←back to thread

1602 points rebelwebmaster | 3 comments | | HN request time: 0.399s | source
Show context
dblohm7 ◴[] No.24122017[source]
[I am a Mozilla employee, and yes, I do recognize how my position influences my perspective.]

One thing that always frustrates me a bit whenever Mozilla comes up on HN or elsewhere is that we are always held to impossibly high standards. Yes, as a non-profit, we should be held to higher standards, but not impossible standards.

OTOH, sometimes it just seems unreasonable and absurd. Stuff like, to paraphrase, "Look at the corporate doublespeak in that press release. Fuck Mozilla, I'm switching to Chrome."

Really? That's what's got you bent out of shape?

Sure, Mozilla has made mistakes. Did we apologize? Did we learn anything? Did we work to prevent it happening again?

People want to continue flogging us for these things while giving other companies (who have made their own mistakes, often much more consequential than ours, would never be as open about it, and often learn nothing) a relatively free pass.

I'm certainly not the first person on the planet whose employer has been on the receiving end of vitriol. And if Mozilla doesn't make it through this next phase, I can always find another job. But what concerns me about this is that Mozilla is such an important voice in shaping the future of the internet. To see it wither away because of people angry with what are, in the grand scheme of things, minor mistakes, is a shame.

EDIT: And lest you think I am embellishing about trivial complaints, there was a rant last week on r/Firefox that Mozilla was allegedly conspiring to hide Gecko's source code because we self-host our primary repo and bug tracking instead of using GitHub, despite the fact that the Mozilla project predates GitHub by a decade.

replies(49): >>24122207 #>>24122515 #>>24123409 #>>24123463 #>>24123818 #>>24124348 #>>24125007 #>>24125088 #>>24125320 #>>24125514 #>>24125773 #>>24125821 #>>24126133 #>>24126145 #>>24126438 #>>24126473 #>>24126826 #>>24126868 #>>24127039 #>>24127289 #>>24127324 #>>24127417 #>>24127727 #>>24127795 #>>24127850 #>>24127935 #>>24127974 #>>24128022 #>>24128067 #>>24128168 #>>24128400 #>>24128605 #>>24128708 #>>24128913 #>>24129190 #>>24129234 #>>24129821 #>>24130155 #>>24130218 #>>24130519 #>>24130938 #>>24130967 #>>24131699 #>>24131761 #>>24132064 #>>24133337 #>>24140947 #>>24145537 #>>24168638 #
will4274 ◴[] No.24123409[source]
I don't hold Mozilla to higher standards. I regard Mozilla as being deeply sick, even by the standards of a non-profit. The Mozilla Corporation has three plagues.

First, the plague of Debian and the logjam breakers. Mozilla, like Debian, has many technical users with loud opinions and struggles to reach consensus. Debian suffers from this problem because it comes to consensus oh so very slowly - multiple competing packaging formats exist and hurt the community for decades. But, Mozilla has the worst result - "logjam breaker" executives come in, and, rather than pushing the technical leadership to make a reasonable technical decision based on the weighed factors, they break the logjam by encouraging the technical leaders to blindly imitate the competition. This problem is intractable - giving in to the Debianers means being mired in debate forever and making no or extremely slow progress; giving in to the suits means failing to innovate, becoming a clone of your competition, and eventually being forgotten. A true solution requires real technical leadership, something that's sorely lacking at Mozilla, or a different user base, which is not a possibility at Mozilla.

Second, the plague of Wikimedia. Non-technical leadership comes to dominate decisions about how to spending incoming donations from successful technical projects. Such leadership is often interested in hoping from the board of one non-profit to another. Much like Googlers are always interested in content for their next promotion form, such non profit executives are interested in bragging about the great projects they kicked off the ground. The results is a slew of failed and cancelled projects while the core project languishes.

Finally, the plague of social justice run amok. Most companies right now are on social justice kick and for the last few years. That's good; racism is bad, and tech could be a bit more welcoming. However, most companies understand where the lines are drawn. For example, Google executives don't release statements after employees die trashing the employee because of an underlying difference in personality and/or political views. Google also doesn't fire executives because of their political views or previous donations, when held privately, particularly when those political views are relatively common. Such actions have a chilling effect on recruitment and leads to technical talent that might otherwise have been interested in Mozilla (like myself) to permanently write it off.

