←back to thread

757 points shak77 | 2 comments | | HN request time: 0s | source
Show context
AdmiralAsshat ◴[] No.15932004[source]
https://support.mozilla.org/en-US/kb/lookingglass

The Mr. Robot series centers around the theme of online privacy and security. One of the 10 guiding principles of Mozilla's mission is that individuals' security and privacy on the internet are fundamental and must not be treated as optional. The more people know about what information they are sharing online, the more they can protect their privacy.

...which you've done by installing a fishy-looking addon without our permission and making us less likely to trust you?

Well-done, Mozilla.

replies(3): >>15932105 #>>15932234 #>>15932789 #
theossuary ◴[] No.15932105[source]
If you clicked on the link about shield studies you'd see it says they're opt in, did you not getting prompted about it?
replies(9): >>15932122 #>>15932143 #>>15932169 #>>15932180 #>>15932182 #>>15932185 #>>15932332 #>>15932363 #>>15932810 #
yborg ◴[] No.15932143[source]
Apparently it's getting loaded anyway for some people that say they had "Studies" disabled and/or "Studies" itself became re-enabled.

The whole idea of slipping paid advertorial content into what are billed as "research" kind of gives the lie to this whole thing and is why I never turn these on in any product. Which is also why it's now "opt-out" by default, and why it will eventually not be an option at all. It's all for our own good, you see.

replies(2): >>15932194 #>>15932210 #
Ajedi32 ◴[] No.15932194[source]
You don't just need "Studies" enabled, you also need to explicitly opt-in to each specific study on an individual basis:

> Participation in an individual study is opt-in

Source: https://wiki.mozilla.org/Firefox/Shield/Shield_Studies

If that didn't happen in this case, then I suspect it's probably a bug.

replies(4): >>15932236 #>>15932322 #>>15932829 #>>15932901 #
acqq ◴[] No.15932322[source]
> you also need to explicitly opt-in

Wrong, as far as I see: Looking in my about:config, I see

    app.shield.optoutstudies.enabled=true
    browser.onboarding.shieldstudy.enabled=true
enabled by default. The settings that I've changed from the default are shown in bold. These aren't bold. Those are the defaults. Everybody can check.

That means that the user must actively take steps to disable them, if he knows that they exist and where he can disable them.

Every time the user creates a new profile, and most probably also when he "refreshes" an old one, he has by default the studies allowed.

It's even worse in other aspects: through the UI the "Allow Firefox to install and run studies" can be unchecked but it doesn't change the value of "experiments.enabled" to false in about:config.

Apparently the "experiments" allow Mozilla to install the "experimental" extensions to any user, without him knowing. And these extensions are invisible in the GUI! Even if the user goes to the about:config and sets extensions.ui.experiment.hidden to false, it will be automatically set to true again.

replies(3): >>15932656 #>>15932744 #>>15933164 #
1. lozenge ◴[] No.15932744[source]
It looks like experiments are previews of potential new features, like letting you pop a video out of a page https://testpilot.firefox.com/experiments/min-vid?utm_source...

Whereas studies collect usage data.

replies(1): >>15932816 #
2. acqq ◴[] No.15932816[source]
Why should the "previews of potential new features" in the form of the extensions be hidden from the user, and even if the user "unhides" them be automatically hidden again?