News for hackers. Stuff that matters.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by Karunamon on Sunday May 05, 2019 @08:16PM (#19835921)
Who's fault is that, at the end of the day?

Mozilla didn't have to structure their addon system in such a way that their (in)actions could disable the addons of every Firefox user on the planet.

Mozilla did not have to abuse the studies mechanism (also on by default) to ship a workaround.

Mozilla did not have to disable the option that would let me work around this problem by myself (which is going to cause me no end of fun when I get into work tomorrow). If the Firefox team thinks their development concessions are a pain in the ass, try being directly accountable for the repercussions, in the "I will be fired if I don't fix this", not the "I will be talked mean about on the internet if I don't fix this" senses.

Mozilla didn't have to bundle junk like Pocket and the now-scuppered Hello, both of which could have just as easily been addons suggested on first run.

Mozilla didn't have to push promotional addons (the Mr Robot thing) without my express prior consent.

I grow exceedingly weary of this narrative that Firefox is above all reproach and criticism because they produce a web browser.

How about this instead; if Mozilla wishes for its users to respect them, they can start by respecting their users. That means no opt-out telemetry period, no paternalism about what I can and cannot install, or what options I can change, and so forth.

I am beyond sick of this shit. I would love nothing more than a true third option for browsers right now. Firefox hates its users, Chrome sees them as cattle - what's left? I have to use one of the two and take ridiculous steps to cover my own interests, because neither of these companies have them in mind.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by floatingatoll on Sunday May 05, 2019 @09:22PM (#19836168)
"Opt-out telemetry" creates precisely the scenario I describe, where the users who care most are least visible to Mozilla, at which point their needs would go unconsidered; no one knows they exist, how many of them there are, or why they're opting out. This remains true regardless of why, which negates your entire list of issues, replacing them with a simple question that is very difficult to answer:

How could Mozilla respect the needs of users who opt-out of Mozilla knowing they, and their needs, exist at all?

How could any creator of anything?

If you can't identify who your users are, you can't ask them questions, and you can't tell if they're "vocal 0.001%" or "vocal 40%" of your userbase — then what consideration could you give, as a software developer, for their needs?

You can refuse to change, and simply always offer the one thing you offer, and accept that you're the best option for a minority of users over time. You can continue developing to your own needs, and let them stay or go as they see fit. You can try to read the tea leaves of internet forum posts, but that comes with a huge penalty to significance. You can try new things and try to tell from the howls of outrage whether it's a wording error or a direction error or simply "change is bad, I hate you all".

Opting out is not free. Opting out comes at a price to you. Your needs will be less likely to be considered, and your solutions may change in ways that are not to your liking. You have every right to opt out, but is the price of that acceptable to you?

ps. If you can solve how to let users of something influence its creator in a fair and just manner, such that all users have equal influence, while opting out of being known to that creator to exist at all, you will be a billionaire within five years.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by Karunamon on Sunday May 05, 2019 @10:47PM (#19836450)
>If you can't identify who your users are, you can't ask them questions, and you can't tell if they're "vocal 0.001%" or "vocal 40%" of your userbase — then what consideration could you give, as a software developer, for their needs?

I'd ask for feedback, and when that feedback is given freely, even when unsolicited, I'd take it on board and act accordingly. I would ask if people want to participate in "telemetry" and "studies", not assume they do without affirmative prior consent.

Mozilla is breathtakingly bad at this. They're about as responsive to feedback as GNOME/Freedesktop.

I most certainly would not put spyware in the product and turn it on without asking first. I'd most certainly never get myself into a situation where an oversight can simultaneously break every copy of my software ever deployed.

This idea that you require all copies of your software to phone home to make effective development decisions is bunk. We got along just fine without that garbage for decades.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by chienandalou on Monday May 06, 2019 @03:26AM (#19837475)
> How could Mozilla respect the needs of users who opt-out of Mozilla knowing they, and their needs, exist at all?

How about surveys or well, common sense?

I'm a tech oriented person who cares about privacy. I want software that is lightweight, configurable, with sensible defaults. For any features besides the basic functionality (in this case: browsing the web), I don't want to opt-out, I want to opt-in.

Privacy oriented means for me that the software I use doesn't send one bit of data that isn't necessary for its basic functionality. I use a "dumb phone" because of this. I never understood how anybody can think telemetry and privacy can co-exist.

I want a Firefox without Pocket, Send, Screenshot Tools, Sync, Clickz, any cloud based service. I only want a fast, lightweight browser that doesn't send any unnecessary data anywhere without me explicitly configuring it. That's a sensible default for me, really. Software used to be like that.

I'd also like to configure when my software looks for updates. My Linux distro let's me do that.

And it would be awesome if all other functionality (like Send/Sync/Pocket, etc.) is available via optional plugins, or in another "full-featured" version of Firefox. The deluxe edition or whatever.

I believe I'm not alone with these ideas about software. In discussions about Firefox these things always come up. There are github projects [1,2] with 1600 and 1200 stars about hardening Firefox. People care about privacy. It's not hard to find this part of the userbase.

The idea that you can't create software for your users without telemetry, is what leads Mozilla to disregard their privacy oriented users in the first place. It's depressing.

And even if I allowed telemetry on my system Mozilla wouldn't learn anything about what I wrote here. It's useless.

