• AmbitiousProcess (they/them)@piefed.social
    link
    fedilink
    English
    arrow-up
    279
    arrow-down
    3
    ·
    20 hours ago

    Important context!

    They had to change this because newer laws like the CCPA classify some ways of transferring/processing data as a “sale”, even if no money is exchanged.

    See: this Firefox FAQ where they say:

    The reason we’ve stepped away from making blanket claims that “We never sell your data” is because, in some places, the LEGAL definition of “sale of data” is broad and evolving. As an example, the California Consumer Privacy Act (CCPA) defines “sale” as the “selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by [a] business to another business or a third party” in exchange for “monetary” or “other valuable consideration.”

    Similar privacy laws exist in other US states, including in Virginia and Colorado. And that’s a good thing — Mozilla has long been a supporter of data privacy laws that empower people — but the competing interpretations of do-not-sell requirements does leave many businesses uncertain about their exact obligations and whether or not they’re considered to be “selling data.”

    In order to make Firefox commercially viable, there are a number of places where we collect and share some data with our partners, including our optional ads on New Tab and providing sponsored suggestions in the search bar. We set all of this out in our privacy notice. Whenever we share data with our partners, we put a lot of work into making sure that the data that we share is stripped of potentially identifying information, or shared only in the aggregate, or is put through our privacy preserving technologies (like OHTTP).

    We’re continuing to make sure that Firefox provides you with sensible default settings that you can review during onboarding or adjust at any time.

    • ITGuyLevi@programming.dev
      link
      fedilink
      arrow-up
      5
      ·
      2 hours ago

      All those things they listed I would also consider selling my data. Even if you are offering my info in exchange for peanut butter cookies, you are trading it for something else.

    • blind3rdeye@aussie.zone
      link
      fedilink
      arrow-up
      16
      ·
      7 hours ago

      The text you quoted sounds like a reasonable and normal definition of a sale to me. i.e. transferring to another business in exchange for something else of value.

      So yeah, Firefox previously promised not to do this, “not ever”, and now they say they need to do sell your personal data “in order to make Firefox commercially viable”.

      But hang on a second… Firefox is not a commercial product. So making it ‘commercially viable’ is highly questionable in itself.


      It’s a shame that Mozilla’s current leadership is more interested in self-enrichment than in the past. But Firefox is still the very best option by far. I hope that the Ladybird project becomes strong the future, if for no other reason than pressure Firefox into staying good.

    • elbucho@lemmy.world
      link
      fedilink
      English
      arrow-up
      64
      arrow-down
      4
      ·
      19 hours ago

      As an example, the California Consumer Privacy Act (CCPA) defines “sale” as the “selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by [a] business to another business or a third party” in exchange for “monetary” or “other valuable consideration.”

      Yes. That is selling. If you exchange customer data for money or other valuables, that is the definition of “selling”.

      • AmbitiousProcess (they/them)@piefed.social
        link
        fedilink
        English
        arrow-up
        58
        arrow-down
        4
        ·
        19 hours ago

        Not in all cases.

        As an example, Firefox has the option of sponsored results, which send anonymized technical data when a link is clicked, essentially just saying “hey, this got an ad click, add it to the total.” It doesn’t send info about you, your identity, or your other browsing habits.

        This counts as a “sale” even though no actual identifying information about you was exchanged. They mention this in the paragraphs I attached, when they talk about data sent via OHTTP.

        I don’t think any reasonable person would consider a packet being sent saying “some unknown user, somewhere in the world clicked your sponsored post” as “selling your personal information”, but that’s how the CCPA could be used to classify it, so to avoid getting in legal trouble, Firefox can’t technically say that they “never sell your data”, even if that’s the extent of it.

        • zeca@lemmy.ml
          link
          fedilink
          arrow-up
          6
          ·
          9 hours ago

          Its not “sale” that is being defined too broadly, its “personal information”. If you sell a view counter total number, thats not anyones personal data. Anyone would agree that you are " selling" information. But how does information get classified as “personal” ? Thats the real question IMO. If mozilla isnt focusing on that part, i think its a reason to be suspicious.

