    2. Re:Really kill those third party user trackers by Dagger2 · · Score: 2

      As I understand it, that's not exactly what it does. Third-party sites are still allowed to use cookies, but they get access to a different set of cookies depending on which first-party site they were loaded from.

      You can reject all cookies from third-party sites by setting network.cookie.cookieBehavior=1.

  12. Re:How about just forbidding XSS entirely by ls671 · · Score: 2

    That's why I use both noscript and also uMatrix!

    Why would you use both?
    You can configure uMatrix to block everything by default just like noscript does. It is only a simple rule to edit.

    --
    Everything I write is lies, read between the lines.
  13. Re:Net Neutrality - aka, no adblock by JustNiz · · Score: 2

    >> isn't this an arguably *good* thing in support of non-net-neutrality?

    Not really. I never gave any of those companies permission to spy on me. That has nothing to do with how much bandwidth they get.