this post was submitted on 16 Jul 2024
238 points (78.6% liked)

Linux

48687 readers
490 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
238
submitted 5 months ago* (last edited 5 months ago) by wolf@lemmy.zip to c/linux@lemmy.ml
 

... I mean, WTF. Mozilla, you had one job ...

Edit:

Just to add a few remarks from the discussions below:

  1. As long as Firefox is sponsored by 'we are not a monopoly' Google, they can provide good things for users. Once advertisement becomes a real revenue stream for Mozilla, the Enshittification will start.
  2. For me it is crossing the line when your browser is spying on you and if 'we' accept it, Mozilla will walk down this path.
  3. This will only be an additional data point for companies spying on you, it will replace none of the existing methodologies. Learn about fingerprinting for example
  4. Mozilla needs to make money/find a business model, agreed. Selling you out to advertisement companies cannot be it.
  5. This is a very transparent attempt of Mozilla to be the man in the middle selling ads, despite the story they tell. At that point I can just use Chrome, Edge or Safari, at least Google has expertise and the money to protect my data and sadly Chrome is the most compatible browser (no fault of Mozilla/Firefox of course).
  6. Mozilla massively acts against the interests of their little remaining user base, which is another dumb move made by a leadership team earning millions while kicking out developers and makes me wonder what will be next.
you are viewing a single comment's thread
view the rest of the comments
[–] verdigris@lemmy.ml 40 points 5 months ago (5 children)

This is misinformation. The setting in question is not a "privacy breach setting," it's to use a new API which, for sites that use it, sends advertisers anonymized data about related ad clicks instead of the much more privacy-breaching tracking data that they normally collect. This is only a good thing for users, which is why the setting is automatically checked.

[–] jlsalvador@lemmy.ml 48 points 5 months ago* (last edited 5 months ago) (3 children)

It's illegal in Europe to have an opt-out checked by default, must be an opt-in unchecked by default. This is one of the reason that Microsoft has always troubles in Europe about privacy and opt-out services.

[–] Vincent@feddit.nl 48 points 5 months ago

That only applies to personally-identifiable information.

[–] lord_ryvan@ttrpg.network 33 points 5 months ago* (last edited 5 months ago) (1 children)

In the EU*

Sorry to be pedantic, but the UK, Swiss etc. are all in Europe but not in the legislative region where this law applies.

This even gets some people confused thinking those countries “aren't in Europe”, which is why I wanted to correct this.

[–] geissi@feddit.de 26 points 5 months ago (1 children)

If it is truly anonymized then it isn't protected under GDPR.

[–] sunbeam60@lemmy.one 3 points 5 months ago (1 children)

Which should tell you a lot; if Mozilla wasn’t confident about their anonymisation efforts their lawyers would not have allowed checked-by-default.

[–] gnuhaut@lemmy.ml 44 points 5 months ago (3 children)

This does not prevent regular ad tracking, this provides additional data to advertisers. It also means Mozilla is now tracking me, and then Mozilla does this "anonymizing" on their servers. I do not trust Mozilla with this data, and I don't trust that no way can be found de-anonymize or combine this data with other data ad networks already collect.

This is not in my interest at all. This data should not be collected. The ad networks can suck it, why should I help them?

https://blog.privacyguides.org/2024/07/14/mozilla-disappoints-us-yet-again-2/

[–] Vincent@feddit.nl 8 points 5 months ago* (last edited 5 months ago) (1 children)

Advertisers can already easily get this data without this setting, and any measures you take to block ads also by definition affect this setting.

Meanwhile, if this works and becomes widely available, regulators will be able to take measures against user surveillance without having to succumb to the ad industry's argument that they won't know whether their ads work.

And yes, this provides data to advertisers, but it's data about their ads, not about users.

[–] gnuhaut@lemmy.ml 12 points 5 months ago (1 children)

Ah yes, the hypothetical second step, in which tracking is going to be outlawed (I'm not holding my breath), except, of course, for the third party services that do the aggregating, which will "sell" (literal quote) the aggregate data, so I guess these are by semantic sophistry not adtech companies but something else.

I'm so glad this genius "plan" can be used to justify Mozilla funneling data to adtech firms right now, because in some hypothetical future timeline this somehow can be construed with a bunch of hand-waving and misdirection to be in my interest.

How about instead we have a browser that only cares about the users, and not give a fuck about adtech? Its number one goal should be to treat adtech as hostile, and fight to ruin that whole industry.