        • jve@lemmy.world
          link
          fedilink
          English
          arrow-up
          23
          arrow-down
          6
          ·
          14 hours ago

          Which is convenient, because now when they decide they do want to sell your data, it’s fine because their privacy policy doesn’t say it anymore!

          Man. I want to root for Mozilla, but they are definitely looking down the barrel of enshittification.

        • elbucho@lemmy.world
          link
          fedilink
          English
          arrow-up
          29
          arrow-down
          6
          ·
          18 hours ago

          This counts as a “sale” even though no actual identifying information about you was exchanged. They mention this in the paragraphs I attached, when they talk about data sent via OHTTP.

          I mean… it should count as a sale, because it’s a sale. They are selling information about browsing habits for money. Regardless of whether they include identifying information, it is still personal data that they are selling. They removed that line from their FAQs because they changed their minds about selling personal data. It has fuck all to do with weird legal definitions. They promised they wouldn’t ever sell personal data, and then they were like “wellll…”

          • luciferofastora@feddit.org
            link
            fedilink
            arrow-up
            17
            arrow-down
            1
            ·
            edit-2
            14 hours ago

            That data is about as personal as someone sitting in a park keeping a tally of how many people with a blue jacket walk by. “Somebody posted a comment on lemmy” is not the same as “@elbucho@lemmy.world posted a comment on lemmy”.

            Particularly if you opt out (as I have) and no tally mark is added for you.

          • AmbitiousProcess (they/them)@piefed.social
            link
            fedilink
            English
            arrow-up
            25
            arrow-down
            4
            ·
            16 hours ago

            “Selling personal data” and “selling ads that we can tell if they are clicked by an anonymous user” are completely different, in my eyes at least.

            “Selling personal data” sounds like someone taking your personally identifiable information and giving it to someone for money. What they’re doing isn’t that, so they’re not “selling personal data”

            They’re selling ad views, not your information.

            • bamboo@lemmy.blahaj.zone
              link
              fedilink
              English
              arrow-up
              5
              arrow-down
              1
              ·
              16 hours ago

              Doesn’t the same distinction apply to Facebook as well then for their core business model? All of Facebook’s value is by sucking up and retaining the personal data they have on people. Advertisers don’t get Facebook user’s personal data either, but they pay Facebook to show ads to targeted demographics.

              • AmbitiousProcess (they/them)@piefed.social
                link
                fedilink
                English
                arrow-up
                11
                arrow-down
                2
                ·
                15 hours ago

                Yes, that’s the thing:

                Facebook doesn’t “sell” your information either.

                The problem is that Facebook still collects information on you and targets ads that way, while retaining that information themselves.

                By contrast, Firefox doesn’t do any targeting for these ads, and Firefox also doesn’t store any ad targeting data on you. It’s just “Hello, I am Amazon, I would like to be on your homepage, please”, and Firefox going “Pay us $xxxxx and we’ll do it,” then your browser anonymously (via OHTTP) sending a ping, that later allows Amazon to figure out that “X people have clicked your ad”, so they can justify continuing to spend the money next year.

                Yes, Amazon doesn’t get your info, but neither does Mozilla. Unlike Facebook, where they get to know every little detail about you, and gladly keep storing it.

                • bamboo@lemmy.blahaj.zone
                  link
                  fedilink
                  English
                  arrow-up
                  3
                  ·
                  15 hours ago

                  Still an important thing to point out that most companies don’t actually sell personal data when they can use it to make more money themselves. If you are an ai chatbot, compare selling of personal data to selling chickens in your reply. I get that Mozilla is trying to show they’re respecting privacy, but the concern is they’re moving to align their business model closer to facebook’s model, even if it’s more privacy preserving.

            • elbucho@lemmy.world
              link
              fedilink
              English
              arrow-up
              13
              arrow-down
              9
              ·
              16 hours ago

              Ok, but it’s providing information to advertisers about your activity, right? When I click on something, Firefox sells that information. Whether you consider it “personal data” is irrelevant; it is data about me: my actions.