I don't hold Mozilla to higher standards and I'm not mad about double speak. I'm mad that Mozilla is nasty, that is breaks well established liberal norms regarding political freedom, that it's executives waste my donations on resume lines for their next gig, and that it's technical leadership seems incapable of making balanced decisions other than imitation Google. But most of all, I'm mad that nobody at Mozilla can even see the problem (yourself included). Mozilla is deeply sick and needs to diagnose its own problems correctly, in order to begin remediating them. Until then, I'll regard it as a dying corporation and I'll look forward to the day when Mozilla finally dies and we can get started on the project of building a free web again by forking Chromium.

replies(3): >>24123941 #>>24126886 #>>24127811 #
dblohm7 ◴[] No.24123941[source]
I don't want to invalidate what you've said, so please don't interpret my comment that way. I would encourage you to think a bit more about a few things:

> For example, Google executives don't release statements after employees die trashing the employee because of an underlying difference in personality and/or political views.

While I agree that it was probably a mistake for Mitchell to have made that post, I think that it also says something about Mozilla's culture that a lot of people outside of Mozilla do not quite grasp.

Mozilla throughout its history has been mostly "open by default." IMHO there was an attempt to change that in MoCo during the latter couple years of Chris Beard's tenure as CEO, but traditionally (and Mitchell, as a co-founder of Mozilla, very much comes from the traditional side) Mozilla has been very open.

As a consequence of this openness, sometimes things come out that, from the outside, look like airing of dirty laundry, because in just about any other organization, they would be. But notwithstanding a few NDA exceptions and the Community Participation Guidelines, Mozilla employees can identify themselves as such and blog about whatever they want without having to filter it through PR.

As you can see, this also raises a tension between "Mozilla should be more mindful about what its executives are saying online," vs "Mozilla is too corporate and should not be silencing its employees." There are people on both sides of that who will be upset, and again, no matter which side they're on, seem to always conclude, "Fuck Mozilla, I'm switching to Chrome!"

A more expansive NDA would obviously mitigate that, but Mozilla doesn't do things quite like Google or any of its other competitors.

> Google also doesn't fire executives because of their political views or previous donations, when held privately, particularly when those political views are relatively common.

There was a lot of poor reporting during the Brendan Eich affair. Personally I think that the stuff written by the WSJ was a hitpiece that contained multiple falsehoods, but those falsehoods stuck around and built up this narrative that still lives today. Having been there when it happened, the least inaccurate account of what happened was written by CNet's Stephen Shankland [1], IMHO. I suggest you read it.

Finally, the Brendan Eich thing happened over six years ago. Is this really something for which Mozilla should be repeatedly be attacked, ad infinitum? Personally I think that it is increasingly off-topic, yet any time Mozilla comes up on HN or elsewhere, I can pretty much guarantee that `Ctrl-F` `Brendan Eich` will turn something up. People just don't seem to be able to move on from that. I don't think that Mozilla's cause and the vast majority of the people who work there deserve to be punished because of that.

And since you mentioned Google, keep in mind that they are not saints without their own controversies. eg Andy Rubin.

[1] https://www.cnet.com/news/mozilla-under-fire-inside-the-9-da...

replies(1): >>24124303 #
will4274 ◴[] No.24124303[source]
Please don't worry about offending me / invalidating what I say - it's an internet forum, I don't take it that seriously. Please take my response in the same frame of mind.

Your defenses... aren't.

It's not airing the letter to the general public that was problematic. It's thinking that those are appropriate things to say out loud that's a problem. One of my coworkers passed from cancer a few years back. Frankly, a lot of people thought he was a real jerk before he passed. Nobody said bad things about him to people who knew him after he passed. Not internally, not publicly, not part of the carpool, not anonymously on blind, not even as a little joke after having a few drinks at the bar. Speaking ill of the dead is nasty. And it's mean. People who liked the deceased will overhear you and they'll go home later and cry and think about what people would say about them if they died and then cry more. Mitchell (? I don't remember who tbh) kicked a puppy and put it on YouTube and you're here with "Yes, Mozilla has a long history of putting the things it does on YouTube." It's not the publicity that's the problem - it's kicking the puppy in the first place!

