News for hackers. Stuff that matters.
Re:De-AMP: Cutting out Google and enhancing privacy by gruturo on Tuesday April 19, 2022 @01:18PM (#31086004)
Kudos to Brave - they're a sometimes weird actor, but some of their initiatives are commendable, and they often do what Mozilla should have, but didn't.

I rarely end up in AMP pages on my mobile, but when it happens I immediately feel like I stepped on a turd, and promptly backtrack / close the tab before it hijacks my back button, half the screen, standard controls (including doing something weird to scrolling) and other unpleasantries like banners whose "x" somehow overlaps my browser's bars, and are therefore out of reach (and said browser bars somehow do NOT autohide when scrolling, unlike on normal pages)

Getting AMP results from Google search has been one of the drivers leading me to switch to DDG, so congrats Google, one less customer.

Re:De-AMP: Cutting out Google and enhancing privacy by nickysielicki on Tuesday April 19, 2022 @01:49PM (#31086396)
I’m surprised that Apple doesn’t have a desire to play this role. They don’t sell ads so there’s no cannibalism and they have painted themselves (and advertised themselves) publicly as a company that cares about privacy and security. It seems like a natural avenue to win users in a world where the Windows alternative has more analytics and spyware than ever.

A man can dream.

Re:De-AMP: Cutting out Google and enhancing privacy by tyrfing on Tuesday April 19, 2022 @03:42PM (#31087974)
> They don’t sell ads so there’s no cannibalism

Apple sells huge amounts of ads, I believe it's the fastest growing part of the business right now. Estimates are $5 billion in advertising revenue in 2021, with one projection of $20 billion annually within 3 years. In addition to this, Google pays them $15 billion to be the default search engine and sell ads.

https://www.ft.com/content/074b881f-a931-4986-888e-2ac53e286...

Re:De-AMP: Cutting out Google and enhancing privacy by greenyoda on Tuesday April 19, 2022 @08:51PM (#31091436)
Archive of FT article on Apple Ads, to avoid paywall: https://archive.ph/EkWNq
Re:De-AMP: Cutting out Google and enhancing privacy by s3p on Tuesday April 19, 2022 @11:26PM (#31092478)
The hero we needed
Re:De-AMP: Cutting out Google and enhancing privacy by gpanders on Tuesday April 19, 2022 @09:22PM (#31091642)
Where do they sell ads outside of the App Store?
Re:De-AMP: Cutting out Google and enhancing privacy by inferiorhuman on Tuesday April 19, 2022 @10:54PM (#31092291)
Off the top of my head there are ads for third-party apps in the Apple Health app, ads for subscriptions and whatever in the Music app, ads for the Apple credit card in the Wallet app, ads for completely irrelevant crap via "curated" lists in the Maps app (no way the SF Chronicle is getting free placement in Apple Maps).
Re:De-AMP: Cutting out Google and enhancing privacy by PokestarFan on Wednesday April 20, 2022 @02:18PM (#31100899)
I mean for first-party ads that makes sense
Re:De-AMP: Cutting out Google and enhancing privacy by admax88qqq on Tuesday April 19, 2022 @02:10PM (#31086671)
Apple only nominally cares about the web. They would rather all interactions go through apps and the app store where they get their cut.
Re:De-AMP: Cutting out Google and enhancing privacy by toper-centage on Tuesday April 19, 2022 @02:30PM (#31086968)
It's funny because if you go watch the iPhone launch presentation, Jobs was all about the web, and having web apps on your phone. Fast forward and PWA are just recently possible, barely supported, and Apple would really prefer you not to use them. The incentives are clear, but it's still a sad story.
Re:De-AMP: Cutting out Google and enhancing privacy by hbn on Tuesday April 19, 2022 @03:26PM (#31087724)
It's not so much that Jobs was "all about the web," it's just that he didn't want people writing bad software for the iPhone so he was against allowing third-party apps on it until after much convincing.
Re:De-AMP: Cutting out Google and enhancing privacy by _jal on Tuesday April 19, 2022 @02:36PM (#31087071)
> Jobs was all about the web

That was just the best answer he had to questions about third-party apps until they had the infra in place for it.

Apple will never tell you ahead of time about changes like that. So, while I wouldn't exactly call it lying, you'll get answers like the above.

Re:De-AMP: Cutting out Google and enhancing privacy by soperj on Tuesday April 19, 2022 @03:26PM (#31087725)
Why wouldn't you call it lying?
Re:De-AMP: Cutting out Google and enhancing privacy by glatisaint on Tuesday April 19, 2022 @03:45PM (#31088016)
Because it was the truth at the time.
Re:De-AMP: Cutting out Google and enhancing privacy by scarface74 on Tuesday April 19, 2022 @03:33PM (#31087851)
Apple “cares about the web” and wants people to use the web because Google pays them $12 billion+ a year to be the default search engine.

Most of the money Apple gets from the App Store is from pay to win games - north of 80%. It came out in the Epic Trial.

Apple doesn’t really care if your banking app is a website or an app. They don’t make money either way.

Most apps on the App Store that could be a web app don’t charge users.