[–] Vincent@feddit.nl 9 points 5 months ago* (last edited 5 months ago) (1 children)

for the third party services that do the aggregating, which will "sell" (literal quote) the aggregate data

You're saying you're literally quoting the ISRG as planning to sell the data? Because that goes directly against what I've read about this, which I believe says that they wouldn't even be able to because they can't see the data.

[–] gnuhaut@lemmy.ml 4 points 5 months ago* (last edited 5 months ago) (1 children)

Ok, I misremembered it says "pay" for the aggregate results, not sell.

Our DAP deployment is jointly run by Mozilla and ISRG. Privacy is lost if the two organizations collude to reveal individual values. We safeguard against this in several ways: trust in both organizations, joint agreements, and operational practices.

A full solution will require that advertisers — or their delegated measurement provider — receive reports from browsers, select a service, submit a batch of reports, and pay for the aggregation results, choosing from a list of approved operators.

For the trial, the results for each task will be sent to Mozilla’s telemetry systems, which will be used to access aggregated statistics.

So it doesn't say ISRG is going sell data, but the "full solution" will have other operators that get payed, i.e. they're going to sell the aggregate data. Also, they envision multiple such operators, all of which it seems need to be "trusted".

https://github.com/mozilla/explainers/tree/main/ppa-experiment#end-user-benefit

[–] Vincent@feddit.nl 3 points 5 months ago

Ah gotcha, thanks for bringing in the source - that does come down to the ISRG selling it. The thing I'd missed in your quote is that it's referring to aggregate data. So yeah, how that meshes with what I've read is that the ISRG won't be able to view user data, but indeed the ad performance data would be sold to advertisers.

[–] sunbeam60@lemmy.one -2 points 5 months ago (1 children)

What do you want? A Mozilla with no income? Because then there is no libre browser.

[–] gnuhaut@lemmy.ml 1 points 5 months ago (1 children)

Can you imagine a world where Linux wasn't directly getting paid by Amazon to hook all your machines up to AWS? You can't! And how could vim possibly be developed without dropbox integration and sponsorship, that would never work. There is no way a world exists where Krita doesn't sell all your drawings to OpenAI, how are they going to make any money?

None of these nice things could exist if they weren't selling out their users, that's just reality.

[–] sunbeam60@lemmy.one 4 points 5 months ago (1 children)

Yes I get your point. Some software can run without a large income stream, on a volunteer basis.

You’re using that fact to say that Firefox also can. And if you care to look at my profile you’ll see I’ve argued time and time again that Mozilla is an overblown organisation and should be slimmed down to a couple of hundred, working solely on the browser.

I doubt, however, that you can build a modern, up-to-date browser on a volunteer basis.

How many full-time people do you think it takes?

[–] gnuhaut@lemmy.ml 3 points 5 months ago

Linux has full time developers. Blender has full time developers. Lots of other projects have full time developers. They still don't sell my data to Google.

A web browser is a very visible piece of software, relied upon by end users, businesses and governments alike. I'm sure enough people and organizations would donate their time and money to fund this, if it existed.

[–] verdigris@lemmy.ml -4 points 5 months ago* (last edited 5 months ago) (1 children)

... No, it does not. The ads are currently already tracking clicks and conversions, on top of a whole boatload of other personal data. This API instead provides them with just the click and conversion data, divorced from the personal data and then aggregated with all the other site visitors.

Being against this proposal basically means you trust random websites and ad companies more with your data then you do Mozilla and LetsEncrypt.

[–] gnuhaut@lemmy.ml 9 points 5 months ago (1 children)

This API instead

Instead of what? As I said, this is in addition to existing tracking, with some vague promise that if current tracking methods were banned or abandoned, this could be used instead. Except it's not getting banned (Mozilla is not going to out-lobby Google) or abandoned (market forces prevent that), and why oh why would I want some alternative way for ad companies to get my data in that situation anyway? Let them die.

Now if another person is going to repeat this nonsense talking point, which you have picked up strait from Mozilla's corporate PR, I'm going to lose my mind. Have some critical thinking skills. They are giving away your data right now and they give you nothing in return except a nonsense promise of a fairytale future.

Please I just want a browser that acts in the user's interest only, does not work with Meta on adtech, and does not think it's their duty to save the ad industry from itself.

