• 2 Posts
  • 2.46K Comments
Joined 2 years ago
cake
Cake day: June 14th, 2023

help-circle















  • You do not need to give Firefox or Mozilla permission to “do” anything when you simply navigate to a website or perform a search, because the only entities involved in that transaction are yourself, your ISP and the website. NOT Mozilla.

    Again, as I’ve already pointed out this is not correct. You don’t interact with websites directly; you interact with them through your web browser.

    To be super clear here: Yes, Firefox as an installed application has complete and total access and permission on anything you ever do or say or send, and always has done since day 1. And that is absolutely fine, because that data did not go back to Mozilla.

    Except you don’t know that. You can’t say what expectations you might have had with whatever data you provided because there was no policy published to say what Mozilla might have done with it. Now, there is.


  • Does Notepad need a license to interpret your keystrokes and save them to a file?

    Oh look at that, a privacy policy in Notepad that tells you how Microsoft uses the data you type into Notepad.

    Interpreting my keystrokes and formatting them as an HTTP request to the search engine should not require any online service

    It doesn’t. The policy covers what happens after that. Sure, open up Firefox and type whatever you want in the address bar and you can be as private as you want. The second you press Enter is when Firefox does stuff with what you typed, and Mozilla is saying that when you push Enter you give them permission to do that stuff. You’re giving Mozilla permission to send your search to Google for midget porn, or to post your pro-Trump rant to Facebook, or email your great-Grandma’s secret oatmeal raisin cookie recipe to your ex-wife.

    It’s turning an implicit use of a web browser (“Of course we’re sending your search to Google and nowhere else wink”) into an explicit use (“When you provide data to Firefox, we’re gonna do this with it, cool?”)


  • That’s the thing: you do interact with the web browser. It’s literally the first thing that has to happen before accessing the Internet.

    You don’t type directly into Facebook; you don’t search Google directly. You type into a text box in web page rendered by your browser. Your browser handles the HTTPS encryption as well as sending everything you type to the next layer in the network stack. That’s what Mozilla’s policy is clarifying- the very act of typing data into Firefox means you’re giving data to Firefox, so they’re telling you what happens to that data when you do (which is not “send it to Mozilla”).


  • I agree, and so does Mozilla. From the linked blog post:

    Regarding our position around licensing, we need a license to allow us to make some of the basic functionality of Firefox possible. Without it, we couldn’t use the words you type into Firefox to perform your searches, for example. It does NOT give us ownership of your data or a right to use it for anything other than what is described in the Privacy Notice. We’ve added this note to our blog to clarify, so thank you for your feedback.

    Here’s the Privacy Notice referenced above. While I agree with you that they are vague about their “Partners, service providers, suppliers and contractors” they supply data to (read: Google) they do provide ways for you to request that data.


  • Seems weird. Should the linux kernel be getting my permission to send what I type from the keyboard to Firefox? What about when the kernel sends what firefox does through my wifi card? It gets silly real quick.

    Should they not? Do you want everything you type on your computer, even stuff that’s not meant to be seen publicly, to be sent somewhere without your knowledge?

    A few months ago everyone was in an uproar because Microsoft wanted to do that very thing with Windows Recall. Why is that idea preposterous just because Firefox is telling you about it?