News for hackers. Stuff that matters.
Re:Firefox: Dark pattern consent dialog invites users to sha... by brutal_chaos_ on Friday October 08, 2021 @06:11PM (#28804720)
Does a serious alternative to Firefox exist? I mean an alternative that is what Firefox purports to be? I'm ready to make the switch. Been with Mozilla since Pheonix, but the user hostility has become too much.
Re:Firefox: Dark pattern consent dialog invites users to sha... by kunagi7 on Friday October 08, 2021 @06:28PM (#28804866)
Well... A few years ago I did the same journey, abandoning Firefox for something else. There's several stable and serious browsers out there.

After looking for weeks I created a list of categories... And it depends on what are you willing to sacrifice:

Just want a plain browser, without logins, synchronization, without ANY external connections etc:

Ungoogled-chromium (Windows, Linux...) and Bromite (Android).

Don't care about full web compatibility or speed but keep your privacy under control:

Waterfox Classic and Palemoon (Windows and Linux).

Don't care about Open Source vs Closed Source licensing (but still preserve some privacy):

Vivaldi (the most customizable Chromium-based browser out there but the UI even after several improvements feels a bit slower than other browsers).

Don't care about privacy... Then it's quite easy:

Edge, Chrome, Opera.

If you are into cryptocurrencies or need a nice browser with decent adblocking on iOS: Brave.

I decided to use Vivaldi since I like to personalize the looks of my browser quite a lot.

The best recommendation is to try everything for a while and settle with the one you feel most comfortable.

Re:Firefox: Dark pattern consent dialog invites users to sha... by userbinator on Friday October 08, 2021 @09:49PM (#28806292)
Don't care about full web compatibility or speed but keep your privacy under control

Dillo, NetSurf.

They are fine if you mostly use sites like HN and other mostly-static content, maybe with some forms interaction. Those are HTML4-ish "document web" browsers. There's also all the text-based ones that those who want to send an even stronger message about how much they hate the "modern web" can use.

Re:Firefox: Dark pattern consent dialog invites users to sha... by brutal_chaos_ on Tuesday October 12, 2021 @04:56PM (#28844967)
I really appreciate your comment. Of that list, Vivaldi seemed like the best option for me (even If proprietary...), but on mobile I noticed page loading lag that happened with Firefox on Android in the early days. So I'm still searching... :/
Re:Firefox: Dark pattern consent dialog invites users to sha... by nsonha on Friday October 08, 2021 @06:39PM (#28804939)
All these forks will die because even firefox, a well organised OSS project is struggling

That leaves Edge, Chrome, Opera and Vivaldi

Because you even mentioned them, I don't think you understand the question. Let me rephrase it: who will develop, and have a sustainable business model for a new browser engine and break Chromium's monoculture, other than Firefox?

Re:Firefox: Dark pattern consent dialog invites users to sha... by kreeben on Friday October 08, 2021 @06:44PM (#28804983)
>> firefox, a well organised OSS project

I see no proof of this.

>> is struggling

Money-wise, no. Management-wise, hell-to-the-yes.

Re:Firefox: Dark pattern consent dialog invites users to sha... by alfiedotwtf on Friday October 08, 2021 @07:00PM (#28805091)
Every time I see Mozilla mentioned on HN, I get sad how badly they screwed things :(
Re:Firefox: Dark pattern consent dialog invites users to sha... by sharps1 on Friday October 08, 2021 @07:05PM (#28805135)
Vivaldi only has a small team. They said in 2016 they only needed five million users to turn a profit (They generate income based on search engine referrals).

Another downside to Vivaldi is they don’t push out many releases meaning that their security is likely lagging behind. My assumption on this is their custom UI takes a while to build after a new release.

Edge and Chrome both push out timely security updates.

EDIT: Typo.

Re:Firefox: Dark pattern consent dialog invites users to sha... by nsonha on Saturday October 09, 2021 @01:28AM (#28807291)
who cares? They are still Chrome, whether they live or die, the course of the web platform is still unaffected
Re:Firefox: Dark pattern consent dialog invites users to sha... by intelMgmntEnema on Friday October 08, 2021 @06:26PM (#28804843)
Personal opinion:

There is an entire economy and ecosystem based on rewarding sinister web design. The complexity and resources involved in keeping pace with contemporary garbage while qualifying simply as a functional browser is too vast. So much that I suspect it's all downhill from here. I don't believe we'll ever see an all around user-friendly, privacy respecting, well designed, functional browser. I'd delight in being wrong here, but sincerely doubt it.

