Mozilla and Apple, lately, are the only companies I trust my data to. Nice to see more from both.
I do not think you understand the meaning of the word "trust", you may want to look it up. Or maybe you were born after firefox deactivated all add-ons by surprise and accident? Maybe you haven't thought through what an 'app store' really is? Whatever the case, don't bother interacting with me you are so far behind I know nothing you have to say will be of any value on the topics of 'trust', 'corporation' or 'privacy…
Firefox Monitor
211–220 of 227 posts
Re: Firefox Monitor
#212Earlier quoted context omitted.
I usually go for @example.com where is the company I’m handing my address to. After a breach I route that address to /dev/null
That's trivially easy to guess -- and game. You want something that is sufficiently random that it can't be easily guessed or gamed, but can be quickly and easily determined on your side. Salted cryptographic hashes might be a good place to start.
Re: Firefox Monitor
#213Earlier quoted context omitted.
Fastmail supports this natively (and is awesome). You can do service@user.yourdomain.com and it will get delivered to user+service@yourdomain.com.
You can use the + trick and . trick with Gmail addresses too. I think Outlook as well supports the + trick. The only downside to this is that there are plenty of sites that don't accept a + either knowingly or unknowingly.
Re: Firefox Monitor
#214Disclaimer: Firefox Monitor dev here. Note: We just released a "V2" of the site that allows you to add multiple email addresses to monitor, and (then) to have all your breach alerts sent to your single primary email address.
If not: I added an email address to monitor, and the verification email said:
> We sent this message to $userEmail because the email address opted into alerts from Firefox Monitor.
Note the `$userEmail`.
Re: Firefox Monitor
#215Earlier quoted context omitted.
Firstly a Contract is a Meeting of Minds, the forty pages of small type in a PDF are nice, but it's laughable that you pretend you thought everybody read those before using your free service. And if they didn't read them, they clearly cannot agree with just every random term you threw in there and so it can't all be part of that meeting of minds, so there is not, in fact, a contract with people with those terms. OK,…
> Firstly a Contract is a Meeting of Minds Re: this, I'm still fascinated how a contract that both parties are not aware of the existence of is even allowed to be treated as a contract in the first place. In many cases like local software, when you accept the T&C, the other party has no idea this happened in the first place, so they can't even claim to have a contract with you. That you can have a contract with "info…
Probably some other mechanism could have been conjured but in our world this decision means contract law is used to manage situations where two parties would clearly benefit by cutting a deal, yet they never meet. Consider a typical car park. You drive into a sign-posted lot, park your car, and leave. Should we require the owner to have staff present to agree a deal with each user? No, it is enough to post signs explaining the general situation, e.g. "£1 per hour or part hour. Pay at machine. Car Park locked at sunset". A court will look at a situation and imply into existence any more detailed terms needed to handle the case in front of them. Is the car park owner liable for damage caused by stampeding elephants? How about if part of the car park itself falls onto a car? If the machine is broken can you still park? What if some scumbag puts an "out of order" notice on it and collects the money?
The "Meeting of Minds" formulation works very nicely. Suppose I think I'm buying a steak dinner, and you think you're selling me a live cow, once the confusion is realised there was no meeting of minds, no contract is formed. We are both embarrassed and go on our way. In the ideal case, both parties understand clearly what they're agreeing, courts never need do anything whatsoever, a good lawyer's goal in creating written contracts is to ensure this is what happens because courts are expensive and uncertain.
I would recommend seeking out an introductory Contract Law (for non-lawyers) course if you're interested, or in any case if you do freelance work or deal with contracts. Just knowing what Offer and Acceptance are can avoid some nasty situations where you might otherwise need to hire a lawyer after the fact.
Re: Firefox Monitor
#216Earlier quoted context omitted.
Firstly a Contract is a Meeting of Minds, the forty pages of small type in a PDF are nice, but it's laughable that you pretend you thought everybody read those before using your free service. And if they didn't read them, they clearly cannot agree with just every random term you threw in there and so it can't all be part of that meeting of minds, so there is not, in fact, a contract with people with those terms. OK,…
Is your issue that it’s 40 pages? Is your issue the font size? What are the criteria that make terms by which one accesses a service irrelevant? At what point does the service provider’s consent not matter? Your last paragraph seems to assume I am a service provider. I am not. I just think that people should be bound to the things to which they explicitly agree. Does the “user must scroll to the bottom of the terms a…
You're just not going to sell a court on the theory that your free web service has a contract everybody is actually going to read -- so it won't matter how many pages or how large the typeface is.
People being "bound to the things to which they explicitly agree" is actually a problem for a reason I'll get to in a moment, but beyond that the problem for online services and other trivial contracts is that nobody really "explicitly agrees" to them, saying something doesn't make it so, or else all those things Jefferson claimed to be "self-evident" truths wouldn't require any effort to uphold.
