Firefox Personal Data Promise
blog.mozilla.org
blog.mozilla.org
Mainly I hope this can now be pointed to by Mozilla/Firefox users as a set of standards that should be followed when Mozilla devs put in place measures that infringe users' privacy or don't do enough to protect it.
Right now, https://mozilla.org/ sets 15 Google cookies and 12 Google localStorage tracking values when you visit it. Mozilla's previous statements[0] justifying this have been fairly weak. I really hope this new PR initiative gives some extra leverage to those asking for change.
[0] https://groups.google.com/forum/#!msg/mozilla.governance/9IQ...
Is this the sort of story that casual users or even avid fans of the browser would organically promote? That's the logic that I was handed in some of the responses to me. Am I that out of place to assume that the following is how it goes down? 1.) The marketing/evangelical folks at Mozilla create a story and post it here and elsewhere. 2.) They put out a call to all their supporters in various channels to come and help promote the story (and keep other commenters in line apparently)...
I think the problem is that comment forums always optimize towards showing me what the currently active mob/majority thinks about a topic rather than sorting things towards my own personal tastes. I'd much rather see a rating system that weights posts/topics and comments based on my history. For instance: if I've promoted a certain topic in the past, put it higher. If I typically promote a given user, put their comment higher. If I typically promote a certain user who promoted another comment, put that comment higher. And so on. Basically censor the stuff I usually disagree with instead of allowing mob rule. [1]
I don't see the point of trying to make everybody see the same truth because that's not how real life works. Mostly, people tend to live in tribes. Wouldn't it be nice if the Internet wasn't always in your face telling you how wrong you are? IMO, such systems would put a chill on the global culture war.
[1] - This might be the perfect problem for a graph database. If anyone wants to work on something like this, let me know how to contact you and I'll give you all of my ideas!
Are you advocating for mob-mentality?
I do not know your positions but it could simply be that someone with the right formulation able to start a trend is yet to come.
Mob mentality is not the same as a popular idea or opinion, could be that popular assumption are indeed wrong and many people either do not care (maybe for principles or maybe because it is not really important) or just never encountered convincing arguments.
Firefox isn't popular and that's my point. A browser with less than 10% market share got on the front page of many places this week because of a marketing push that was helped by a group supporters, a mob, who helped push it there.
A system that was optimized more towards my own dislike and distrust of Firefox and Mozilla wouldn't have shown me this bullshit.
My reasoning is that, at any given point in time, I am wrong about a great number of things. I fear that any algorithm that learns to present me exclusively with the content I like (i.e. which elicits the least emotional objection) is going to hide all things that might correct my current errors.
Good for you! Now, how about letting people get challenged and exposed to new information at a time and place when they choose to instead of constantly? I like camping and hiking...but I'm glad I get to go home to my comfortable house most of the time.
People are currently starting to gravitate more towards small group chats on WhatsApp and similar and away from places like Twitter and Facebook. I wonder why? Could it be it's because they don't want what you want 24/7?
I think so.
And the system you're advocating for, the current one, is obviously way more susceptible to being gamed. As you can see here all it takes is a small mob and a marketing push to get your unpopular browser on the front page 5 times this week. The system I want isn't susceptible to that in the slightest (but if I want to go look at things that I might not agree with, I'm still able to - that's my whole point: User in control, not some timely mob).
Are they and does this have anything to do with exposure to conflicting opinions? Proper studies would be needed to determine this conclusively. After all, this is how it used to be, before Facebook and Twitter appeared and became widely popular not that long ago.
> And the system you're advocating for, the current one, is obviously way more susceptible to being gamed.
I'm not advocating for any system, this is just how life is: you undoubtedly encounter opinions which are not aligned with your own. You will also be wrong a lot of the time. That's nothing to be afraid of. You certainly don't need to build a sheltered city to hide from this.
> The system I want isn't susceptible to that in the slightest (but if I want to go look at things that I might not agree with, I'm still able to - that's my whole point: User in control, not some timely mob).
Except this doesn't really work in the general case. It's both intuitively familiar and well researched that it is really hard to change someone's mind and opinions are very inert.
Furthermore, I don't really see why it would be useful to expend significant energy to shelter yourself from opposing opinions. Simply to avoid emotional discomfort? If you're not in the mood for it in a certain moment, simply not reading online forums and going for a walk or picking up a book seems like a better option.
But being the default? That’s just crazy.
Here's what Mozilla said:
> Firefox does not yet use DoH by default. See the end of this post for instructions on how you can configure Nightly to use (or not use) any DoH server.
