News for hackers. Stuff that matters.

A comment on Brave taking cryptocurrency donations “for me” without my consent. Parent comment

Re:Brave taking cryptocurrency donations “for me” without my... by aphextron on Friday December 21, 2018 @02:33PM (#18735870)
I've tried over and over for decades to like Firefox, but I just don't. I can't say it's a rational decision entirely. But beyond that, I just think that Mozilla's motives can't really be trusted at face value with the amount of revenue they have these days, and their whole profile sync service. It just comes down to incentives, and any company which collects any kind of data has the incentive to profit at our expense regardless of ideology. Especially where people's salaries could depend on it.
[ Parent | on HN ]
Re:Brave taking cryptocurrency donations “for me” without my... by asadotzler on Friday December 21, 2018 @02:37PM (#18735899)
What about the whole profile sync service? It's designed to be privacy preserving by encrypting everything locally with a key only you have. https://hacks.mozilla.org/2018/11/firefox-sync-privacy/
[ Parent | on HN ]
Re:Brave taking cryptocurrency donations “for me” without my... by reidrac on Friday December 21, 2018 @02:44PM (#18735951)
Sorry if I misunderstood you, but you said you were using Brave. Perhaps you should review how you evaluate the products you use because your record isn't great.

If you were wrong about Brave, your concerns about Firefox and Mozilla could be wrong as well.

[ Parent | on HN ]
Re:Brave taking cryptocurrency donations “for me” without my... by ceejayoz on Friday December 21, 2018 @02:37PM (#18735897)
What about the profile sync service can't be trusted?

It's end-to-end encrypted. Mozilla doesn't have the keys.

[ Parent | on HN ]
Re:Brave taking cryptocurrency donations “for me” without my... by aphextron on Friday December 21, 2018 @02:44PM (#18735952)
It's just an attack vector I wish didn't exist at all. There's also metadata. Sure Mozilla doesn't have your passwords, but they know who you have passwords with. That creeps me out.

There's nothing wrong with the all-purpose heavily featured approach of stuff like Chrome and Firefox, and I get that other people like Sync, I just really wish there was a totally stripped down basic internet browser I could trust.

[ Parent | on HN ]
Re:Brave taking cryptocurrency donations “for me” without my... by jlg23 on Friday December 21, 2018 @03:05PM (#18736138)
>Sure Mozilla doesn't have your passwords, but they know who you have passwords with.

Do they? I just skimmed the source and could not find anything that hints at that (and implementing it the way you said it is makes for much more complex code..)

[ Parent | on HN ]
Re:Brave taking cryptocurrency donations “for me” without my... by geofft on Friday December 21, 2018 @03:10PM (#18736180)
I just don't enable it. It's not on by default.

For the average user—think your uncle who's about to ask you tech support questions this weekend—using Firefox Sync is way better for their privacy and security than reusing the same password everywhere. And for those of us who have and use password managers, Firefox Sync is not on by default—unlike Brave's attention-tracking or Chrome's Google logins.

[ Parent | on HN ]
Re:Brave taking cryptocurrency donations “for me” without my... by danso on Friday December 21, 2018 @02:56PM (#18736078)
Isn't profile sync opt-in?
[ Parent | on HN ]
Re:Brave taking cryptocurrency donations “for me” without my... by jlg23 on Friday December 21, 2018 @02:58PM (#18736086)
"Face value"? Try "source value".

What exactly is your problem with an opt-in service?

[ Parent | on HN ]
Re:Brave taking cryptocurrency donations “for me” without my... by gaadd33 on Friday December 21, 2018 @02:40PM (#18735920)
Is Mozilla run that lean even with >$500M in revenue?
[ Parent | on HN ]
Re:Brave taking cryptocurrency donations “for me” without my... by danso on Friday December 21, 2018 @02:55PM (#18736067)
The majority of that funding seems to come from royalties ($504M of $520M) [0]. What would be the leaner way of collecting those royalties?

[0] https://www.mozilla.org/en-US/foundation/annualreport/2016/

[ Parent | on HN ]
Re:Brave taking cryptocurrency donations “for me” without my... by notyourwork on Friday December 21, 2018 @02:51PM (#18736018)
If we didn't do business with any company that was run inefficiently we would not do business with a lot of places. I'm not sure how the efficiency of the business is entirely coupled to whether or not the product is usable and meets user needs in ways that other competing products cannot.
[ Parent | on HN ]