1: https://github.com/pyllyukko/user.js/ 2: https://github.com/ghacksuserjs/ghacks-user.js

Re:Firefox 66.0.4 is out, fixes disabled add-ons by floatingatoll on Wednesday May 08, 2019 @04:59PM (#19862876)
A brief search of "site:blog.mozilla.org inurl:2019 survey" shows a bunch of results, and even more for inurl:2018. Have you signed up to receive unsolicited email from Mozilla in any venue? If you've opted-out, then you may be experiencing observer bias.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by steve19 on Sunday May 05, 2019 @09:50PM (#19836279)
In the old days, and today in every other industry but tech, if you want to understand your customers you survey them, do focus groups and listen to unsolicited feedback.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by ptx on Monday May 06, 2019 @02:19AM (#19837225)
> "Opt-out telemetry" creates precisely the scenario I describe, where ... no one knows ... why they're opting out.

Telemetry doesn't tell you why users do anything. They would have to ask, which doesn't require telemetry. There used to be a form for submitting feedback.

> How could Mozilla respect the needs of users who opt-out of Mozilla knowing they, and their needs, exist at all?

Because of the values and principles that Mozilla used to share with its users, the principles that underpinned the first implemenation of Firefox Sync and were completely abandoned in the current implementation.

I trusted Mozilla because they didn't require our trust. They understood this principle and designed their systems in accordance with it.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by pbhjpbhj on Monday May 06, 2019 @09:00AM (#19838990)
>no one knows they exist, how many of them there are, or why they're opting out //

They're burning half-a-billion a year of Google's money, they can afford to have an intern run filters to capture stories on HN, reddit, slashdot, ... amalgamate the main points and make them available as part of the user feedback.

Presumably many of the devs at Mozilla have been using it for the last 15 years too and also value a privacy-centric advertising-lite web.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by kevingadd on Monday May 06, 2019 @12:01AM (#19836762)
So you're going to complain about the software breaking and also complain about them pushing a hotfix for it?

This whole situation isn't ideal but it's absurd to me that people are upset about hotfixes for a bug that they found extremely inconvenient. Do you like the bug or not? The option to turn off the system they used for hotfixes is right there in the privacy settings and they even show you what it's currently being used for (and what it was used for in the past). Like it or not, as far as I know every major browser (maybe not Safari?) is doing the exact same thing except they're less transparent about it.

I have literally no idea how to identify what experiments and rollout flags are quietly turned on for my install of Chrome and not for other people because it's not documented anywhere. At least in Firefox the option is right there and so is info on what the option does.

"No opt-out telemetry" is a great idea that doesn't function in the real world. If you ship online-connected software with 1m+ users that doesn't have a way to deploy hotfixes or a killswitch for dangerous features or basic telemetry, that is incredible negligence because all it takes is a single bug or a single unanticipated act by a third party and you're DDoSing someone or causing other kinds of mayhem. I'm quite serious. This is why most vendors operating at Mozilla's scale have the same set of tools at their disposal, even if they don't tell you about it. You cannot deploy large-scale connected software in the real world without doing this. It's one thing to go 'Word shouldn't have any telemetry' (okay, sure) and another to go 'this app that connects to thousands of servers, is left open all the time, and runs remote code should not have any telemetry or automatic update mechanism'. The latter is naive on the level of 'just don't write any bugs and your software won't need updates'.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by Karunamon on Monday May 06, 2019 @12:12AM (#19836816)
So you're going to complain about the software breaking and also complain about them pushing a hotfix for it?

The right way to do this is to push a new release, which they've done. The absolutely wrong way to do this is to silently push a fix through a back door that's open by default and rightly shouldn't exist in the first place.

Yes, you can do things more efficiently when you ignore the rules and subvert reasonable expectations. Generally though, society takes a dim view of this.

>If you ship online-connected software with 1m+ users that doesn't have a way to deploy hotfixes ..

That way is checking for updates, and then asking me if I want to install them. Most software does this and it works fine. There are no privacy implications for hitting an API for a number and checking locally if it's higher than a number I have. All clean, all above-board.

That way is emphatically NOT playing like a sneak and making changes silently and remotely without asking me about it first. I don't care what you think your good reason is, you don't have the ethical/moral right to make changes on my property without that affirmative consent.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by lucb1e on Monday May 06, 2019 @02:56AM (#19837355)
If Mozilla has you that angry, I can't imagine what you must go through every time you interact with any other company. Your points are not completely invalid (most of them anyway) but you might want to rethink where you spend your time ranting in some fury, encouraging people to move away from the only open browser with any sort of market share in favor of our new monopolist. Firefox is not beyond criticism but I think they get plenty of it already for all the good they do compared to everyone else, and a mad fury like this might be better spent contributing to the project.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by reciprocity on Monday May 06, 2019 @12:46PM (#19841166)
Mozilla does not "hate" its users. This comment is way too emotional and dogmatic. Firefox is not above reproach but the presentation of your message leaves a lot to be desired.
Re:Firefox 66.0.4 is out, fixes disabled add-ons by Karunamon on Monday May 06, 2019 @03:49PM (#19843066)
So why do they ignore their feedback at every step? Why do they continue taking anti-user moves seemingly at every opportunity when there's a choice?

If what we see here is how you think Mozilla treats its users well, I'd hate to see what it would take to get you to agree they treat them badly.

I see nothing but naked contempt. YMMV.

Re:Firefox 66.0.4 is out, fixes disabled add-ons by floatingatoll on Thursday May 09, 2019 @12:01AM (#19865263)
What if what you see as “anti-user moves” turned out to be directly beneficial to a thousand times as many people as a few that agree with you?

If you see all instances of someone disagreeing with your ethical and logical judgements as naked contempt, then you will never be able to perceive anyone’s true motivations, in order to argue your case more persuasively and find out whether they understand your views.

Outrage has jumped the shark. Everyone disagrees about everything, which is hard enough to address without declaring “naked contempt” any time a choice is made that isn’t in your favor.