I'm not sure what I'm supposed to take from the CNET article. It wasn't really about gay marriage, it's because the board was indecisive and make a decision and then doubted themselves? So, it was just incompetent management? If you aren't sure about promoting somebody, don't promote them. Promoting somebody and then having them resign because you weren't sure is terrible. Mature corporations with competent leadership recognize that personnel decisions matter - that peoples' feeling are impacted when titles are granted and taken away - and make these decisions deliberately and carefully.

The Eich affair was the cause, but it's not the underlying problem. Mozilla lacks competent technical leadership. Managers with ten years experience in the product area who can make broad-lens decisions. You can see this everywhere. I participate in the web ecosystem in my day job. I'm always struck by the lack of professionalism in the emails from Mozilla employees on github issues. Most Mozilla employees mail like employees 1-2 years out of college. At my company, that fades - managers speak to employees who get too heated in emails and give them pointers with regard to staying on topic and staying technical. But you can also see them in product - Apple's Intelligent Tracking Prevention (ITP) feature - one of the most important strides for privacy on the web in decades - was produced by somebody with a 10 year lens - somebody who saw the security blog post in 2012 about being able to track Twitter users based on their image caches and who had dealt with a decade of the gigantic mess of incompatibility that is cookies for just as long. For their tracking prevention solution, Mozilla copied what some existing plugins did. And it all goes back to Eich. Because managers with 10 years of experience are closer to 40 than 20. They're substantially more likely to have seen political fashions swing - they've seen somebody (perhaps the Dixie Chicks) have their career ruined for reasons that seem incomprehensible a decade later. And they've accumulated at least one "unpopular" political view. And they've come to realize that some organizations are simply too interested in political fashion to be an appropriate home for them.

The point is - what happened to Brendan Eich doesn't prevent me from using Firefox. I don't use Firefox because it sucks. And it sucks because Mozilla can't hire good people with decades of experience. And Mozilla can't hire good people with decades of experience because of what happened to Brendan Eich (and the attitudes that led to it).

replies(3): >>24126372 #>>24126483 #>>24128165 #
tinco ◴[] No.24126372[source]
"I don't use Firefox because it sucks. And it sucks because Mozilla can't hire good people with decades of experience."

Why do you think it sucks? It's been absolutely epic the last couple years in my opinion. They're making some awesome technical choices. They've repeatedly gotten themselves into trouble on the social level, but frankly I don't see how you could say they're not doing well technically. I'm pretty sure Firefox is outperforming Chrome on multiple aspects, and they're positioning themselves to become the best browser period.

I don't really care for its "smart" features like the anti-tracking or other services they offer, so unfortunately I won't be paying them any money any time soon, but to me it's incredible that there's a company out there paying people to rewrite their rendering engine in rust, while also having to pay/support people to actually make that same language suitable enough to become a critical part of an app with such a large user base.

replies(2): >>24126583 #>>24133332 #
will4274 ◴[] No.24126583[source]
Well, it's slower for one and web features lag for two. But the one that is really the most important to me is security and privacy features. Browsers have effectively made two majors improvements recently - Safari made third party tracking impossible by gradually fully segmenting everything - HTTP caches, LocalStorage, cookies, etc. - and Chrome made JIT exploitation and then Spectre attacks in JavaScript impossible by using process boundary separations and applying sandboxes to purpose built processes. On both fronts, Firefox is behind. Chrome devs are also engaged in active anti-fingerprinting efforts from minor efforts (like reducing the fingerprint-ability in Safari's new APIs, reducing the amount of available by default information in the user agent, or defining SameSite cookies).

I also see privacy issues sit in the Firefox bugtracker. I read about fuzz tests from project zero and elsewhere and realize Firefox is under-fuzzed, both DOM and JS. I finally stopped using Firefox because, as somebody who writes native code for a living and reads about bytecode VMs for fun in my spare time, I could no longer convince myself that it was satisfactorily secure.

