Live data from Hacker News

Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

support.mozilla.org

421–430 of 537 posts

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#421

Earlier quoted context omitted.

The source lives at https://github.com/gregglind/addon-wr/

Looking over [the contributors list][1], looks like the plugin was written entirely by Mozilla employees. So, no "Mr Robot marketing department", as some commenters here have been speculating. [1]: https://github.com/gregglind/addon-wr/graphs/contributors

[deleted]

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#422

Earlier quoted context omitted.

poor argument. ostensibly the only reason to separate business from pleasure is out of practical concerns. without stating practical concerns there’s no way consider the validity of your comment. who knows, you may totally change my mind, but as it stands it makes it difficult to disagree or agree with you.

How about this: I opted into FF telemetry and "studies" with the understanding that some extra data would be collected and experimental features or specialized debugging tools might get pushed to my browser (like the last "study" I saw for collecting JS errors). This addon is none of those things. It is an advertisement. Call it an "alternate reality game" if you like, but it's an advertisement for a television show.…

Raising awareness about security and privacy relevant issues from a TV show seems to me like it (indirectly) makes Firefox a better browser. An AR game does nothing to improve the browser by itself, but think of the big picture. Cultural awareness is a big part of it.

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#423
post #85

Previously: * https://news.ycombinator.com/item?id=15921134 This is a link to the GitHub issue: * https://github.com/gregglind/addon-wr/issues/36 There are several scary things about this: - Unknown Mozilla developers can distribute addons to users without their permission - Mozilla developers can distribute addons to users without their knowledge - Mozilla developers themselves don't realise the consequences of doin…

> Unknown Mozilla developers can distribute addons to users without their permission "In related news, unknown website developers can distribute programs and run them in your browser. Additionally, it's been determined that browsers sometimes download changed versions of themselves without your permission. Worst of all, we've determined that sometimes the program you download and run yourself on your computer does st…

> "In related news, unknown website developers can distribute programs and run them in your browser. Additionally, it's been determined that browsers sometimes download changed versions of themselves without your permission. Worst of all, we've determined that sometimes the program you download and run yourself on your computer does stuff it didn't say it would do!"

No they can't, despite mozilla removing the option to prevent this, I have an extension preventing website to run code in my browser without my permission. it happens to be one of the most popular firefox extension: noscript. (also umatrix and request policy).

No the browsers do not download changed version of themselves, they do not have the administrative permissions required to install programs on my box. I get my update from the official distro repository on my terms.

I do not download and run programs, they come from the distro repository. This is a matter of trusting the package maintainers but up until now this has served many people well.

It seems you guessed wrong and it does not work the same for everybody, some of us have chosen to take the extra step required for this kind of misadventure to be unlikely.

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#424

Earlier quoted context omitted.

How about this: I opted into FF telemetry and "studies" with the understanding that some extra data would be collected and experimental features or specialized debugging tools might get pushed to my browser (like the last "study" I saw for collecting JS errors). This addon is none of those things. It is an advertisement. Call it an "alternate reality game" if you like, but it's an advertisement for a television show.…

Raising awareness about security and privacy relevant issues from a TV show seems to me like it (indirectly) makes Firefox a better browser. An AR game does nothing to improve the browser by itself, but think of the big picture. Cultural awareness is a big part of it.

If you want to take an ideological perspective, the big picture of this is that the browser maker is willing to push advertising software to people who didn't ask for it, over a channel that wasn't built for it, to further a political agenda.

Even if it's ostensibly about ideals I might agree with, this was a very poor decision and a breach of trust.

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#425

Earlier quoted context omitted.

Correct, those ToS and EULA are considered invalid, if they contain unexpected agreements, such as "your firstborn belongs to us", or "we can install whatever software we want on your system".

Except they didn't install whatever software they want. They said they can install software to check metrics and more. Which is what this is.

"and more" == "whatever"

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#426

Earlier quoted context omitted.

> No changes will be made to Firefox unless you have opted in to this Alternate Reality Game. That can't possibly be true. I had it installed, and I'm on my work machine using Firefox Developer Edition. I didn't opt in to any ARG.

I think what they mean is that the addon doesn't do anything unless you opt-in. Still, why install it at all?

Really poor choice of words here from mozilla. "The changes that already happened will not make changes to your firefox unless you enable them to", in other words the changes already happened and are just waiting to be activated.

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#427

Earlier quoted context omitted.

Only if the preference extensions.pug.lookingglass is changed from the default of false. I haven't figured out how that setting is exposed yet. Maybe they expect people to go to about:config and change it? Is there video footage suggesting that in the TV show? https://github.com/gregglind/addon-wr/blob/104-rename-less-v...

From reading the source, that setting is not exposed anywhere; about:config seems to be the only way to turn it on.

From reading the commit history, it looks like it's still under active development.

    @gregglind re-add 'fuck' to the word list
    gregglind committed 3 days ago
https://github.com/gregglind/addon-wr/commit/da464ac8f1c3b08...

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#428

Earlier quoted context omitted.

i'm on nightly and the default was to opt me in. that's some shady shit. i'm pissed. mozilla is rapidly burning through over a decade of hard-earned trust and goodwill. i install firefox on other people's machines. i'm not a good user to piss off. am i gonna have to wait for servo to mature and make an unmozillad servo? what a sad reality that would be. this is not the browser we were looking for.

if you're on Nightly, this is literally what you signed up for: all the experimental settings and all new functionality turned on by default so that you can be part of the test bed of users and devs that can report back to the larger developer community through Bugzilla when things aren't working the way they should be. Complaining about the fact that Nightly did exactly what it's supposed to is kind of ridiculous.

How can I get my bitcoin mining extension included in the nightly build, too? Trust me, it really needs lots and lots of widespread testing by as many users as possible!

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#429
post #329

Looks like it's a promo for Mr Robot, which is really not ok. > What's happening? Are you a fan of Mr Robot? Are you trying to solve one of the many puzzles that the Mr Robot team has built? You’re on the right track. Firefox and Mr Robot have collaborated on a shared experience to further your immersion into the Mr Robot universe, also known as an Alternate Reality Game (ARG). The effects you’re seeing are a part of…

If it was a promo, it would be a real bad promo. I did not watch Mr Robot and that quote did not made me aware of it until people started referencing it here. The extension is for shield study, when you install Firefox for the first time it asks if you want to take part in it (it is enabled by default though)

Mr Robot is a tv show repeatedly showing how you can pwn other people computer by pushing seemingly innocuous code.

It has been praised for its technical accuracy, basically the show warns us about exactly what mozilla did as this could be exploited to hack into computers.

Re: Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

#430
post #146

I just wanted to add a few things. 1. I notice it yesterday, only because Avast was showing I have a low trust level Add-On installed in Firefox. 2. I googled it, and the first results was from Mozilla, showing it was part of their studies and experiment. 3. That was Ok, because I trust Mozilla, although somewhere in the back of my mind I thought every studies were supposed to be opt-in, since I have a few Add On ins…

I cant find any indication that Mozilla was collecting any data from this addon, either for themselves or for anyone else. The only way anyone would even be affected by it is by going to one of 3 hard-coded websites owned by the network behind Mr. Robot (a show known for putting easter eggs all over the web) and hovering over some text. It's definitely a dick move, but it isn't spyware as some people are saying, just a very poorly executed promotion.
Post reply on HN