this post was submitted on 09 Jul 2024
84 points (96.7% liked)

Firefox

17898 readers
95 users here now

A place to discuss the news and latest developments on the open-source browser Firefox

founded 4 years ago
MODERATORS
top 11 comments
sorted by: hot top controversial new old
[–] LWD@lemm.ee 14 points 4 months ago (2 children)

Remember to disable the new "Ad Measurement" data collection, everybody!

It was auto-enabled for me. What about you?

[–] sugar_in_your_tea@sh.itjust.works 9 points 4 months ago (1 children)

Eh, that honestly doesn't sound too bad, but good callout. Here's their article about it, and the relevant snippet:

PPA does not involve websites tracking you. Instead, your browser is in control. This means strong privacy safeguards, including the option to not participate.

Privacy-preserving attribution works as follows:

  1. Websites that show you ads can ask Firefox to remember these ads. When this happens, Firefox stores an “impression” which contains a little bit of information about the ad, including a destination website.
  2. If you visit the destination website and do something that the website considers to be important enough to count (a “conversion”), that website can ask Firefox to generate a report. The destination website specifies what ads it is interested in.
  3. Firefox creates a report based on what the website asks, but does not give the result to the website. Instead, Firefox encrypts the report and anonymously submits it using the Distributed Aggregation Protocol (DAP) to an “aggregation service”.
  4. Your results are combined with many similar reports by the aggregation service. The destination website periodically receives a summary of the reports. The summary includes noise that provides differential privacy.

This approach has a lot of advantages over legacy attribution methods, which involve many companies learning a lot about what you do online.

PPA does not involve sending information about your browsing activities to anyone. This includes Mozilla and our DAP partner (ISRG). Advertisers only receive aggregate information that answers basic questions about the effectiveness of their advertising.

Absolutely disable it if you're still uncomfortable with that, but don't knee-jerk disable it because ads. I'm hopeful that this is good enough for advertisers so they can stop the intrusive spying. I'm not a big fan of my browser tracking this info, but maybe it's better on net than alternatives.

[–] LWD@lemm.ee 10 points 4 months ago (1 children)

Unpopular opinion, but I use Firefox because I care about privacy and the spirit of the Mozilla manifesto, and this new enabled-by-default advertisement feature snuck into the browser is at odds with both.

Mozilla never even gave their users a warning in their browser, which is even worse than how Chrome handles it (also enabled by default, but they at least included a notification with a corpo-speak justification that includes similar language about "options" and "privacy".

I suppose. They do launch the release page after an update, which has a link to the release notes. The release notes link to the page I linked, and that page describes how it works and how to disable it, which is just a setting in the privacy section.

So while I'd like it a bit more front-and-center (i.e. display it on that release page), I don't think they're trying to hide anything here.

[–] krysel@lemmy.ml 4 points 4 months ago

It was indeed enabled for me too

[–] melroy@kbin.melroy.org 8 points 4 months ago (1 children)

Finally that 25 year old bug is fixed.

[–] devfuuu@lemmy.world 6 points 4 months ago (1 children)
[–] festnt@sh.itjust.works -5 points 4 months ago (1 children)

there is only one thing mentioned as "fixed" in the article.

[–] melroy@kbin.melroy.org 4 points 4 months ago (1 children)
[–] festnt@sh.itjust.works 1 points 4 months ago

oh alright then

[–] doodledup@lemmy.world 3 points 4 months ago* (last edited 4 months ago)

Advertisers are not tracking you with this system, sure. But doesn't it send the same data to the aggregators instead? Couldn't the aggregator service access all of that information? To me this sounds like it's simply shifting the tracking to someone else.