Re:Firefox: Dark pattern consent dialog invites users to sha... by tablespoon on Friday October 08, 2021 @06:33PM (#28804902)
> There is an entire economy and ecosystem based on rewarding sinister web design. The complexity and resources involved in keeping pace with contemporary garbage while qualifying simply as a functional browser is too vast.

Yeah, HTML standards have basically evolved into a kind of regulatory capture that protects Google's browser. Even Microsoft found them too difficult to implement and meet user expectations.

> I don't believe we'll ever see an all around user-friendly, privacy respecting, well designed, functional browser. I'd delight in being wrong here, but sincerely doubt it.

At least if we rely on market incentives. I suppose we might see one if it's regulated into existence (e.g. European regulators forcing Google, Microsoft, etc. to provide browsers that respect privacy and provide functional extension capability for ad blockers and the like).

Re:Firefox: Dark pattern consent dialog invites users to sha... by jjcon on Friday October 08, 2021 @06:20PM (#28804798)
I know some get annoyed with this answer but if you look into what the Brave team is doing they have a lot of really interesting projects in the works. I've had a great experience with Brave.
Re:Firefox: Dark pattern consent dialog invites users to sha... by throwaway661885 on Friday October 08, 2021 @06:26PM (#28804844)
Please no

https://news.ycombinator.com/item?id=28746873

Edit - Also 'Ublock Origin' works best with Firefox

https://news.ycombinator.com/item?id=26755252

Re:Firefox: Dark pattern consent dialog invites users to sha... by WithinReason on Saturday October 09, 2021 @04:44AM (#28808106)
I couldn't find anything of substance here, just FUD
Re:Firefox: Dark pattern consent dialog invites users to sha... by xx511134bz on Friday October 08, 2021 @06:56PM (#28805059)
They also have a search engine that's good enough most of the time.
Re:Firefox: Dark pattern consent dialog invites users to sha... by BiteCode_dev on Friday October 08, 2021 @06:26PM (#28804846)
Brave being webkit, it's not an alternative.
Re:Firefox: Dark pattern consent dialog invites users to sha... by jjcon on Friday October 08, 2021 @06:56PM (#28805060)
>Brave being webkit, it's not an alternative.

Brave is Blink not webkit - Blink has been developed by Google, Facebook, Microsoft, Intel and many others. It is the standard for web rendering just as linux is for web hosting. There is nothing wrong with open standards.

Re:Firefox: Dark pattern consent dialog invites users to sha... by BiteCode_dev on Friday October 08, 2021 @07:19PM (#28805265)
The fact you state blink is a standard is everything that is wrong with browser monoculture.

It's like we didn't learn anything from IE6.

Also blink is just a fork of webkit.

Re:Firefox: Dark pattern consent dialog invites users to sha... by jjcon on Friday October 08, 2021 @07:35PM (#28805431)
>everything that is wrong with browser monoculture

What exactly is wrong with open standards? Would you say linux creates a hosting monoculture? That's just ridiculous. Blink has been contributed to by just about every major tech company, that isn't a monoculture thats how open standards work.

Re:Firefox: Dark pattern consent dialog invites users to sha... by SahAssar on Friday October 08, 2021 @08:25PM (#28805802)
Blink isn't a standard, it's an implementation of multiple standards.

An implementation cannot be a standard since a standard describes what a implementation needs to do while a implementation will need to both decide what parts of standards to implement and how to implement them and will do many things that are not described in standards. There are many behaviors, bugs and implementation details of Blink that should not and cannot be part of a standard.

As soon as a implementation becomes a standard we get ossification and implementation bugs in the standard as the only way to conform to the standard is the exact original implementation.

Besides all that while Blink has contributors from many individuals and companies it is clear that google steers the ship.

The web standards were built on the idea that multiple independent implementations were crucial, and it is a required step for a proposal to become a standard.

Linux isn't a standard either, the standard in that case would be POSIX and linux is "Mostly POSIX-compliant".