Re:De-AMP: Cutting out Google and enhancing privacy by s17n on Tuesday April 19, 2022 @04:42PM (#31088791)
The more native apps you use, the stickier the ios platform is. To the extent that they don't care whether you use the web or not, it's only because they've already won in the markets that they care about and don't really view Android as a serious threat anymore.
Re:De-AMP: Cutting out Google and enhancing privacy by scarface74 on Tuesday April 19, 2022 @04:56PM (#31088999)
Every single app on my phone besides Overcast (the podcast player) has an Android version. Hardly any non game app developer creates apps for iOS only.

Not only that, the data for those apps are on a remote server that is accessible via any other platform. Even when an app uses the standard file picker, you can choose any installed cloud storage device to save and load files - ie iCloud, Dropbox, Google Drive etc.

Re:De-AMP: Cutting out Google and enhancing privacy by lern_too_spel on Tuesday April 19, 2022 @03:47PM (#31088034)
Apple gets at least $99 per year plus device sales and usage data if it's an app. They also get to sell App Store ads to competing banks.
Re:De-AMP: Cutting out Google and enhancing privacy by scarface74 on Tuesday April 19, 2022 @04:39PM (#31088763)
$99 a year is a nothingburger. It wouldn’t even move the needle enough to motivate them. That’s not even pure profit.

But the money they make on ads in the App Store has to pale in comparison to how much they get from Google

Re:De-AMP: Cutting out Google and enhancing privacy by searchableguy on Tuesday April 19, 2022 @05:12PM (#31089245)
Apple said there are 20 million registered developers in 2018.

Now there must be more but $99 * 20 million is not nothing in annual revenue which is mostly profit.

Re:De-AMP: Cutting out Google and enhancing privacy by brokencode on Tuesday April 19, 2022 @07:52PM (#31090937)
When their annual revenue is $368 billion and their net income is $95 billion (in 2021), a couple hundred million dollars doesn’t really move the needle.
Re:De-AMP: Cutting out Google and enhancing privacy by hackerfromthefu on Wednesday April 20, 2022 @11:38AM (#31098504)
off by an order of magnitude. 20 million by $99 is 2 billion, which is >4% of the net income.
Re:De-AMP: Cutting out Google and enhancing privacy by scarface74 on Wednesday April 20, 2022 @12:57PM (#31099822)
Which is still not accurate, most “registered developers” aren’t “paying developers”.

If you have a company with 100 iOS developers, you only need to pay for one account that has permission to submit an app.

If you are exclusively a Mac developer, you don’t have to pay anything unless you are submitting to the Mac App Store.

Re:De-AMP: Cutting out Google and enhancing privacy by scarface74 on Tuesday April 19, 2022 @06:59PM (#31090492)
App review, XCode, each app gets a certain amount of iCloud storage outside of what the user pays, bandwidth, etc.

A “registered developer” is not necessarily a “paying developer”, you can register as a developer to get documentation etc.

If you are working for a company creating an app, not all developers need to pay to publish an app. Also Mac developers don’t pay to distribute an app.

Re:De-AMP: Cutting out Google and enhancing privacy by TedDoesntTalk on Tuesday April 19, 2022 @05:14PM (#31089294)
> nothingburger

What the heck is a nothingburger?

Re:De-AMP: Cutting out Google and enhancing privacy by lupire on Tuesday April 19, 2022 @02:35PM (#31087036)
For news, the common AMP use case, Apple uses Apple News news.apple.com as their version of AMP hijacking websites.

It's not a paid app, just part of the walled garden experience.

Re:De-AMP: Cutting out Google and enhancing privacy by enos_feedler on Tuesday April 19, 2022 @02:17PM (#31086768)
Glad you’ve talked with leadership there and can confirm what many suspect but can’t prove
Re:De-AMP: Cutting out Google and enhancing privacy by admax88qqq on Tuesday April 19, 2022 @02:45PM (#31087206)
Fine, allow me to rephrase

Based upon their actions I don't believe that Apple cares about the web beyond the bare minimum they have to to provide a tolerable browser experience for their users until everything happens via Apps.

Re:De-AMP: Cutting out Google and enhancing privacy by enos_feedler on Tuesday April 19, 2022 @08:16PM (#31091148)
What have other browser makers done, beyond the status quo that has demonstrated a browser experience that is beyond tolerable, perhaps even good?
Re:De-AMP: Cutting out Google and enhancing privacy by pid-1 on Tuesday April 19, 2022 @03:03PM (#31087419)
Understanding how a company makes money will tell you a lot more than talking with any leader

That's even more true for publicly traded companies

Re:De-AMP: Cutting out Google and enhancing privacy by scarface74 on Tuesday April 19, 2022 @03:34PM (#31087872)
Apple makes money on games with in app purchases. Not random apps that don’t charge users on the phone.
Re:De-AMP: Cutting out Google and enhancing privacy by nixass on Tuesday April 19, 2022 @02:21PM (#31086833)
Is it brown in there?
Re:De-AMP: Cutting out Google and enhancing privacy by nomel on Tuesday April 19, 2022 @03:40PM (#31087953)
> I’m surprised that Apple doesn’t have a desire to play this role.

They're being paid handsomely, by Google:

> In 2020, The New York Times reported that Apple receives an estimated $8-12 billion per year in exchange for making Google the default search on its devices. According to one analyst, Google's payment to Apple in 2021 to maintain this status quo may have reached up to $15 billion.

1. https://www.macrumors.com/2022/01/05/google-pays-apple-stay-...

