Live data from Hacker News

Firefox Personal Data Promise

blog.mozilla.org

11–20 of 65 posts

Re: Firefox Personal Data Promise

#12
How about "take nothing" instead of "take less"? No PII should be "taken" anywhere. They're a browser -- a platform -- and as such they should be taking great strides to prevent collection of anything at all by applications running on that platform.

Re: Firefox Personal Data Promise

#13

Pocket is notably absent from the "Firefox Family". Perhaps because they can't make that same personal data promise?

Funnily enough, the Pocket logo is present in the thumbnail for the Firefox Family video on https://www.mozilla.org/en-US/ Pocket does not however feature in the video (which is unironically hosted on that Google video hosting platform...)

Re: Firefox Personal Data Promise

#14

I love Mozilla, but it's difficult to take this seriously while they're still partnering with Cloudflare on in-browser resolvers that bypass my local DNS resolver and expose my lookups to Cloudflare: https://blog.mozilla.org/futurereleases/2019/04/02/dns-over-...

Do you think there are users for whom this might be a valuable feature that protects them from snooping ISPs?

Any such feature, of course, must be something configurable such that any user wishing to use their own DNS provider can do so.

Re: Firefox Personal Data Promise

#15

How about "take nothing" instead of "take less"? No PII should be "taken" anywhere. They're a browser -- a platform -- and as such they should be taking great strides to prevent collection of anything at all by applications running on that platform.

Tbh, I don't have as big an issue with Mozilla "taking" lots and lots of my PII as I do with Mozilla sending data about me to 3rd-parties.

That is unfortunately not alluded to directly at all in this promise.

In fact, for an org championing privacy, one would expect them to at the very least be compliant with something like the GDPR. However, the privacy link[0] in the footer of their website lists data to 3rd-parties by default and describes (pretty non-straighforward) methods to opt-out of each of these individually, rather than the normally required explicit consent of GDPR.

[0] https://www.mozilla.org/en-US/privacy/websites/#cookies

Re: Firefox Personal Data Promise

#16
post #5

I for one hope they keep this promise better than the EME one, about which I'm still super salty

I don't know. I hate DRMs and so far I've successfully managed to avoid using EME.

But I recently said good things about Firefox to someone, and noticed one day that they switched to it from Edge. It felt like a small victory.

This person uses Netflix and Spotify. If Firefox didn't support EME, they would not have ditched Spotify and Netflix. They would probably have gone back to Edge, or installed Chrome and used EME from there. EME would not exist in my ideal world but in this case I'm kind of happy EME works in Firefox. Using Firefox over Edge or Chrome is a net gain. Maybe this person will evolve and start to refuse DRMs and/or seek free software (one can dream), but this is not today. Firefox acts like an entry point to this world. If the entry point is too rough, it will not be taken. One thing at a time.

EME is a lost battle, but the war is not over.

Re: Firefox Personal Data Promise

#18
post #8
post #6

Earlier quoted context omitted.

I mean... I’m fine with Cloudflare DoH being an option . But being the default? That’s just crazy.

As far as I remember having a predefined default was never actually considered.

I don't know what the default is now, but the intention was always to make it the default:

https://securityonline.info/doh-encrypted-networking/

Re: Firefox Personal Data Promise

#19
I wish they didn't use G Suite:

``` > DiG 9.9.7-P3 > mozilla.org mx ;; global options: +cmd ;; Got answer: ;; ->>HEADER;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;mozilla.org. IN MX

;; ANSWER SECTION: mozilla.org. 60 IN MX 5 alt1.aspmx.l.google.com. mozilla.org. 60 IN MX 5 alt2.aspmx.l.google.com. mozilla.org. 60 IN MX 10 aspmx3.googlemail.com. mozilla.org. 60 IN MX 1 aspmx.l.google.com.

;; Query time: 39 msec ;; SERVER: 172.26.38.1#53(172.26.38.1) ;; WHEN: Fri Jun 07 10:30:00 PDT 2019 ;; MSG SIZE rcvd: 150 ```

Post reply on HN