Re:Firefox: Dark pattern consent dialog invites users to sha... by yjftsjthsd-h on Friday October 08, 2021 @08:52PM (#28805981)
> What exactly is wrong with open standards?

Nothing, but Blink isn't one.

> Would you say linux creates a hosting monoculture?

Yes, obviously. The GNU/Linux hegemony is a pet peeve of mine, especially because it breeds this absurd "well the most common implementation does X, so screw everyone else" mindset that needlessly hinders alternatives.

[dead]
[dead]
Re:Firefox: Dark pattern consent dialog invites users to sha... by yjftsjthsd-h on Friday October 08, 2021 @08:49PM (#28805959)
There's no call for ad hominems.
Re:Firefox: Dark pattern consent dialog invites users to sha... by throwaway661885 on Friday October 08, 2021 @07:04PM (#28805115)
It's not as open as one would think. The corporations have too much control over it that if someone forks it, they will be left behind. Check how syncing was disabled in chromium recently.
Re:Firefox: Dark pattern consent dialog invites users to sha... by jjcon on Friday October 08, 2021 @07:10PM (#28805173)
>if someone forks it, they will be left behind

Is gecko any different in this regard? That is how forking works.

>The corporations have too much control over it

Blink seems better in this regard, it has received major contributions from just about every major tech company out there diversifying its control. Gecko has been primarily just mozilla (especially these days since it only represents about 3% of the market).

Re:Firefox: Dark pattern consent dialog invites users to sha... by BiteCode_dev on Friday October 08, 2021 @07:37PM (#28805443)
So the worst and most powerful IT corporations in the world spreading their vision as a world standard VS a non profit offering ecosystem diversity ?

I guess I lost my touch, I've been feeding the troll.

Re:Firefox: Dark pattern consent dialog invites users to sha... by jjcon on Friday October 08, 2021 @07:47PM (#28805528)
>a non profit offering ecosystem diversity

You mean mozilia where over 70% of their revenue is from google?

https://www.ghacks.net/2020/12/10/mozillas-revenue-jumped-to...

Re:Firefox: Dark pattern consent dialog invites users to sha... by throwaway2048 on Friday October 08, 2021 @07:04PM (#28805114)
Blink is in no way an "open standard"
Re:Firefox: Dark pattern consent dialog invites users to sha... by decasteve on Friday October 08, 2021 @09:32PM (#28806206)
I mentioned this on another post:

The Tor Browser without Tor. It’s Firefox with all the “extras” stripped away.

The instructions on how to do so are easy to find on the web. It also supports all the same add-ons/plugins.

Re:Firefox: Dark pattern consent dialog invites users to sha... by kayson on Friday October 08, 2021 @06:32PM (#28804891)
I wish. Gecko is open source, so there's no technical reason another non-Chromium browser couldn't be created (which I think is important for the web ecosystem, avoiding browser monoculture, etc.). I suspect that no one has really done it because it would be a terrible uphill battle and there's no direct revenue to be had. Browser money comes from ad/search partnerships, which require a strong existing userbase, or just the userbase itself in the case of something like Chrome.
Re:Firefox: Dark pattern consent dialog invites users to sha... by paulryanrogers on Friday October 08, 2021 @09:04PM (#28806061)
There are several active Firefox forks like LibreWolf and Waterfox
Re:Firefox: Dark pattern consent dialog invites users to sha... by magnaton on Saturday October 09, 2021 @10:19AM (#28810079)
LibreWolf is a fork of Firefox that removes telemetry, Pocket, and other unwanted stuff. You can use a copy of your existing Firefox profile, but be sure to go through LibreWolf's settings as its defaults err on the side of privacy and may be different than what you already have set up.
Re:Firefox: Dark pattern consent dialog invites users to sha... by bloopernova on Friday October 08, 2021 @06:24PM (#28804827)
You could give Waterfox a try.
Re:Firefox: Dark pattern consent dialog invites users to sha... by ssss11 on Saturday October 09, 2021 @01:14AM (#28807233)
I’m wondering if Vivaldi is a good option?
Re:Firefox: Dark pattern consent dialog invites users to sha... by shock on Friday October 08, 2021 @06:36PM (#28804920)
I plan to give LibreWolf a try.
[dead]
Re:Firefox: Dark pattern consent dialog invites users to sha... by Shared404 on Friday October 08, 2021 @10:18PM (#28806420)
> I mean an alternative that is what Firefox purports to be?