> Our second effort focuses on building a default configuration for DoH servers that puts privacy first.
https://blog.nightly.mozilla.org/2018/06/01/improving-dns-pr...
Any such feature, of course, must be something configurable such that any user wishing to use their own DNS provider can do so.
It may perhaps be worth considering privacy-enhancing settings in the context of a mass-market product, where the vast majority of users do not know what DNS is and do not run their own resolvers. In such a context, do you think it might be possible that most users might be better off with privacy-first defaults? With, of course, all the appropriate configuration options for more sophisticated users.
My personal resolver gives me better latency than both CF and Google, and I plan to get it added to the list[1].
[0]: https://wiki.mozilla.org/Security/DOH-resolver-policy
[1]: https://captnemo.in/dns/privacy/, https://captnemo.in/doh/
From https://bugzilla.mozilla.org/show_bug.cgi?id=1529437 it says "[QA:] We have finished testing ... GREEN - SHIP IT" and "signed version [...] for release". Does that mean it went mainstream and is now a browser default?
I see a preference name "network.trr.uri" with a cloudflare URL used for "dns-query" ... that looks bad?
Edit: just found this from Mozilla
"We are currently exploring what the right testing approach should be with users who have opted to participate by using Firefox Nightly." (from Senior Dir. for Eng., https://www.theregister.co.uk/2018/03/20/mozilla_firefox_tes...)
Mozilla's official line is that they consider using nightly as an opt in to send all your DNS requests to a third-party.
Now come on, no-one at Mozilla believes that is true to users expectations.
I think almost all of the statements made here are worded vaguely enough that could be equally have been claimed by Google, e.g. "never sell ... your info" / "only data we want is ... data that serves you in the end". But I think Mozilla's actual intended position is pretty far from Google.
That is unfortunately not alluded to directly at all in this promise.
In fact, for an org championing privacy, one would expect them to at the very least be compliant with something like the GDPR. However, the privacy link[0] in the footer of their website lists data to 3rd-parties by default and describes (pretty non-straighforward) methods to opt-out of each of these individually, rather than the normally required explicit consent of GDPR.
See our data collection guidelines: https://wiki.mozilla.org/Firefox/Data_Collection
"Default off. May be eligible for opt-in data collection by specific users, provided there is (i) advance user notice (ii) consent and (iii) an opt-out."
The only collection of this data that I'm personally aware of is the Firefox Pioneer program.
https://support.mozilla.org/en-US/kb/about-firefox-pioneer
(Disclosure: I work for Mozilla)
https://blog.mozilla.org/press-uk/2017/10/06/testing-cliqz-i...
``` <<>> DiG 9.9.7-P3 <<>> mozilla.org mx ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42182 ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;mozilla.org. IN MX
;; ANSWER SECTION: mozilla.org. 60 IN MX 5 alt1.aspmx.l.google.com. mozilla.org. 60 IN MX 5 alt2.aspmx.l.google.com. mozilla.org. 60 IN MX 10 aspmx3.googlemail.com. mozilla.org. 60 IN MX 1 aspmx.l.google.com.
;; Query time: 39 msec ;; SERVER: 172.26.38.1#53(172.26.38.1) ;; WHEN: Fri Jun 07 10:30:00 PDT 2019 ;; MSG SIZE rcvd: 150 ```
Where else does Mozilla get revenues from?
It would be like a political party being the main donor to the second choice party.
But I recently said good things about Firefox to someone, and noticed one day that they switched to it from Edge. It felt like a small victory.
This person uses Netflix and Spotify. If Firefox didn't support EME, they would not have ditched Spotify and Netflix. They would probably have gone back to Edge, or installed Chrome and used EME from there. EME would not exist in my ideal world but in this case I'm kind of happy EME works in Firefox. Using Firefox over Edge or Chrome is a net gain. Maybe this person will evolve and start to refuse DRMs and/or seek free software (one can dream), but this is not today. Firefox acts like an entry point to this world. If the entry point is too rough, it will not be taken. One thing at a time.
EME is a lost battle, but the war is not over.
That is the minimum of every company's obligations under the European GDPR (Genderal Data Protection Regulation) and even then as far as "our promise to you" goes the answer can simply be "yes, to guide us making better services, for as long as you use anything from Mozilla".
Tech companies are using the word “privacy” a lot these days [..] They all want you to think they can be trusted.
mmhmm.
Kudos as usual to Mozilla for going out of their way to promote these principles.
(The Foundation is a great cause, obviously, but I want to ensure that you are aware of how your donation will be used.)