News for hackers. Stuff that matters.
Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by dpwm on Friday December 15, 2017 @09:24AM (#15931970)
From the page:

> No changes will be made to Firefox unless you have opted in to this Alternate Reality Game.

Also, from the same page for those that appreciate irony:

> One of the 10 guiding principles of Mozilla's mission is that individuals' security and privacy on the internet are fundamental and must not be treated as optional. The more people know about what information they are sharing online, the more they can protect their privacy.

Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by LyndsySimon on Friday December 15, 2017 @09:44AM (#15932126)
> No changes will be made to Firefox unless you have opted in to this Alternate Reality Game.

That can't possibly be true. I had it installed, and I'm on my work machine using Firefox Developer Edition. I didn't opt in to any ARG.

Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by icebraining on Friday December 15, 2017 @09:49AM (#15932164)
I think what they mean is that the addon doesn't do anything unless you opt-in. Still, why install it at all?
Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by dpwm on Friday December 15, 2017 @09:51AM (#15932187)
The installation of the add-on is unquestionably a change to Firefox. Whether the add-on does anything is largely immaterial.
Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by bigbugbag on Friday December 15, 2017 @06:38PM (#15936250)
Really poor choice of words here from mozilla. "The changes that already happened will not make changes to your firefox unless you enable them to", in other words the changes already happened and are just waiting to be activated.
Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by sp332 on Friday December 15, 2017 @09:50AM (#15932177)
It's installed, but apparently doesn't do anything if you don't have "studies" enabled.
Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by LyndsySimon on Friday December 15, 2017 @10:13AM (#15932343)
Something was installed on my system without my permission, from a vendor that I chose specifically because they promise not to do things like that.

To put it another way - if I discovered a rootkit sitting in the ~/Downloads directory on my Mac, that would be a problem. If the entity that surreptitiously placed it there said that I shouldn't worry about it because it hadn't been run, I wouldn't be inclined to trust them.

Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by pbhjpbhj on Friday December 15, 2017 @10:25AM (#15932419)
That lack of permissions make this illegal IMO. CFAA in USA and CMA in UK both make unauthorised access and unauthorised modification of a computer a crime.

I've used FF since before it was FF, and I've installeded it on umpteen other people's computers; strongly advocating for it. Since they sacked that guy for not conforming to a specific liberal ideology they seem to have gone batshit crazy ... what happened? Was he their main privacy advocate or something?

Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by DarronWyke on Friday December 15, 2017 @10:40AM (#15932523)
Hahaha. You gave them permission when you agreed to their TOS. But you didn't read it, did you?
Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by kuschku on Friday December 15, 2017 @12:33PM (#15933440)
ToS terms that aren’t either expected by the user, or explained in plain text without having to click through anything, are considered null and void in the EU.

By that definition, this would be unallowed modification of the computer of the user, and fall under the various hacking acts.

The more interesting thing is that this has also been rolled out to german government computers, which mostly used to use Firefox, but due to previous troubles with CliqZ and the Google Analytics in the addon menus, have already moved on to other browsers.

Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by DarronWyke on Friday December 15, 2017 @02:20PM (#15934280)
>ToS terms that aren’t either expected by the user, or explained in plain text without having to click through anything, are considered null and void in the EU.

You mean like the TOS and EULA you agree to when you install the browser? That would qualify as "expected by the user" and "explained in plain text" both.

Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by kuschku on Friday December 15, 2017 @02:28PM (#15934329)
Correct, those ToS and EULA are considered invalid, if they contain unexpected agreements, such as "your firstborn belongs to us", or "we can install whatever software we want on your system".
Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by DarronWyke on Friday December 15, 2017 @03:09PM (#15934648)
Except they didn't install whatever software they want. They said they can install software to check metrics and more. Which is what this is.
Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by musage on Friday December 15, 2017 @06:35PM (#15936230)
"and more" == "whatever"
Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by pbhjpbhj on Saturday December 16, 2017 @11:45AM (#15940264)
Check metrics !== advertise a game.
Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by _Codemonkeyism on Friday December 15, 2017 @10:02AM (#15932268)
Installing extensions is not "No changes will be made to Firefox".
Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by majewsky on Friday December 15, 2017 @09:41AM (#15932111)
> No changes will be made to Firefox unless you have opted in to this Alternate Reality Game.

How does it not occur to them that this is a clear lie?

Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by pbhjpbhj on Friday December 15, 2017 @10:27AM (#15932431)
Because the previous ads for Pocket and Telefonica were effective and they don't care?
Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by gvx on Friday December 15, 2017 @11:31AM (#15932946)
I hardly think it's a lie. My browser contains no trace of anything related to Looking Glass, even though I'm opted into Shield Studies. It seems to affect some people but not others. Definitely something that should be fixed in the core mechanism of how these things are downloaded by your browser if there are cases where it can happen without user intervention, but it doesn't seem to be intentional to download extensions without the user's consent.
Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by Mizza on Friday December 15, 2017 @12:32PM (#15933430)
It's absolutely a lie.

Mozilla has injected malicious-looking advertisement executable software into my process without my permission and then lied about it. I have no idea what this software is, what it does, or whether it is proprietary or free. I opted into nothing.

This is a huge, huge mistake by Mozilla.