To privacy and functionality thow shalt count. Not to infunctionality, nor tracking.

Google is Right Out.

Re:Firefox: Dark pattern consent dialog invites users to sha... by charcircuit on Friday October 08, 2021 @11:59PM (#28806940)
Google respects your privacy and Chrome tends to have more features than Firefox.
Re:Firefox: Dark pattern consent dialog invites users to sha... by Shared404 on Saturday October 09, 2021 @01:23AM (#28807267)
> Google respects your privacy

Do you work there? I see no other way you could possibly think this.

If not, do you have a source you can provide?

> Chrome tends to have more features than Firefox

This is true. Some features, I have no use for, some are outside of standards and thus lead to the same issue as years ago with IE, and some fall under both.

Admittedly, me having no use for some doesn't mean they don't have value for other people. It's the standard extend and extinguishing that worries me.

And yes, a standard that only one company can hit may as well be extinguished.

Re:Firefox: Dark pattern consent dialog invites users to sha... by charcircuit on Saturday October 09, 2021 @07:04AM (#28808767)
>If not, do you have a source you can provide?

Unironically read Google's privacy policy page.

https://policies.google.com/privacy?hl=en-US

Re:Firefox: Dark pattern consent dialog invites users to sha... by Shared404 on Saturday October 09, 2021 @11:16AM (#28810575)
Blow by blow breakdown time I guess. I skip portions of the policy here and there.

> We also collect the content you create, upload, or receive from others when using our services. This includes things like email you write and receive, photos and videos you save, docs and spreadsheets you create, and comments you make on YouTube videos.

So first up. User created data, this seems necessary ofc. Lower down, it says emails aren't used for advertising, but says nothing about using them for tracking.

> We collect information about the apps, browsers, and devices you use to access Google services, which helps us provide features like automatic product updates and dimming your screen if your battery runs low.

> The information we collect includes unique identifiers, browser type and settings, device type and settings, operating system, mobile network information including carrier name and phone number, and application version number. We also collect information about the interaction of your apps, browsers, and devices with our services, including IP address, crash reports, system activity, and the date, time, and referrer URL of your request.

We totally need to have your device information on hour servers so we can checks notes provide automatic screen dimming! Yup! Can't do that on device!

And then there's the sheer amount of other information they collect in this paragraph, especially the phone number, and "unique identifiers" - which have proven to pretty much always be trackable back to an individual if someone care's to look.

Pretty much the only thing here which doesn't violate privacy is the last sentence.

> We collect this information when a Google service on your device contacts our servers — for example, when you install an app from the Play Store or when a service checks for automatic updates.

Hm, that seems pretty frequent but whatever I guess. Maybe this is just with Android?

> If you’re using an Android device with Google apps, your device periodically contacts Google servers to provide information about your device and connection to our services. This information includes things like your device type, carrier name, crash reports, and which apps you've installed.

Nope, that gets it's own section. Oh, and look they get every. single. app. installed - regardless of it's from Play Store.

> We collect information about your activity in our services, which we use to do things like recommend a YouTube video you might like. The activity information we collect may include:

    Terms you search for
    Videos you watch
    Views and interactions with content and ads
    Voice and audio information when you use audio features
    Purchase activity
    People with whom you communicate or share content
    Activity on third-party sites and apps that use our services
    Chrome browsing history you’ve synced with your Google Account
> If you use our services to make and receive calls or send and receive messages, we may collect call and message log information like your phone number, calling-party number, receiving-party number, forwarding numbers, sender and recipient email address, time and date of calls and messages, duration of calls, routing information, and types and volumes of calls and messages.

Most of this seems reasonable, but "Activity on third-party sites and apps that use our services" boils down to "We take whatever we want if the domain isn't ours".

> We collect information about your location when you use our services, which helps us offer features like driving directions for your weekend getaway or showtimes for movies playing near you.

This is one of the few that has actual functionality requirements to collect, but the degree to which it is collected is problematic.