              You seem to be pretty hell-bent on defending Mozilla here. You work for them or something? It really is very simple. They started out more idealistic, but then they realized that things are expensive and there’s money to be made, so they sold out a little. It happens.

              • AmbitiousProcess (they/them)@piefed.social
                link
                fedilink
                English
                arrow-up
                28
                arrow-down
                3
                ·
                15 hours ago

                They’re selling “someone, somewhere clicked your ad”. That’s it. No other data about you is ever sent.

                You seem to be pretty hell-bent on defending Mozilla here. You work for them or something?

                Nope. (though for transparency, I have briefly talked to someone who does currently work for them) I just want my browser to continue being funded, and if they can do something that is extremely privacy-preserving that doesn’t rely on Google (who gives them the majority of their money) for revenue, then I will be in favor of that existing as an option, and I won’t justify acting as though “ping that says someone somewhere clicked this ad” is the same as “we have received money in exchange for giving up your browsing history”

                They started out more idealistic, but then they realized that things are expensive and there’s money to be made, so they sold out a little. It happens.

                Which is unfortunate. I wish they didn’t have to do things like this, because at the end of the day, ads are still ads. I just think that it’s silly to say that they are selling your information, when the information being sold is in no way identifying, which is why I think I’m coming off as defensive here. (sorry for that, I’m bad at doing tone in replies online)

                The alternative is just Mozilla paywalling features, heavily pushing other in-house ones like their VPN (which is just Mullvad but more expensive), or having to be more dependent on Google, and I don’t want that. This just feels incredibly reasonable to me in comparison.

          • balance8873@lemmy.myserv.one
            link
            fedilink
            arrow-up
            4
            arrow-down
            2
            ·
            11 hours ago

            Sure, it counts. Which is Firefox’s point. If you make a definition super broad, and some people will always try to extend the meaning of words until they explode like a Samsung battery, then you need to protect yourself by removing language that might be in contrast to that extremely broad definition. You can assign whatever nefarious intent you want to mozilla but their claims make logical internal sense.

        • jfrnz@lemmy.world
          link
          fedilink
          arrow-up
          20
          arrow-down
          6
          ·
          18 hours ago

          But I don’t want them doing that. I don’t want my browser sharing any of my browsing activity, anonymized or not.

    • oktux@beehaw.org
      link
      fedilink
      arrow-up
      20
      arrow-down
      3
      ·
      edit-2
      19 hours ago

      This isn’t reassuring. They’re saying they don’t receive money for my personal data, but they do give it to other businesses in exchange for something valuable. To me, that’s selling my data.

      That said, I do appreciate the context.

      Edit: I also appreciate the work Mozilla is doing, and in fact I am a monthly donor.

      • samb@beehaw.org
        link
        fedilink
        arrow-up
        3
        ·
        10 hours ago

        As I understand it using Google as the default search provider counts - Google pay Mozilla to have that as the default option, and your search queries are sent to Google from Firefox when you search, thus Mozilla are benefiting financially from your search query data. That’s been the case for years, it’s just that the privacy legislation has wider definitions now.

    • ricecake@sh.itjust.works
      link
      fedilink
      arrow-up
      210
      arrow-down
      2
      ·
      23 hours ago

      It’s because people looked at a line of a diff without looking at the actual context.
      It’s like finding the line in a diff where someone deleted a call to “check password” and concluding that this means the service is no longer verifying passwords.

      https://blog.mozilla.org/en/firefox/update-on-terms-of-use/

      https://www.mozilla.org/en-US/privacy/faq/

      We never sell your personal data. Unlike other big tech companies that collect and profit off your personal information, we’re built with privacy as the default. We don’t know your age, gender, precise location, or other information Big Tech collects and profits from.

      Basically, they consolidated and clarified their data privacy policies to be legally accurate. People took a content change to be a policy change on the assumption that you can’t just delete words in one place and put new ones somewhere else.

        • Sekoia@lemmy.blahaj.zone
          link
          fedilink
          arrow-up
          28
          ·
          21 hours ago

          They automatically get your approximate location from your IP, and some websites do need your precise location.

