Most active commenters
  • bwat49(3)

←back to thread

757 points shak77 | 15 comments | | HN request time: 0.01s | source | bottom
Show context
shak77 ◴[] No.15931738[source]
This is what it looks like: https://imgur.com/a/mriUw

It scared the hell out of me! Are these guys losing their minds?

It was reported as a bug and the response thus far is indeed underwhelming for such a severe issue: https://bugzilla.mozilla.org/show_bug.cgi?id=1424977

replies(2): >>15931793 #>>15931902 #
bwat49 ◴[] No.15931902[source]
It wasn't supposed to be visible on the addons page
replies(2): >>15931947 #>>15932098 #
mark-r ◴[] No.15931947[source]
I don't think that makes it better. Knowing that there's a way to get an addon installed invisibly is going to be more justification for paranoia.
replies(2): >>15931973 #>>15932176 #
1. bwat49 ◴[] No.15931973[source]
You can disable these studies under Options | Privacy and Security
replies(3): >>15932013 #>>15932116 #>>15933206 #
2. _red ◴[] No.15932013[source]
I hate the fact that Firefox increasingly makes me jump through all sorts of hoops to find all the hidden options to turn off their various spyware attempts. Its the Win10 of browsers...
replies(2): >>15932079 #>>15936522 #
3. teddyfrozevelt ◴[] No.15932079[source]
Going through your browser settings really is quite the hoop.
replies(3): >>15932141 #>>15932148 #>>15933044 #
4. falava ◴[] No.15932116[source]
You should opt in, not opt out
5. _red ◴[] No.15932141{3}[source]
Yeah, its so intuitive for the average person to type: about:config in address bar and scroll through hundreds of oddly named parameters to turn off spyware.

Comments like yours are illustrative of a certain mindset. When you encounter the complexity of domains you are not intimately familiar with (court system, law, finance, etc), and those complexities are designed specifically to make it hard for you to protect yourself, I'm sure you are just as understanding as you are now.

replies(2): >>15932193 #>>15932306 #
6. linkmotif ◴[] No.15932148{3}[source]
It is.
7. ◴[] No.15932193{4}[source]
8. bwat49 ◴[] No.15932306{4}[source]
You're being hyperbolic, you don't need to go into about:config.

It's right in the main browser settings, under the Privacy and Security section where one would expect settings like this to be

replies(2): >>15935448 #>>15936535 #
9. mynewtb ◴[] No.15933044{3}[source]
How are you supposed to do turn the defaults to a reasonable level of privacy without launching Firefox once though?
replies(1): >>15934513 #
10. arprocter ◴[] No.15933206[source]
Preferences/Options -> Privacy and Security -> Allow Firefox to install and run studies
11. takeda ◴[] No.15934513{4}[source]
I remember it was asking if I want participate in studies when I installed FF for the first time.
12. JadeNB ◴[] No.15935448{5}[source]
> It's right in the main browser settings, under the Privacy and Security section where one would expect settings like this to be

If you asked me "where would you go to change settings to prevent the browser from violating your privacy and infringing on your security?", then, yes, I would go to "Privacy and Security". If, however, you asked me "what would you expect to find under 'Privacy and Security'?", my answer would be that that's where I would go to protect myself from malicious websites, not from malicious browsers.

(I know that 'malicious' is quite, and almost certainly too, strong here, but the point is that I think, and am explicitly encouraged to think, of Mozilla as being on my side against the sites I visit, and I don't think it's natural to expect that I will start thinking of how I need to protect myself from Mozilla to use their products in the way that I, rather than they, intend.)

13. bigbugbag ◴[] No.15936522[source]
There's an extension for that called privacy settings[1] it exposes all the settings in one easy place.

I also recommend waterfox instead of firefox.

[1]: https://addons.mozilla.org/en-US/firefox/addon/privacy-setti... [2]: https://www.waterfoxproject.org/

14. bigbugbag ◴[] No.15936535{5}[source]
If what you say is true, please point me to where I can find the following privacy settings in the main preferences:

  network.websocket.enabled
  network.IDN_show_punycode
  dom.event.clipboardevents.enabled
  dom.storage.enabled
  dom.indexedDB.enabled
  dom.battery.enabled
  dom.enable_user_timing
  dom.enable_resource_timing
  dom.netinfo.enabled
  layout.css.visited_links_enabled
  browser.safebrowsing.phishing.enabled
  browser.safebrowsing.downloads.remote.enabled
  browser.safebrowsing.malware.enabled
  browser.send_pings
  beacon.enabled
  privacy.donottrackheader.enabled
  privacy.trackingprotection.enabled
  dom.enable_performance
  datareporting.healthreport.service.enabled
  datareporting.healthreport.uploadEnabled
  toolkit.telemetry.enabled
  toolkit.telemetry.unified
  media.peerconnection.enabled
  media.peerconnection.ice.default_address_only
  media.peerconnection.ice.no_host
  media.eme.enabled
  media.gmp-eme-adobe.enabled
  webgl.disabled
  geo.enabled
  camera.control.face_detection.enabled
  device.sensors.enabled
  security.tls.unrestricted_rc4_fallback
  security.tls.insecure_fallback_hosts.use_static_list
  security.ssl.require_safe_negotiation
  security.ssl.treat_unsafe_negotiation_as_broken
replies(1): >>15938362 #
15. justinclift ◴[] No.15938362{6}[source]
Errr... is "dom.enable_performance" really a privacy setting?

Doing someone online searching now, not seeing an explanation for it. There is one other HN post though, also mentioning it in a privacy context, but not further info either. :/