Re:De-AMP: Cutting out Google and enhancing privacy by mdavidn on Tuesday April 19, 2022 @05:15PM (#31089300)
AMP pages consume less power (thus battery life) on Apple's mobile devices.
Re:De-AMP: Cutting out Google and enhancing privacy by nostromo on Tuesday April 19, 2022 @03:15PM (#31087547)
Apple is disincentivized to take this on.

Apple sells ads on search indirectly via Google. (Google pays Apple to be the default search engine.)

Google’s payment to Apple is bigger than the revenue Apple makes from the Apple Watch.

Re:De-AMP: Cutting out Google and enhancing privacy by 1propionyl on Tuesday April 19, 2022 @02:13PM (#31086718)
Apple does not offer an equivalent tool, however as of iOS 13, the system hooks exist for one to be implemented. In particular, there is Christian Selig's Amplosion (same author as the Apollo Reddit client)[1], which works quite well. Costs a few dollars up front, but well worth it.

There is sadly not a version or equivalent on macOS, but Christian has confirmed it is in-development.

[1] https://apps.apple.com/us/app/amplosion-redirect-amp-links/i...

P.S. Pairs well with PiPifier to bypass YouTube not allowing picture-in-picture or playing in the background without a subscription, and a good ad blocker.

Re:De-AMP: Cutting out Google and enhancing privacy by dexterdog on Tuesday April 19, 2022 @02:33PM (#31087019)
Why don't people just use a redirect extension and redirect ^https?:\/\/(.)(\/amp\/|\?amp|\?amp=.)$ to https://$1
Re:De-AMP: Cutting out Google and enhancing privacy by lupire on Tuesday April 19, 2022 @02:36PM (#31087067)
Because that only works in browsers with extensions, and extensions are yet another third party to trust.
Re:De-AMP: Cutting out Google and enhancing privacy by dexterdog on Tuesday April 19, 2022 @10:31PM (#31092117)
Who doesn't use a browser with extensions? And it's open source. It's not phoning home.
Re:De-AMP: Cutting out Google and enhancing privacy by GuB-42 on Tuesday April 19, 2022 @06:26PM (#31090166)
I didn't experience anything you described with AMP pages. Generally, I find AMP pages to be among the best by news site standards, which I agree are pretty low.

I never understood why AMP gets so much hatred from end-users. I understand why publisher hate it (it takes away control), and I understand the monopoly concerns, but for me, as an end-user, 99% of the times, the AMP version is better: faster, with less of the annoyances you described. As for privacy, these 99% are loaded with Google ads and analytics anyways, so not much of a win there. I don't know what your configuration is, what kind of ad-blockers you are using, but I never met the horrors people make AMP to be.

And sure enough, there are sites that are better than any AMP sites, but these almost never have an AMP version. So for me, AMP makes terrible sites a little less terrible, and good sites unchanged.

Re:De-AMP: Cutting out Google and enhancing privacy by stephen_g on Wednesday April 20, 2022 @12:18AM (#31092754)
The problem I have is that I've never found AMP pages to be any better or particularly faster (I guess the news sites I use were already fairly well optimised, but also I always use ad and tracker blocking so I'm not slowed down by any of that crap).

But AMP pages are often worse - things like getting cut-down pages with the normal navigation missing or stuff like that. And it breaks URL sharing - if I want to share a link, I just want the regular link, not one with AMP crap in it, but often cutting out the AMP part to try and reconstruct the original URL just doesn't work...

So I've never found it better but only worse, so understandably it just annoys me. If it is just that my tracking and ad blocking is making all the difference, then AMP clearly isn't actually solving the actual issue...

Re:De-AMP: Cutting out Google and enhancing privacy by kemotep on Tuesday April 19, 2022 @07:12PM (#31090603)
I do not like AMP sites because it hijacks my back button in the browser and I have to hit back several times to maybe make it back to the page I was on before clicking the link to an AMP site.

If it did not do that I could care less.

Re:De-AMP: Cutting out Google and enhancing privacy by gzer0 on Tuesday April 19, 2022 @07:05PM (#31090544)
> I understand why publisher hate it (it takes away control), and I understand the monopoly concerns

And here lies the problem. Eventually, these two 'annoyances' will become much bigger than that. The biggest threat, imo, is that these will lead to news organization, journalists, and credible publishers to eventually close up shop as they receive less of the share of revenues.

I do agree with your point about AMP sites generally being a much smoother experience. But at what cost?

Re:De-AMP: Cutting out Google and enhancing privacy by agilob on Tuesday April 19, 2022 @01:25PM (#31086099)
Brave is doing for us all the things Mozilla promised
Re:De-AMP: Cutting out Google and enhancing privacy by dralley on Tuesday April 19, 2022 @01:32PM (#31086174)
And a lot of other shaddy things that Mozilla has never done, like the affiliate link hijacking (which yes, was supposedly a "bug" but you have to admit that it's an awfully convenient "bug"), and setting up crypto wallets for content creators without solicitation and then collecting money on their behalf.
Re:De-AMP: Cutting out Google and enhancing privacy by celsoazevedo on Tuesday April 19, 2022 @02:24PM (#31086879)
Maybe it's because I use Brave (as a "Chrome with less Google" and with all the crypto stuff disabled), but when I look at the "shady things" they've done, it doesn't look that shady:

- The affiliate link "hijacking" was - if I remember correctly - to sites of crypto companies that partner with them. I'd prefer if this didn't happen, but most seem to be fine when other browsers (Safari, Firefox, etc) add something like "?client=safari" when searching or when their search engine (eg: DDG) use affiliate links to sites like Amazon or Ebay. It's not a new thing.