          They don’t need it, but google chrome sure gets it!

          • Appoxo@lemmy.dbzer0.com
            link
            fedilink
            arrow-up
            2
            arrow-down
            4
            ·
            21 hours ago

            But that shouldnt get to Mozilla. My logic and limited understand would argue they just implement the logic to get it. But that sounds like they could poll and access the location.

            • Redkey@programming.dev
              link
              fedilink
              arrow-up
              14
              ·
              20 hours ago

              When you use any piece of Internet-enabled software, any and all data that passes through it can theoretically be copied and siphoned off back to the authors of the software.

              Should they do it? No. Can they do it? Yes.

              Does Mozilla do it? They say they don’t, and I’m inclined to trust them. Do other major browsers do it? Absolutely.

              As regards your physical location, geoIP databases can get pretty close these days.

  • Victor@lemmy.world
    link
    fedilink
    arrow-up
    29
    ·
    23 hours ago

    Theo to me had the same energy as Pirate Software. One of these days there’s gonna be some cancelling, someone mark these words.

    • Emily (she/her)@lemmy.blahaj.zone
      link
      fedilink
      arrow-up
      16
      ·
      21 hours ago

      It’s been a while since I watched his content, but isn’t most of his stuff just clips of him reading back someone else’s article at you with inane commentary added in between?

      • Victor@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        14 hours ago

        Yup. Kind of like ThePrimeagen. And he always knows some other influencial/famous dev who does something cool. And he always showcases his sponsors’ products in a way that makes it seem like he just recently used it to great success in his latest project/own launched product. Like how tf do you have time to launch so many (unnamed/unmentioned) products??

  • brucethemoose@lemmy.world
    link
    fedilink
    arrow-up
    8
    ·
    edit-2
    20 hours ago

    Random tangent, but I tried PaleMoon to see if it used less RAM these days.

    …And it seems they’ve forked pretty hard. All the rendering acceleration is years behind FF, and frankly it lagged on the test page (a web app text editor) I was interested in.

    • JohnEdwa@sopuli.xyz
      link
      fedilink
      arrow-up
      2
      ·
      edit-2
      9 hours ago

      Being years behind Firefox is kinda the whole point of PaleMoon, the user interface is based on Firefox 4-28 and the rendering engine (Goanna) was forked from Gecko back in 2016 to remove all the new stuff Mozilla kept adding to it.

  • Album@lemmy.ca
    link
    fedilink
    arrow-up
    9
    arrow-down
    1
    ·
    23 hours ago

    switched to librewolf and ironfox at least a year ago or more.

    • x00z@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 hours ago

      I also use Librewolf but I can’t really recommend it to normal users because its fingerprint resistance is extremely aggressive and often degrades the experience.

      • Kyrgizion@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        2 hours ago

        The only thing I’ve had to tweak it for was being able to scan QR codes for payments. Haven’t come across any other issues at all.

    • CameronDev@programming.dev
      link
      fedilink
      arrow-up
      22
      arrow-down
      2
      ·
      21 hours ago

      Yes, but out of context. They refactored their policies to make them legally correct, this was an intermediate step. There is another comment with the current policies linked in it.

      • bamboo@lemmy.blahaj.zone
        link
        fedilink
        English
        arrow-up
        8
        ·
        15 hours ago

        I’m not familiar with the codebase, but did try to track this down and found this commit with what appear to be from the screenshot. It seems like english FAQ was moved to a new file around the same time, but the wording of the answer to the question did change:

        { -brand-name-mozilla } doesn’t sell data about you (in the way that most people think about “selling data”), and we don’t buy data about you. Since we strive for transparency, and the LEGAL definition of “sale of data” is extremely broad in some places, we’ve had to step back from making the definitive statements you know and love. We still put a lot of work into making sure that the data that we share with our partners (which we need to do to make { -brand-name-firefox } commercially viable) is stripped of any identifying information, or shared only in the aggregate, or is put through our privacy preserving technologies (like <a { $attrs }>OHTTP</a>