Also, this information is effectively PII, but last time I checked can be shared with "Unique Identifiers" as anonymized information.

Skipping the rest of the location section to:

> In some circumstances, Google also collects information about you from publicly accessible sources. For example, if your name appears in your local newspaper, Google’s Search engine may index that article and display it to other people if they search for your name. We may also collect information about you from trusted partners, such as directory services who provide us with business information to be displayed on Google’s services, marketing partners who provide us with information about potential customers of our business services, and security partners who provide us with information to protect against abuse. We also receive information from advertisers to provide advertising and research services on their behalf.

Stuff from publicly accessible sources seem fair.

Collecting from "trusted partners" means that "We didn't collect all that data not in the privacy policy, we bought it!". This applies to most of the bottom 2/3 of this paragraph.

> We use various technologies to collect and store information, including cookies, pixel tags, local storage, such as browser web storage or application data caches, databases, and server logs.

Yep, this is standard to get the information they're collecting. Uncalled for, but standard.

The whole "Provide personalized services, including content and ads" section is exactly what you would expect, though this section:

> We don’t show you personalized ads based on sensitive categories, such as race, religion, sexual orientation, or health.

is worrying. "We have this information, but Trust Us(tm), we won't abuse it :) !"

Also

> We don’t show you personalized ads based on your content from Drive, Gmail, or Photos.

"We won't show you ad's from this" - but not "We won't look at this."

Skipping into "Protect Google, our users, and the public"

> We use information to help improve the safety and reliability of our services. This includes detecting, preventing, and responding to fraud, abuse, security risks, and technical issues that could harm Google, our users, or the public.

Oh boy, time for Security Purposes(tm)!

> And we analyze your content to help us detect abuse such as spam, malware, and illegal content.

There's where Gmail, Drive, and Photo scanning are allowed.

> We may combine the information we collect among our services and across your devices for the purposes described above. For example, if you watch videos of guitar players on YouTube, you might see an ad for guitar lessons on a site that uses our ad products. Depending on your account settings, your activity on other sites and apps may be associated with your personal information in order to improve Google’s services and the ads delivered by Google.

We'll build a profile full of information about you, ready for taking for whichever relevant government, rogue employee, or anyone who breaks our system! But don't worry, it is very secure :) !

Skipping past "Privacy controls" - which having used as an end user I can confirm are full of false choices and dark patterns.

Skipping into "When Google shares your information"

> We provide personal information to our affiliates and other trusted businesses or persons to process it for us, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures. For example, we use service providers to help us with customer support.

Trust Us and Our Partners(tm). Google has already shown themselves untrustworthy, and they don't share who these partners are, so we have no way of vetting them.

> [We will share data to] Meet any applicable law, regulation, legal process, or enforceable governmental request. We share information about the number and type of requests we receive from governments in our Transparency Report.

We will share any and all data with whichever government is relevant! Glad we created a comprehensive picture of each individual user already!

> [We will share data to ]Protect against harm to the rights, property or safety of Google, our users, or the public as required or permitted by law.

Ah yes, Security Purposes(tm). "We'll do whatever we want with sharing, as permitted by law!"

That's an awful lot.

> We may share non-personally identifiable information publicly and with our partners — like publishers, advertisers, developers, or rights holders.

There's no such thing as non-personally identifiable information ( https://www.cs.princeton.edu/~arvindn/publications/browsing-... ), and looky there, it's getting shared with everyone.

---

Anyways, I don't think that was the source you were looking for. It boils down to "We collect everything, and Trust Us!"

Google has repeatedly shown themselves to not be trustworthy, so forgive me if I don't.

Edit: And keep in mind this is just what they admit to. In my experience, the larger the business the more "sensitive" actions there are.

Re:Firefox: Dark pattern consent dialog invites users to sha... by yjftsjthsd-h on Friday October 08, 2021 @08:55PM (#28806001)
> It's made by Google, the company behind the most popular search engine.

Google's abuse of their search dominance to push their way into browsers is a compelling reason to boycott it.

Re:Firefox: Dark pattern consent dialog invites users to sha... by charcircuit on Friday October 08, 2021 @11:58PM (#28806933)
I don't think it's wrong for a business to advertise other products / services it offers on its web properties. Google wanted to get the word out so where better than on their homepage.