- The money collection (brave rewards)... if one doesn't understand how the system works, it looks like they are stealing money... but the money is returned to the sender after a while if the website/creator doesn't claim it. Is this that bad?

And then there's them not blocking some trackers (Google, Facebook, etc) by default, but if they did, they would break logins on many websites.

Maybe all this is bad, but I'm not sure if there's any browser out there without a history of shady behaviour. Even Mozilla has messed up a few times.

Re:De-AMP: Cutting out Google and enhancing privacy by dralley on Tuesday April 19, 2022 @02:50PM (#31087258)
>The money collection (brave rewards)... if one doesn't understand how the system works, it looks like they are stealing money... but the money is returned to the sender after a while if the website/creator doesn't claim it. Is this that bad?

I don't think anyone ever accused them of stealing that money, but yes, hijacking people's personal brands to collect money without their explicit knowledge is a bad thing.

Imagine if I saw the icon and gave "them" money via Brave instead of joining their Patreon or some other official channel that they explicitly set up. If they don't collect, then yes, I might get my money back - nothing was "stolen". But that was money I wanted to send to the content creator in that particular moment, and that creator will probably never see it. The creator got screwed out of money that otherwise would have gone to them.

Re:De-AMP: Cutting out Google and enhancing privacy by jonathansampson on Tuesday April 19, 2022 @03:36PM (#31087905)
Please see the second half of this response: https://news.ycombinator.com/item?id=31086397.

Imagine I presented you with $10 (from my own pocket), and asked you where it should be spent. You told me "Doc's Pub, over on 9th." So I walked over to Doc's Pub, but found them to be closed. So I waited outside for a few hours, just incase they opened up. I later went home and wrote down "try to spend $10 at Doc's tomorrow."

Brave staked users with BAT (from our token sale). Users could direct that BAT to the sites/properties of their choosing. The BAT then went into an omnibus settlement wallet (note: the BAT originated in one Brave wallet, and was sent to another Brave wallet).

There was no hijacking of brands, or anything of that nature. I would encourage you again to please visit the aforementioned link. In it I mention our blog post on the topic, which includes screenshots and more. I hope this helps!

Re:De-AMP: Cutting out Google and enhancing privacy by w0ts0n on Tuesday April 19, 2022 @03:34PM (#31087869)
>hijacking people's personal brands to collect money without their explicit knowledge is a bad thing.

Brave gave users BAT to tip content creators. They tipped it, if it wasn't claimed in 90d, Brave returned the BAT to the pool. There was no collecting money. It was Brave's promotional BAT and it never actually left Brave's possession unless claimed.

The issue was that it wasn't clear if the creator had or hadn't signed up. Which was fixed within 48h.

Re:De-AMP: Cutting out Google and enhancing privacy by celsoazevedo on Tuesday April 19, 2022 @04:39PM (#31088756)
Maybe the problem is the way it used to work and not so much how it works right now? Things seem to have changed a bit.

At least for websites I have to manually click the Brave Rewards icon (wasn't prompted to do it on a new profile) and it shows if the site is verified or not:

- My personal website (verified): https://i.imgur.com/WZykI2U.png

- Google[.]com (unverified): https://i.imgur.com/89XvzIz.png

And if we hover over the "unverified creator" text, this is displayed: https://i.imgur.com/IfKQUME.png

I guess the right way to do this is to only allow tips/donations for websites already verified... still, if you're going to use Brave Rewards, you probably have an idea of how it works.

Maybe things are different for creators on platforms like YouTube? I don't know how it works. I couldn't find a way to make a direct contribution with Brave Rewards.

Re:De-AMP: Cutting out Google and enhancing privacy by yjftsjthsd-h on Wednesday April 20, 2022 @03:35AM (#31093866)
> And then there's them not blocking some trackers (Google, Facebook, etc) by default, but if they did, they would break logins on many websites.

Then what should they do? It sounds like they're between a rock and a hard place

Re:De-AMP: Cutting out Google and enhancing privacy by celsoazevedo on Wednesday April 20, 2022 @10:56AM (#31097875)
Since they want to be a mainstream browser, allowing those by default (that's what they do now) is the way to go in my opinion. The option to block them is available for more advanced users.

This is only a "problem" for some because they think Brave is actually siding with those services, when in reality there's a good reason to not block them by default.

Re:De-AMP: Cutting out Google and enhancing privacy by BrendanEich on Tuesday April 19, 2022 @04:28PM (#31088604)
You wrote "link" which is an element in a page, but we never "hijacked" or rewrote any such URL-bearing element. (We do for De-AMP, now.) Please dont fall for such lies about us couched as "link hijacking".

https://news.ycombinator.com/item?id=31088549

Re:De-AMP: Cutting out Google and enhancing privacy by xtat on Tuesday April 19, 2022 @05:02PM (#31089108)
This is the thing everyone always points to when they hand wave "a lot of other shady things" - not sure why folks generally like to FUD Brave. I was working there when this issue happened and it was a very big deal internally and was patched immediately. FWIW I got zero hint that this was some kind of shady thing someone would have been trying to sneak in.
Re:De-AMP: Cutting out Google and enhancing privacy by hackerfromthefu on Wednesday April 20, 2022 @11:41AM (#31098568)
Follow the money, there's serious money pitted against Brave.