[–] verdigris@lemmy.ml -5 points 5 months ago (2 children)

Again, no, that's not true. This API is only used by sites that opt into it, and in so doing, they are disabling the normal tracking which is far more invasive.

[–] UserMeNever@feddit.nl 9 points 5 months ago (1 children)

Sorry but where does it say they will disable "normal tracking" if they use this API?

[–] gnuhaut@lemmy.ml 8 points 5 months ago (1 children)

Where does it say that? How would this be enforced?

[–] verdigris@lemmy.ml -5 points 5 months ago* (last edited 5 months ago) (1 children)

It's enforced by the websites, they opt into this API. It says that everywhere you can read about this.

[–] gnuhaut@lemmy.ml 3 points 5 months ago (1 children)

I can't find this in the announcements and stuff. Where does it say that exactly?

[–] verdigris@lemmy.ml 0 points 5 months ago (1 children)

https://github.com/mozilla/explainers/tree/main/ppa-experiment

Check out the second and third paragraphs in particular.

This initial implementation is just to test the actual API, so I don't believe sites using it will be blocking the other tracking yet, but once this API is tested and starts to see adoption, the goal is replacing tracking with this anonymized attribution.

[–] gnuhaut@lemmy.ml 0 points 5 months ago

You said:

Again, no, that’s not true. This API is only used by sites that opt into it, and in so doing, they are disabling the normal tracking which is far more invasive.

OK, your source for this:

A full version of an in-browser attribution API will offer strong privacy protections, while providing considerable flexibility in how to measure ad performance. Our long term goal is a standardized attribution solution. We believe that a good attribution system will give advertising businesses a real alternative to more objectionable practices, like tracking, which should allow browsers to further restrict those practices.

Nowhere does it say websites are disabling other tracking methods.

It says that browsers could (maybe, in the future) restrict other methods of tracking, if this gets widespread mainstream adoption. Why are these things related exactly? Mozilla could presumably implement these tracking restrictions right now. The reason they are related in the minds and PR of Mozilla drones is that they don't dare do this without providing an alternative for the ad industry. Their corporate overlords won't "allow" it.

But right now, this restricts and replaces nothing, they literally are giving you vague promises about future improvements, while already collecting your data, like I said.

I will remind you that you accused others of spreading misinformation in this thread. I will accept your little mea culpa song and dance now. Gimme!

[–] wolf@lemmy.zip 30 points 5 months ago* (last edited 5 months ago) (2 children)

... first of all, providing a new API to give out information about me is not a good thing in my mind.

Second, this would be the first time in human history, the advertisers would not simply add that APIs information to everything else they aggregate including fingerprinting of your browser.

So, serious question: How is this good for me?

Edit: typo

[–] verdigris@lemmy.ml -1 points 5 months ago (1 children)

It does not collect any more information about you. It provides far less information than pretty much every ad is already collecting, and that information is anonymized. It does not affect ad blocking solutions.

So, serious question: what are you not understanding here?

[–] wolf@lemmy.zip 2 points 5 months ago

... as already mentioned above:

  1. This will be just an additional data point about you sold out - no advertiser will dial back on all the other ways to collect data about you.
  2. Mozilla shows that it willingly and silently will sell your data out and they will increase this over time to make money/try to be the man in the middle.
  3. It does not matter at all if it affects ad blocking solutions, this is about tracking and profiling. Learn about browser fingerprinting and other techniques.
  4. This is built in to your browser, which is crossing a very important line.
[–] j4k3@lemmy.world 13 points 5 months ago (1 children)

Are you trying to tell me that the host server is showing the ad, because last I checked, with my whitelist firewall, I never see ads because all ads are links to the ad server you are actually visiting. It is no different than opening up the webpage and connection to them. They get all the same fingerprinting info.

I'm not saying one way or another here, but there is no such thing as anonymous data collection. It only takes 2-3 unique identifiers to connect a person between a known and anonymous data set and there are almost always quite a few more unique identifiers than this in any given dataset. When I hear anyone say stalkerware is anonymous, I assume they are no longer just a privateer of a foreign drug cartel level state, instead they are full blown slave trader pirates fit for the gallows or worse.

[–] verdigris@lemmy.ml 1 points 5 months ago

... No, I'm saying that a given site hosts the specific instance of an ad. That site has control over what the ad can harvest, and if they're opting in to this PPA API, that information will be anonymized and much more limited than it currently is.