←back to thread

Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

(support.mozilla.org)
757 points shak77 | 3 comments | 15 Dec 17 13:47 UTC | HN request time: 0.542s | source
Show context
hitekker ◴[15 Dec 17 19:26 UTC] No.15934310[source]▶
1) Mozilla uses weird, spooky language in an add-on.

2) Users are justifiably concerned.

3) Mozilla explains that the add-on is actually anodyne; the developers responsible were having fun with an opt-in research service.

4) Some users try to justify their initial overreaction by painting Firefox as mysterious, dangerous entity, fabulating conspiracy theories about one of the most forthright and open OSS companies in the world.

Really, guys. If Mozilla was hellbent on invading your privacy, do you really think they would proudly entitle their tracker "Looking Glass". Or would they call it debugservice_1223?

replies(5): >>15934357 #>>15934746 #>>15935512 #>>15936001 #>>15936446 #
1. Karunamon ◴[15 Dec 17 19:32 UTC] No.15934357[source]▶
3.5) Most users insist that this isn't okay, that addon installations should be approved by the owner of the computer.

This isn't about what the addon itself does or does not do, it's the principle of force-pushing unwanted content without prior affirmative consent.

This would apply even if the addon was just a stub that didn't have any executable code in it. In this case, it's worse: an ad.

replies(2): >>15934443 #>>15934456 #
2. takeda ◴[15 Dec 17 19:44 UTC] No.15934443[source]▶
When you install Firefox it asks whether you want to take part in these studies. You can also change the setting at any time in preferences (about:preferences#privacy section).
3. hitekker ◴[15 Dec 17 19:46 UTC] No.15934456[source]▶
I would agree with you, if the add-on in question was not developed, shipped, and offered by the people who made the browser, of which the add-on sandbox is a part.

In my view, that sandbox is a trusted area between the browser and the user.

Mozilla has the privilege accorded to it as the developer of the browser, to modify the addon sandbox so long as they don't infringe on my interests, e.g., security, stability, privacy, speed.

For example, Chrome automatically disable extensions that ask for too many new permissions upon update. Chrome will also make it difficult to add extensions that are not listed on the chrome store.

If we remove the right for browser developers to install, uninstall and alter add-ons, then we're essentially forcing them to modify the browser instead, which is overkill for the add-on in question.

At the end of the day, if you can't trust the developers of your browser, then you should install another one and disable add-ons entirely.

3.5 falls into 4.