Grassroots users should support it like the godsend it is.

Re:De-AMP: Cutting out Google and enhancing privacy by tempest_ on Tuesday April 19, 2022 @01:52PM (#31086448)
People around here love to pile on Mozilla for every perceived slight or misstep but they rarely have any ideas on how Mozilla is supposed to fund itself.

Some of the ire is earned but I have yet to see how Mozilla is supposed to fund Firefox development without that google search bar.

Re:De-AMP: Cutting out Google and enhancing privacy by vasco on Tuesday April 19, 2022 @02:15PM (#31086750)
For starters Mozilla could operate with a much smaller footprint, much less projects in parallel and less vanity projects. That would reduce the amount of money required by a lot, which is the big problem in the first place.

Developing a browser isn't easy and requires a few teams of developers, but in 2020 it spent 242 million dollars in software development costs, 137 million dollars in administrative costs and 37 million dollars in marketing and branding costs. I don't live in a lala land where I think you can develop a browser for free, but I think we can all agree that you don't need to spend this amount of money on it either. Are 100 developers enough? 200? How much does that cost? Do they all need San Francisco salaries to develop a good browser?

In terms of funding, they got 440 million dollars from royalties (what they get from setting default search engines on their browser) and 25 million dollars in subscription revenue (Pocket and VPN subscriptions type things - products they actually sell).

Now, can you develop a browser on 25 million dollars per year? Maybe it's cutting it short, but for sure there could be a strategy to invest more on this side of the equation to phase out the need to be Google's bitch in a more intentional way.

Source: https://assets.mozilla.net/annualreport/2020/mozilla-fdn-202...

Re:De-AMP: Cutting out Google and enhancing privacy by mattnewton on Tuesday April 19, 2022 @02:29PM (#31086963)
> Are 100 developers enough? 200? How much does that cost?

100-200 developers probably roughly costs on the order of 25-50 million a year (assuming a made up number of 250k fully loaded cost with benefits and taxes, which might be lower or higher than their average, idk. This number seems almost too conservative to my gut). From this back of the envelope math, I don't think the royalties business is enough to support the development cost alone.

> Do they all need San Francisco salaries to develop a good browser?

If you don't want them to leave to work on safari or chrome, probably? This experiment was more or less tried by opera, right?

Brave gets away with a lot lower overhead by bascially piggybacking off chrome. Opera similarly gave up selling their own browser engine and cut their development teams while switching to another wrapper on blink. Firefox could become yet another skinning of blink and chrome code, but it's not clear to me how that's helping them with being "Google's bitch in a more intentional way".

I think there are problems with Mozilla's side project expenditures, there is definitely some bloat, and they have had some expensive failures like Firefox phone. However I don't think Mozilla could have survived without Google's funding and people vastly underestimate how expensive quality software is.

Re:De-AMP: Cutting out Google and enhancing privacy by agilob on Tuesday April 19, 2022 @02:38PM (#31087097)
>Brave gets away with a lot lower overhead by bascially piggybacking off chrome

Chromium get contributions from a few big companies, why couldn't Mozilla create a "contributor community group" something like Java has? Oracle keeps control over Java but there is a democratic process on what gets into Java/JDK. At some point Samsung was contributing to servo when it still was experimental.

Re:De-AMP: Cutting out Google and enhancing privacy by TedDoesntTalk on Tuesday April 19, 2022 @06:19PM (#31090092)
> why couldn't Mozilla create a "contributor community group" something like Java has?

Mozilla regularly accepts code from unpaid community members and has since its inception.

Re:De-AMP: Cutting out Google and enhancing privacy by agilob on Wednesday April 20, 2022 @01:47AM (#31093308)
>Mozilla regularly accepts code from unpaid community members and has since its inception.

Yes, so it Java and Google and Microsoft... you're still missing the point I made there. Make Servo a cross-company product serving more than just Firefox. More companies contribute to it, lower costs of development.

Re:De-AMP: Cutting out Google and enhancing privacy by GekkePrutser on Tuesday April 19, 2022 @08:34PM (#31091303)
There's good developers living in regions where 50k is a really excellent salary. Even 100k. I agree with the parent poster that SF salaries are crazy for a product like this.
Re:De-AMP: Cutting out Google and enhancing privacy by mattnewton on Wednesday April 20, 2022 @12:30AM (#31092827)
Even 100k salary is like 130k with benefits and taxes, so 200 developers takes out 26 million, above the subscription revenue without counting for any overhead like infrastructure, ops and administration. And below 100k, I think you will struggle to hire enough with the skills you need, browser dev is hairy and hard, and you are competing against an extremely well funded project in Chrome.

I don't doubt there are developers being paid peanuts with more talent than I will ever see, but I haven't seen them and I know a lot of people spending a lot of money looking, which suggests to me they are rare and hard to build a team out of.

And if they found them, and they fired all the senior bay area folks and rehired these 100k developers tomorrow, are those developers experienced writing fault tolerant c++ in a multi-decade codebase? And if so, how many will relocate or take remote jobs for way higher salaries after a couple years? Google, Amazon and Microsoft would be happy to have them and pay 300k+ TC for those skills, as well as countless banks and fintech firms.

