Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Firefox Personal Data Promise

blog.mozilla.org

Post reply on HN
Print view View original

21–30 of 65 posts

Re: Firefox Personal Data Promise

#21

Post by jodrellblank »

We ask ourselves: do we actually need this? What do we need it for? And when can we delete it?

That is the minimum of every company's obligations under the European GDPR (Genderal Data Protection Regulation) and even then as far as "our promise to you" goes the answer can simply be "yes, to guide us making better services, for as long as you use anything from Mozilla".

Tech companies are using the word “privacy” a lot these days [..] They all want you to think they can be trusted.

mmhmm.

Re: Firefox Personal Data Promise

#23

Post by jeena »

lucideer wrote: post #13
AdmiralAsshat wrote: post #11

Pocket is notably absent from the "Firefox Family". Perhaps because they can't make that same personal data promise?

Funnily enough, the Pocket logo is present in the thumbnail for the Firefox Family video on https://www.mozilla.org/en-US/ Pocket does not however feature in the video (which is unironically hosted on that Google video hosting platform...)

That's really weird that they don't host the video themselves but instead on YouTube and send all their users (who go on that webpage) automatically to Google.

Re: Firefox Personal Data Promise

#24

Post by bastawhiz »

cdransf wrote: post #19

I wish they didn't use G Suite: ``` > DiG 9.9.7-P3 > mozilla.org mx ;; global options: +cmd ;; Got answer: ;; ->>HEADER ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;mozilla.org. IN MX ;; ANSWER SECTION: mozilla.org. 60 IN MX 5 alt1.aspmx.l.google.com. mozilla.org. 60 IN MX 5 alt2.aspmx.l.google.com. mozilla.org. 60 IN MX 10 aspmx3.googlemail.com. mozilla.org. 60 IN MX 1 aspmx.l.go…

Of all the things I wish Mozilla did differently, their choice of internal corporate email provider is roughly at the bottom of the list. Using a FOSS solution provides essentially zero benefit to even a fraction of a percent of their users.

Re: Firefox Personal Data Promise

#25

Post by cdransf »

bastawhiz wrote: post #24
cdransf wrote: post #19

I wish they didn't use G Suite: ``` > DiG 9.9.7-P3 > mozilla.org mx ;; global options: +cmd ;; Got answer: ;; ->>HEADER ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;mozilla.org. IN MX ;; ANSWER SECTION: mozilla.org. 60 IN MX 5 alt1.aspmx.l.google.com. mozilla.org. 60 IN MX 5 alt2.aspmx.l.google.com. mozilla.org. 60 IN MX 10 aspmx3.googlemail.com. mozilla.org. 60 IN MX 1 aspmx.l.go…

Of all the things I wish Mozilla did differently, their choice of internal corporate email provider is roughly at the bottom of the list. Using a FOSS solution provides essentially zero benefit to even a fraction of a percent of their users.

Sure, but it undermines their public opposition to Google and their practices. DuckDuckGo appears to operate just fine on Fastmail.

Re: Firefox Personal Data Promise

#26

Post by acdha »

josteink wrote: post #18
afiori wrote: post #8

Earlier quoted context omitted.

As far as I remember having a predefined default was never actually considered.

I don't know what the default is now, but the intention was always to make it the default: https://securityonline.info/doh-encrypted-networking/

Whoever wrote that blog post made several claims which are contradicted by the linked blog post. I'm wondering whether that's just being confused on the different between enabling the DoH code behind a disabled default setting and changing the default configuration to use a particular server.

Here's what Mozilla said:

> Firefox does not yet use DoH by default. See the end of this post for instructions on how you can configure Nightly to use (or not use) any DoH server.

> Our second effort focuses on building a default configuration for DoH servers that puts privacy first.

https://blog.nightly.mozilla.org/2018/06/01/improving-dns-pr...

Re: Firefox Personal Data Promise

#28

Post by captn3m0 »

dogecoinbase wrote: post #3

I love Mozilla, but it's difficult to take this seriously while they're still partnering with Cloudflare on in-browser resolvers that bypass my local DNS resolver and expose my lookups to Cloudflare: https://blog.mozilla.org/futurereleases/2019/04/02/dns-over-...

Mozilla has published a DoH resolver policy[0], which should hopefully allow more resolvers to be added to the default list, and let Firefox pick as per latency.

My personal resolver gives me better latency than both CF and Google, and I plan to get it added to the list[1].

[0]: https://wiki.mozilla.org/Security/DOH-resolver-policy

[1]: https://captnemo.in/dns/privacy/, https://captnemo.in/doh/

Re: Firefox Personal Data Promise

#29

Post by dblohm7 »

mondoshawan wrote: post #12

How about "take nothing" instead of "take less"? No PII should be "taken" anywhere. They're a browser -- a platform -- and as such they should be taking great strides to prevent collection of anything at all by applications running on that platform.

Most of the data that is collected by Mozilla is not PII.

See our data collection guidelines: https://wiki.mozilla.org/Firefox/Data_Collection

Re: Firefox Personal Data Promise

#30

Post by dblohm7 »

Krasnol wrote: post #4
kreetx wrote: post #2

Do they take periodic donations somewhere? ;)

https://donate.mozilla.org/en-US/?presets=50%2C30%2C20%2C10&...

Note that donations are used exclusively for Foundation efforts; donation money is not put toward product development.

(The Foundation is a great cause, obviously, but I want to ensure that you are aware of how your donation will be used.)

Post reply on HN