←back to thread

Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

(support.mozilla.org)
757 points shak77 | 2 comments | 15 Dec 17 13:47 UTC | HN request time: 0s | source
Show context
shak77 ◴[15 Dec 17 13:47 UTC] No.15931738[source]▶
This is what it looks like: https://imgur.com/a/mriUw

It scared the hell out of me! Are these guys losing their minds?

It was reported as a bug and the response thus far is indeed underwhelming for such a severe issue: https://bugzilla.mozilla.org/show_bug.cgi?id=1424977

replies(2): >>15931793 #>>15931902 #
bwat49 ◴[15 Dec 17 14:15 UTC] No.15931902[source]▶
It wasn't supposed to be visible on the addons page
replies(2): >>15931947 #>>15932098 #
mark-r ◴[15 Dec 17 14:21 UTC] No.15931947[source]▶
I don't think that makes it better. Knowing that there's a way to get an addon installed invisibly is going to be more justification for paranoia.
replies(2): >>15931973 #>>15932176 #
bwat49 ◴[15 Dec 17 14:24 UTC] No.15931973[source]▶
You can disable these studies under Options | Privacy and Security
replies(3): >>15932013 #>>15932116 #>>15933206 #
_red ◴[15 Dec 17 14:29 UTC] No.15932013[source]▶
I hate the fact that Firefox increasingly makes me jump through all sorts of hoops to find all the hidden options to turn off their various spyware attempts. Its the Win10 of browsers...
replies(2): >>15932079 #>>15936522 #
teddyfrozevelt ◴[15 Dec 17 14:36 UTC] No.15932079[source]▶
Going through your browser settings really is quite the hoop.
replies(3): >>15932141 #>>15932148 #>>15933044 #
_red ◴[15 Dec 17 14:46 UTC] No.15932141[source]▶
Yeah, its so intuitive for the average person to type: about:config in address bar and scroll through hundreds of oddly named parameters to turn off spyware.

Comments like yours are illustrative of a certain mindset. When you encounter the complexity of domains you are not intimately familiar with (court system, law, finance, etc), and those complexities are designed specifically to make it hard for you to protect yourself, I'm sure you are just as understanding as you are now.

replies(2): >>15932193 #>>15932306 #
bwat49 ◴[15 Dec 17 15:08 UTC] No.15932306{3}[source]▶
You're being hyperbolic, you don't need to go into about:config.

It's right in the main browser settings, under the Privacy and Security section where one would expect settings like this to be

replies(2): >>15935448 #>>15936535 #
1. bigbugbag ◴[16 Dec 17 00:31 UTC] No.15936535{4}[source]▶
If what you say is true, please point me to where I can find the following privacy settings in the main preferences:

  network.websocket.enabled
  network.IDN_show_punycode
  dom.event.clipboardevents.enabled
  dom.storage.enabled
  dom.indexedDB.enabled
  dom.battery.enabled
  dom.enable_user_timing
  dom.enable_resource_timing
  dom.netinfo.enabled
  layout.css.visited_links_enabled
  browser.safebrowsing.phishing.enabled
  browser.safebrowsing.downloads.remote.enabled
  browser.safebrowsing.malware.enabled
  browser.send_pings
  beacon.enabled
  privacy.donottrackheader.enabled
  privacy.trackingprotection.enabled
  dom.enable_performance
  datareporting.healthreport.service.enabled
  datareporting.healthreport.uploadEnabled
  toolkit.telemetry.enabled
  toolkit.telemetry.unified
  media.peerconnection.enabled
  media.peerconnection.ice.default_address_only
  media.peerconnection.ice.no_host
  media.eme.enabled
  media.gmp-eme-adobe.enabled
  webgl.disabled
  geo.enabled
  camera.control.face_detection.enabled
  device.sensors.enabled
  security.tls.unrestricted_rc4_fallback
  security.tls.insecure_fallback_hosts.use_static_list
  security.ssl.require_safe_negotiation
  security.ssl.treat_unsafe_negotiation_as_broken
replies(1): >>15938362 #
2. justinclift ◴[16 Dec 17 07:38 UTC] No.15938362[source]▶
Errr... is "dom.enable_performance" really a privacy setting?

Doing someone online searching now, not seeing an explanation for it. There is one other HN post though, also mentioning it in a privacy context, but not further info either. :/