Live data from Hacker News

Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

support.mozilla.org

181–190 of 537 posts

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#181

Many people seem to be shocked because Mozilla installed an add-on automatically. In my opinion, it doesn't really matter since the code is coming from Mozilla - they're building the whole browser, so they could introduce functionality anywhere. If someone distrusts their add-ons, why trust their browser at all? The main question is what behavior is being introduced. I haven't researched deeply, but apparently the ad…

Speaking for myself here, but I'm not concerned that Mozilla might push malware into Firefox installations. I'm concerned about the lack of judgement in pushing an extension with a vague, scary-sounding name and description simply for a cross-marketing tie-in, and I'm worried that it could have damaged the trust ordinary users have in Firefox.

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#182
post #80
post #34

Earlier quoted context omitted.

> Mozilla's gotta make money somehow They're a nonprofit; they're not allowed to just "make money". And, they already take donations.

This is a very common misconception about non-profits that is not true. The details depend on local laws, but generally a non-profit only means that the owner of the non-profit can't take the all of the actual profit (money) directly out of the non-profit via dividends. Things like non-profits must be focused public good or they can't pay high (or any) salaries are urban legends that have no basis in reality.

They also have limits on political speech. The IRS gives them breaks. One of the big misunderstandings/myths is that a church cannot support a political candidate.

Some people cry "free speech violation" but they can endorse a candidate, they just need to give up their tax privileges. This is why the ACLU is split into two parts. One you can donate to and get tax dedications for, but the other is their lobbying arm, and therefore cannot allow tax deductions for their donors.

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#183

Menu > Options > Privacy & Security > untick Allow Firefox to install and run studies I deliberately kept that enabled initially but if they're going to use it for Adware..

If you're still using Firefox after this it's probably safest and best just to disable everything under Firefox Data Collection and Use

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#184
While I agree that releasing this as an undocumented extension was a poor PR move, in practical terms, I don’t see how this is any more insidious than the ‘no internet’ dinosaur jumping game built in to chrome.

Both are first-party. The difference seems to be that the dinosaur game keeps you entertained, where as this hopes to promote awareness of privacy/security.

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#185
post #84
post #37

Earlier quoted context omitted.

I think the the term “non-profit” is more about how an organization spends the money, rather than how they make it. Non profits and charities definitely bring in money through channels other than donations...

I agree. I merely challenge the notion that a nonprofit -- which proudly tumpets its benevolence and non-profitness -- should get a free pass for covertly installing advertising arrangements, just because they need to "make money". Their charter and marketing is all about defending the internet from the companies doing shady things to make money, so they can't have their cake and eat it.

While I agree with you on that, your previous comment was simply wrong. Non-profits are very much allowed to just "take money" (legal restrictions aside, but for-profit businesses also have legal restrictions). They're not allowed to take that money and distribute it to shareholders as profit.

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#186

Just checked and saw the Looking Glass add-on installed on my work laptop. I've uninstalled Firefox and will be removing it from all of my computers. I had just started slowly migrating back to it with the performance enhancements in the latest update, but honestly I don't think I can get past a breach of trust at this level.

Are you switching to Chrome, the browser that sends your every keystroke back to HQ?

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#187

Many people seem to be shocked because Mozilla installed an add-on automatically. In my opinion, it doesn't really matter since the code is coming from Mozilla - they're building the whole browser, so they could introduce functionality anywhere. If someone distrusts their add-ons, why trust their browser at all? The main question is what behavior is being introduced. I haven't researched deeply, but apparently the ad…

If this were the first incident, and they quickly backtracked on it, then maybe we can give them a pass. But this isn't the first case of somewhat shady behavior. Remember the "user-enhancing" sponsored tiles a few years ago?

https://twitter.com/dherman76/status/433320156496789504

> Excited to share the launch of @mozilla @firefox Tiles program, the first of our user-enhancing programs

The problem there wasn't just the idea of putting ads in the browser, it was also the way in which they tried to present it as a useful addition just like every other ad company tries to defend ads

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#188

Many people seem to be shocked because Mozilla installed an add-on automatically. In my opinion, it doesn't really matter since the code is coming from Mozilla - they're building the whole browser, so they could introduce functionality anywhere. If someone distrusts their add-ons, why trust their browser at all? The main question is what behavior is being introduced. I haven't researched deeply, but apparently the ad…

> I haven't researched deeply, but apparently the add-on does nothing until the user opts-in on studies.

It adds some css to a list of words:

https://github.com/gregglind/addon-wr/blob/da464ac8f1c3b0894...

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#189

Many people seem to be shocked because Mozilla installed an add-on automatically. In my opinion, it doesn't really matter since the code is coming from Mozilla - they're building the whole browser, so they could introduce functionality anywhere. If someone distrusts their add-ons, why trust their browser at all? The main question is what behavior is being introduced. I haven't researched deeply, but apparently the ad…

This is being added to the browser, outside the realm of security updates, through what is supposed to be a UX improvement program, for commercial purposes. It's written by a commercial company that produces advertisement content. It's not clear this code is audited.

Sorry, but I'm uninstalling firefox. They have broken the basic trust I have in them as a user to not push arbitrary code to my machine against my interests.

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#190
post #181

Many people seem to be shocked because Mozilla installed an add-on automatically. In my opinion, it doesn't really matter since the code is coming from Mozilla - they're building the whole browser, so they could introduce functionality anywhere. If someone distrusts their add-ons, why trust their browser at all? The main question is what behavior is being introduced. I haven't researched deeply, but apparently the ad…

Speaking for myself here, but I'm not concerned that Mozilla might push malware into Firefox installations. I'm concerned about the lack of judgement in pushing an extension with a vague, scary-sounding name and description simply for a cross-marketing tie-in, and I'm worried that it could have damaged the trust ordinary users have in Firefox.

> I'm not concerned that Mozilla might push malware into Firefox installations

Nobody is concerned about that, in my opinion. I'm concerned someone will push malware through Mozilla into Firefox installations. Pushing addon installs should not be possible at all.

Post reply on HN