Now, even when we actually _have_ agreement, not just somebody clicking OK to make the computer stop bugging them, we still run into a problem. Some terms are inherently prohibited in our society. You simply cannot agree to them even if you want to.
Re: Firefox Monitor
#217Earlier quoted context omitted.
It's not.
See the sibling comment: https://news.ycombinator.com/item?id=20109564
There's no + aliasing in the specs. There's no interpretation defined for local part of email address.
Re: Firefox Monitor
#218Earlier quoted context omitted.
See the sibling comment: https://news.ycombinator.com/item?id=20109564
RFCs don't define any meaning to '+' as described in this thread, except that local part of the address should be interpreted locally (usually by MDA), and preserved unmodified during message transfer. There's no + aliasing in the specs. There's no interpretation defined for local part of email address.
Re: Firefox Monitor
#219Earlier quoted context omitted.
> Firstly a Contract is a Meeting of Minds Re: this, I'm still fascinated how a contract that both parties are not aware of the existence of is even allowed to be treated as a contract in the first place. In many cases like local software, when you accept the T&C, the other party has no idea this happened in the first place, so they can't even claim to have a contract with you. That you can have a contract with "info…
Search for "Carlill v Carbolic Smoke Ball Company" [Carbolic Smoke Balls were advertised as a cure for influenza in the 19th century, you may intuit from the fact that we still don't know how to cure influenza per se that they did not work]. An English Court decided that you can make an offer that you've defined in such a way that you won't receive notice of acceptance, and since /you/ made the offer it's your proble…
The reason is that I feel a "contract" should be limited to conscious agreements on both sides -- and currently, we have contracts where neither is aware of both (one side doesn't know existence, other side either doesn't realize it's a contract or doesn't know all the terms), which is rather... nuts. Why do I think it should be limited to these situations? For a number of orthogonal reasons:
[1] Rules in a contracts are "open" sets rather than closed, so to speak. With something like false advertising, the rules are already set, and (at least in theory) their consequences have been brought up by various parties and taken into consideration by the government, and people just have to play by them. But with a "contract", you're letting arbitrary people make more or less arbitrary rules. Well, it seems natural that if you want to enter the rulemaking business -- society should have a reasonably high bar for that, since after all you intend to later be able to use the same society's government/legal system to enforce your more or less arbitrarily powerful terms against the other party. Requiring that all parties at least be consciously involved and aware of the rules really seems like the least you could do to demonstrate you should be making rules for someone else to play by.
[2] I think the traditional sit-down/signing/handshake is the image most people traditionally think of when they hear "contract", where both parties are aware of its existence and terms, (rather than, say, a parking lot or a ticket purchase). So treating it like this just makes the law reflect the reality that people would expect, which seems like a good thing on its own.
[3] There's an inherent power imbalance simply by virtue of the fact that, quite often, one side has to spend 1/#contracts'th the amount of resources per contract compared to the other, since once you write the contract for the first person then there's next to zero cost for everyone else -- and hence it encourages you to make the terms long and unfair, so that it's not worth it to the other side to challenge them. Really, I see it as something that should be practically a moral duty: if you want to have a fair "contract", with all the force of law behind it, you have to set both parties on equal footing, having humans involved on both sides and aware of everything is really the least both parties can do. It may seem radical... but can you just imagine if every company that wanted to put unfair terms in its contract had to have a representative explicitly tell the average Joe about this and have him consent to it explicitly (instead of just giving him N sheets of paper and having him sign in large blocks he obviously won't read)? People would get so upset and/or would have so much of their time wasted all the time, which introduces inherent friction and negative feedback into this route. It's just so much harder to spend 30 minutes explaining to someone that they have to sacrifice two arms and a leg if they buy your software than to just give them 10 sheets of paper to read while you move on to the next customer.
So these are why I'm not such a huge fan of lumping everything into the "contract" category... they often just seem wrong on so many of these levels.
Re: Firefox Monitor
#220Earlier quoted context omitted.
There are only four major browsers, so it isn't about being a great browser . Many try to switch and then some scandal happens, or it just seems as cluttered as any other browser, and they give up. I think the people who think Firefox Monitor is a good idea are probably the ones who thought the Mr. Robot promo was a good idea. A good browser should stay out of the way. Chrome did for a long time. Having a "Save to Po…
Browsers have tons of feature; you don't need to use the ones you don't care for. It's trivial to remove the pocket button - right-click and select "remove from address bar". If I might ask - how is a "save to pocket" intrusive? This isn't like any of the billions of social media buttons you'll come across on the web; it's not a tracker or anything (and if you do click it, you're going to need to make an account firs…
Mozilla's promotions on HN/reddit won't amount to much.