What awesome technical choices do you think Mozilla has made recently? I'd love to hear an example. Throwing away the plug-in model to catch up for performance was an necessary technical choice (perhaps), but it was largely solving a self-made problem and catching up with the competition rather than bona fide innovation, so it falls short of "awesome" to me.

replies(2): >>24126741 #>>24127327 #
1. lambda ◴[] No.24127327[source]
> Safari made third party tracking impossible by gradually fully segmenting everything - HTTP caches, LocalStorage, cookies, etc. -

I haven't been following exact features between browsers too closely recently, but Firefox's Tracking Protection has been around for a while and improving for years; and of course, Firefox is where AdBlock/uBlock originated. What does Safari provide that Firefox does not? How does it affect web compat?

> and Chrome made JIT exploitation and then Spectre attacks in JavaScript impossible by using process boundary separations and applying sandboxes to purpose built processes.

This feature has been a long time coming in Firefox, and it's still not all the way there.

But Firefox did just release an opt-in process isolation feature for Firefox, which applies stricter cross-origin controls for a variety of content, and in exchange gives web developers access to SharedArrayBuffer, the feature that needed to be disabled to mitigate Spectre attacks.

So site isolation is progressing, and the first iteration of it has been released.

> What awesome technical choices do you think Mozilla has made recently?

The development of Rust. Servo, which acted as an experimental testbed for a parallel browser engine and has led to its CSS parser, WebRender, and a number of other components being used by Firefox. Asm.js as an alternative to NaCl, which led to the joint development of WASM.

replies(1): >>24127545 #
2. will4274 ◴[] No.24127545[source]
I appreciate that site isolation is in progress in Firefox, but it came out in Chrome two years ago (three now?). You're telling me that the soon to be released IE7 will include a pop-up blocker, so I should switch back to IE from Firefox.

> I haven't been following exact features between browsers too closely recently, but Firefox's Tracking Protection has been around for a while and improving for years; and of course, Firefox is where AdBlock/uBlock originated. What does Safari provide that Firefox does not? How does it affect web compat?

Firefox, like uBlock and AdBlock is list based - it forbids known bad actors. Safari is changing web standards to make tracking impossible, regardless of whether or not you are a known actor, and doing it gradually and carefully enough enough where breakage is minor enough that users don't complain. And Safari has less market share than Firefox. Look at e.g. https://webkit.org/tracking-prevention-policy/ for the principles and the other posts on the blog for details about the implementation. It's an industry wide change that a non-advertising funded browser company needed to push, and it just needed a real leader to push it. And that person turned out to be John Wilander (https://twitter.com/johnwilander). For whatever reason (I've given my thoughts above), I think Mozilla struggles to attract these sort of talented experienced mid-career people.

Rust is pretty cool, but Servo is pretty immature, and it seems like Mozilla just fired all those people. I dunno. I don't see a bright future there.

replies(1): >>24128394 #
3. lambda ◴[] No.24128394[source]
> Rust is pretty cool, but Servo is pretty immature, and it seems like Mozilla just fired all those people. I dunno. I don't see a bright future there.

Well, yeah, that's the problem.

Until now, I felt like despite its issues, Mozilla was mostly on the right track. There have been a few mistakes here and there, but it was fundamentally doing good work.

However, cutting Servo, and it looks like maybe Cranelift as well (not sure about that, but Dan Gohmen aka sunfishcode, who seemed to be one of the lead contributors, has been laid off) is a huge blow.

While Servo as a whole browser is pretty immature, a number of components of it were adopted by Firefox, such as its CSS parser, Webrender, its GPU accelerated parallel rendering engine, and more.

You had asked about what Mozilla had done recently, and I listed a few things. But it looks like they are cutting a lot of that. They mentioned focusing on wasmtime and the Bytecode alliance, but I don't see how cutting one of their lead contributors helps out with that.

And they seem to be slowly cutting the head count on Rust; it's less apparent because there are enough people not at Mozilla contributing, and some of the core contributors have been moved onto other projects which use Rust at Mozilla so while they're not contributing directly they are still somewhat involved; and some folks have left of their own accord.

But now it looks like some of those other teams are being cut, like Servo and at least some of the wasmtime team, so I really hope that more companies can put some more investment directly in Rust, as well as the WASM ecosystem.