this post was submitted on 30 Nov 2025
52 points (87.1% liked)

Firefox

21365 readers
3 users here now

/c/firefox

A place to discuss the news and latest developments on the open-source browser Firefox.

Rules

1. Adhere to the instance rules

2. Be kind to one another

3. Communicate in a civil manner

Reporting

If you would like to bring an issue to the moderators attention, please use the "Create Report" feature on the offending comment or post and it will be reviewed as time allows.

founded 6 years ago
MODERATORS
k_o_t@lemmy.ml
golden_zealot@lemmy.ml
52
On Linux, Firefox stores site-data in a folder named the same (europe.pub)
submitted 6 days ago by brokenwing@discuss.tchncs.de to c/firefox@lemmy.ml
15 comments fedilink hide all child comments
 

Is this behavior expected? I would imagine it would be a privacy violation in a multi-user system. I thought they had some sort of encryption for hiding the sites that I visit.

BTW, FF does not do this on private mode. But still it is concerning, that any program can know about the sites I visit just by looking at ~/.mozilla/profile/storage/default.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] Branquinho@lemmy.eco.br 29 points 6 days ago (1 children)

This behavior is expected.

On a multi-user system, this is not a problem, because other users (except root) are not allowed to list directories within your home directory.

For processes that run on your system, this is the same: Usually, only your own processes are allowed to list your files. Then, they can also read your browsing history and all kind of personal files. So, you should not run processes that you don't trust in respecting your privacy.

And for all site visits that you don't want to leave traces on your hard drive, you use the private browsing mode. (Keep in mind, that you still leave traces for persons that can read the traffic - even if the traffic is encrypted.)

[โ€“] Branquinho@lemmy.eco.br 10 points 6 days ago

I forgot to mention:

If you want/need to restrict processes that you run, you can, for example, use AppArmor or SELinux to restrict paths that they are allowed to access.

Or you use containers (Podman, Docker) to run low-privileged containers without access to your home directory.