Re:De-AMP: Cutting out Google and enhancing privacy by GekkePrutser on Wednesday April 20, 2022 @05:21AM (#31094463)
I was considering 100k including everything :)

Here in Spain (which is a first-world country :) a good dev would make about 50k or so..

I think the Silicon Valley area has really skewed expectations of salary (and of course living expenses!). Familiarity with codebase is a problem indeed, but they could start setting up a hub somewhere in Europe.

I think part of the problem is that when they incorporated Mozilla they started thinking as a corporation. Multi-million-dollar-paid CEOs, top-heavy with marketing etc. They should have stayed nonprofit IMO.

Re:De-AMP: Cutting out Google and enhancing privacy by vasco on Tuesday April 19, 2022 @02:52PM (#31087284)
> From this back of the envelope math, I don't think the royalties business is enough to support the development cost alone.

Did you mean subscription business? Like I mentioned, the royalties were 440 million which is way larger than 25-50. If you put 200 developers on this project, with fully loaded costs of 400k / year each, that's 80 million dollars per year. You add 20 million dollars for administrative and other expenses and we come to 100 million dollars per year burn rate.

In 2020 they made ~25M on subscriptions, if 50 of the 200 developers focus on improving the subscription business, at the current rate of growth they had from 2019-2020, in a few years they could totally phase out of needing royalties at all to cover their $100M / year expenses, with 200 developers earning competitive salaries.

Re:De-AMP: Cutting out Google and enhancing privacy by mattnewton on Tuesday April 19, 2022 @05:04PM (#31089135)
Yes, sorry, I meant non-royalties business. I don't believe the kind of growth you mentioned is likely, but maybe I am missing things about their business. I think they bet big on diversifying with other initiatives like Firefox phone that just didn't hit, lots of browser things like you were talking about.
Re:De-AMP: Cutting out Google and enhancing privacy by agilob on Tuesday April 19, 2022 @02:10PM (#31086679)
In 2013/2014 when Snowden started whiste-blowing we were hoping for Mozilla to monetize privacy, but they never did. They only recently made some very poor attempts at private email, VPN and integrated some DoH. They were very hesitant for any cryptocurrencies integration. I would be happy to pay for a serious VPN and email service (remember Mozilla owns Thuderbird) with promises like Tutanota or Proton have. They could have acquired them, but instead they acquired pocket. Mozilla had the perfect brand and enough userbase to do it. Mozilla started doing that work 5-7 years too late and did too little to be meaningful. I feel they are doomed now and their space is shrinking and there's no future for Firefox in the long term.

There's a lot that can be added here:

Mozilla promised to opensource pocket server and never did.

They promised to hire someone full-time for Thunderbird, but never did. afair there is a German company that has full-time developer working on Thuderbird.

They promised a VPN... yes, delivered something.

They promised anonymous email, I know they were giving access by invites, but nothing more about it.

They promised to unfork Tor browser and integrate Tor into Firefox, they were even running a few Tor nodes.

Remember how hyped everyone here was for Servo in Firefox and electron competitor?

MDN could have integration with GH or GL and educational content for web development, they literally had resources, brand and ability to join an online university and give degrees or at least serious bootcamps. Mozilla was a meaningful brand to do it.

They had a lot of opportunities to sell privacy, we literally demanded it from them, but they weren't interested in listening. Instead they delivered 6 rebrands each breaking my muscle memory.

Do you remember how they advised EU to regulate monopoly on the webbrowser market? There was time when they had all ability, but 0 will to keep it this way https://en.wikipedia.org/wiki/BrowserChoice.eu

Re:De-AMP: Cutting out Google and enhancing privacy by kyleee on Tuesday April 19, 2022 @04:44PM (#31088819)
on the other hand, colorways
[dead]
Re:De-AMP: Cutting out Google and enhancing privacy by agilob on Tuesday April 19, 2022 @03:57PM (#31088169)
wow this escalated so fucking fast i have no idea what happened
Re:De-AMP: Cutting out Google and enhancing privacy by Terry_Roll on Wednesday April 20, 2022 @11:27AM (#31098328)
Not really, its just the epitome of blagging which is criminal!
Re:De-AMP: Cutting out Google and enhancing privacy by blihp on Tuesday April 19, 2022 @02:11PM (#31086690)
By not spending the >$1 billion they've taken in over the last decade as fast as they got it. A billion+ is a ton of money in the open source world and had they been responsible stewards they would have been able to fund development for a very long time without short term funding concerns. The fact that they've pissed away every cent taken in is their problem.
Re:De-AMP: Cutting out Google and enhancing privacy by devmunchies on Tuesday April 19, 2022 @02:10PM (#31086667)
> they rarely have any ideas on how Mozilla is supposed to fund itself

If we’re talking about the Mozilla foundation, they should seek donations and grants and focus on being the best user web tooling.

If we’re talking about the corp, they could’ve kept rust under the umbrella and pioneered the WASI runtime and built an alternative to k8s that runs webassemblies and built out a paid cloud infra.

It doesn’t make sense to have a foundation that is user aligned and a corp that is user hostile. There should be aligned incentives.

Re:De-AMP: Cutting out Google and enhancing privacy by wintermutestwin on Tuesday April 19, 2022 @03:27PM (#31087738)
>how Mozilla is supposed to fund itself.

