←back to thread

Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

(support.mozilla.org)
757 points shak77 | 7 comments | 15 Dec 17 13:47 UTC | HN request time: 0.074s | source | bottom
Show context
shak77 ◴[15 Dec 17 13:47 UTC] No.15931738[source]▶
This is what it looks like: https://imgur.com/a/mriUw

It scared the hell out of me! Are these guys losing their minds?

It was reported as a bug and the response thus far is indeed underwhelming for such a severe issue: https://bugzilla.mozilla.org/show_bug.cgi?id=1424977

replies(2): >>15931793 #>>15931902 #
bwat49 ◴[15 Dec 17 14:15 UTC] No.15931902[source]▶
It wasn't supposed to be visible on the addons page
replies(2): >>15931947 #>>15932098 #
mark-r ◴[15 Dec 17 14:21 UTC] No.15931947[source]▶
I don't think that makes it better. Knowing that there's a way to get an addon installed invisibly is going to be more justification for paranoia.
replies(2): >>15931973 #>>15932176 #
1. dahart ◴[15 Dec 17 14:50 UTC] No.15932176[source]▶
There almost certainly is not a way to invisibly install add-ons, unless you are part of Mozilla, and, you know, making Firefox. If paranoia is your thing, it might be worth considering that Mozilla can do anything it wants inside Firefox core, all of it is "invisible" to you.
replies(2): >>15932415 #>>15932871 #
2. bo1024 ◴[15 Dec 17 15:24 UTC] No.15932415[source]▶
Yes and a big part of this entire issue is users deciding whether we can trust Mozilla with that power or not.
replies(1): >>15938406 #
3. kuschku ◴[15 Dec 17 16:22 UTC] No.15932871[source]▶
And this is the point where even the most Mozilla-supporting users move away. For me, this is it, I’m going to Chromium.

Fuck this shit, in the past months we had CliqZ https://news.ycombinator.com/item?id=15421708, we had Mozilla adding new telemetry, we had Mozilla force-enable toolkit.telemetry.enabled, we had Mozilla say that, if you download Nightly, that is considered opt-in to tracking, we had Mozilla put Google Analytics into the Addons menu (because it’s loaded from addons.mozilla.org: https://github.com/mozilla/addons-frontend/issues/2785 ), and we had Mozilla say that, if we don’t trust Google, we shouldn’t use Firefox.

Fuck this.

replies(3): >>15933274 #>>15933605 #>>15936508 #
4. Danihan ◴[15 Dec 17 17:15 UTC] No.15933274[source]▶
Great points, thanks for compiling these..

I was using firefox because I don't trust google. ;(

5. programd ◴[15 Dec 17 17:54 UTC] No.15933605[source]▶
Regarding telemetry, take a look at the settings in about:config. There are several toolkit.telemetry.Ping settings which are set to true by default. In the spirit of charity I'm going to assume that those phone home pings - on startup, shutdown, update - are not enabled unless telemetry is enabled. But I have not checked...
6. bigbugbag ◴[16 Dec 17 00:26 UTC] No.15936508[source]▶
Alternatively you can give waterfox[1] a try.

Features

    Disabled Encrypted Media Extensions (EME)
    Disabled Web Runtime (deprecated as of 2015)
    Removed Pocket
    Removed Telemetry
    Removed data collection
    Removed startup profiling
    Allow running of all 64-Bit NPAPI plugins
    Allow running of unsigned extensions
    Removal of Sponsored Tiles on New Tab Page
    Addition of Duplicate Tab option
    Locale selector in about:preferences > General
[1]: https://www.waterfoxproject.org/
7. Sylos ◴[16 Dec 17 07:52 UTC] No.15938406[source]▶
And he's saying that this occurence should have no effect on this decision, not in any rational mind.