1. Stick to building a more private browser

2. Become a non-profit or Benefit Corp

3. Fund #1 through all of us donating and encouraging our less tech savvy connections to use it and donate

Re:De-AMP: Cutting out Google and enhancing privacy by drath on Tuesday April 19, 2022 @04:15PM (#31088410)
1. Why focus on privacy? The niche is already taken by brave 2. To do so, they'd have to drop their half-billion default search engine deals 3. Currently, the donation figure is about $20mil. They'd have to somehow additionally collect $1.5 from every single user annually to prevent layoffs.
Re:De-AMP: Cutting out Google and enhancing privacy by account42 on Thursday April 21, 2022 @06:48AM (#31107846)
> 2. To do so, they'd have to drop their half-billion default search engine deals

Yes, that is part of the reason why they should be a non-profit - sot that they can work for the public good and not for the good of their corporate sponsor.

> 3. Currently, the donation figure is about $20mil.

Donation figure for what? Currently you CANNOT donate towards Firefox development.

Re:De-AMP: Cutting out Google and enhancing privacy by drath on Thursday April 21, 2022 @08:15AM (#31108450)
> Donation figure for what? Currently you CANNOT donate towards Firefox development.

To Mozilla foundation. Most people I heard donating to them don't realize their money aren't and couldn't be put into Firefox development.

Re:De-AMP: Cutting out Google and enhancing privacy by GekkePrutser on Tuesday April 19, 2022 @08:40PM (#31091350)
It's not a small niche. It can be shared with Brave.

And Brave has things that not everyone likes like the bat token stuff. And chromium.

Re:De-AMP: Cutting out Google and enhancing privacy by account42 on Thursday April 21, 2022 @06:52AM (#31107870)
> 3. Fund #1 through all of us donating and encouraging our less tech savvy connections to use it and donate

They could also try to seek government funding. EU and other non-US countries should have an interest in there being a browser that is not beholden to a US for-profit corporation.

Re:De-AMP: Cutting out Google and enhancing privacy by roughly on Tuesday April 19, 2022 @03:32PM (#31087828)
It'd be a nice start if they'd let me give them money for their product.
Re:De-AMP: Cutting out Google and enhancing privacy by wussboy on Wednesday April 20, 2022 @12:06AM (#31092698)
I say this every time it comes up. I would happily pay $5/month for a “platinum” branded Firefox browser if that $5 would go to support development costs. I’d love to have other people see it when I share my screen both inside and outside my organization.
Re:De-AMP: Cutting out Google and enhancing privacy by GekkePrutser on Tuesday April 19, 2022 @08:38PM (#31091341)
Indeed.

And something like apple's iCloud relay. I would pay for that.

I won't pay for a Mullvad subscription that's less useful than actual Mullvad because it just works in the browser and it doesn't fix all the issues iCloud relay solves.

If they'd sell actual privacy features I'd pay for it totally. Sync too.

Re:De-AMP: Cutting out Google and enhancing privacy by hackerfromthefu on Wednesday April 20, 2022 @11:44AM (#31098618)
This has been done to death in other threads.. mozilla's raison d'etre today is as a lighting rod to prevent real competition to google. Follow the money, and why the mozilla ceo gets big bucks for performance that's against mozilla's public goals - they are instead meeting mozilla's private goals.

Your raising a discussion about mozilla in a brave thread plays right into mozilla's purpose of muddying the waters for actual competition against google. Please don't derail brave discussions with off topic stuff.

Re:De-AMP: Cutting out Google and enhancing privacy by MomoXenosaga on Thursday April 21, 2022 @07:57AM (#31108313)
You can use the same reasoning for why Google is happy with "competition" from Chromium based browsers.
Re:De-AMP: Cutting out Google and enhancing privacy by modo_mario on Wednesday April 20, 2022 @05:31AM (#31094516)
It would help if they didn't increase the board and leadership compensation and spend loads of money on social justice projects whilst at the same time cutting on development as their footprint on the browser market keeps shrinking.

Sure it's probably not going to make it but they're still not things they can sensibly afford to do.

Re:De-AMP: Cutting out Google and enhancing privacy by jonathansampson on Tuesday April 19, 2022 @01:49PM (#31086397)
Heads up: I work at Brave. As such, I encourage you to check my claims, verify my sources, and don't take anything I say for granted. Always happy to provide more context as needed :)

Firefox literally sends your keystrokes to Google, right out of the box. Brave, however, was found to be the most private popular browser by reputable researchers: https://www.scss.tcd.ie/Doug.Leith/pubs/browser_privacy.pdf.

Brave [never] hijacked links either. Affiliate Links were offered among suggested sites for relevant search input. So if you searched "Binance," the browser would offer (among other suggestions), an affiliate link for the site. Users could then choose to browse to the property with the affiliate link, and in so doing support the development of Brave. No impact to privacy or security at all.

The mistake here was with input handling. Built to handle search input, this feature also mistakenly handled fully-qualified domains. While we intended the app to offer affiliate links (when relevant) to something like "what is binance?", it was also offering them for "binance.us". The latter case was corrected quickly (and the feature itself was disabled out of the box).

More about that on our blog: https://brave.com/referral-codes-in-suggested-sites/.

To your second point, about setting up crypto wallets and soliciting donations on behalf of non-participating publishers, you're mistaken there as well.

To prime the support-system in Brave (called Brave Payments at the time), we staked Brave users with tokens, inviting them to direct those tokens to creators they would like to support. More clearly, Brave gave Brave users say over where Brave ought to direct its own tokens.

Unfortunately, our UI/UX wasn't very clear about which creators were verified, and which were not (we followed the Twitter approach, marking verified creators with a checkmark, but doing nothing for others). This resulted in some confusion at the end of 2018, where users were directing Brave's tokens to non-participating creators (most notably Tom Scott).

We received considerably helpful feedback about how the system could be improved (both from a UI/UX side, and operationally). Frankly, I don't think I've ever seen our team work so hard, and churn out such a monumental update in so little time. We had made massive changes within 48 hours IIRC. Creators were explicitly marked as verified or unverified in all cases, the BAT that Brave stakes with users would remain in the local wallet until it could be received by a verified creator. And BAT that sat pending for 90 days would be unlocked again for the user to direct elsewhere.

Tom Scott was kind enough to review our changes, and explicitly gave us his approval soon-thereafter. What is now 'Brave Rewards' wouldn't be doing so well today were it not for Tom and so many other incredible users helping us find the best path forward.

More about that on our blog: https://brave.com/rewards-update/

Re:De-AMP: Cutting out Google and enhancing privacy by BeefWellington on Tuesday April 19, 2022 @09:57PM (#31091883)
> Firefox literally sends your keystrokes to Google, right out of the box.

This is a touch of FUD. Firefox sends what you type into the search/address bar to google for search suggestions by default, yes. Your perhaps unintended implication here is that all keystrokes are being logged and sent to google.

> Brave, however, was found to be the most private popular browser by reputable researchers: https://www.scss.tcd.ie/Doug.Leith/pubs/browser_privacy.pdf.

This is a bit of a misstatement of the research; Rather they found that Brave doesn't tag users' installs with persistent IDs by default in startup telemetry or update requests, while most of the rest of the competition do. This means Brave has a superior initial privacy state but says nothing about the overall usage posture. Is it better? Possibly but that's not the conclusion the researchers actually came to.

Here's an example of why the first line of FUD is dangerous: "Brave's BAT is basically just a way for users to be tracked as they go about navigating the web."

This is an easy throw-away statement with little substance and likely little to no truth behind it.

A more concrete example might be that the so-called "Privacy Preserving Product Analytics API" that collects data on Brave users' installs gets enough data to pretty easily fingerprint a user if you wanted to. You don't need many data points to identify an individual from a large group.

Re:De-AMP: Cutting out Google and enhancing privacy by agilob on Tuesday April 19, 2022 @01:52PM (#31086445)
Not that I'm downplaying your points, but please next time start a comment saying you're working for Brave ;)
Re:De-AMP: Cutting out Google and enhancing privacy by jonathansampson on Tuesday April 19, 2022 @01:55PM (#31086487)
Good point. On Twitter my name is "BraveSampson," and I often forget that isn't the case here as well. FWIW, I'm Sampson, and I work in Developer Relations at Brave. I have that in my bio here, to help a bit.
Re:De-AMP: Cutting out Google and enhancing privacy by dave5104 on Tuesday April 19, 2022 @02:31PM (#31086991)
> On Twitter my name is "BraveSampson,"

It doesn't look like this is the case, fwiw. (Unless your HN profile lists an outdated handle?)

Re:De-AMP: Cutting out Google and enhancing privacy by jonathansampson on Tuesday April 19, 2022 @02:37PM (#31087092)
Nice catch! I was referring to https://twitter.com/BraveSampson/. Profile updated.
Re:De-AMP: Cutting out Google and enhancing privacy by benatkin on Tuesday April 19, 2022 @02:35PM (#31087042)
> Firefox literally sends your keystrokes to Google, right out of the box.

Keystrokes in the URL bar.

Re:De-AMP: Cutting out Google and enhancing privacy by nocman on Tuesday April 19, 2022 @04:21PM (#31088489)
Yeah, I don't like that this is the default, but "Firefox literally sends your keystrokes to Google" could easily be interpreted by many people to mean all of your keystrokes (not just the ones typed in the URL bar).

It would have been better to say "by default Firefox literally sends every keystroke you type in the URL bar to Google".

In my opinion it is a user-hostile "feature", and should be pointed out, but not in way that could be so wildly misinterpreted.

Re:De-AMP: Cutting out Google and enhancing privacy by benatkin on Tuesday April 19, 2022 @04:46PM (#31088846)
> In my opinion it is a user-hostile "feature", and should be pointed out, but not in way that could be so wildly misinterpreted.

I agree. I don't like a lot of what Mozilla does but I don't like Brave at all, so I'll gladly defend Mozilla against hyperbole coming from Brave. Brave isn't even a browser, so I just ignore it most of the time.

Re:De-AMP: Cutting out Google and enhancing privacy by bduerst on Tuesday April 19, 2022 @03:02PM (#31087403)
Which is how instant search works, right?

Describing the cost without explaining the why is really putting a spin on things.

Re:De-AMP: Cutting out Google and enhancing privacy by freeplay on Tuesday April 19, 2022 @02:53PM (#31087297)
It can also be disabled in preferences if you don't like that functionality.
Re:De-AMP: Cutting out Google and enhancing privacy by taneq on Wednesday April 20, 2022 @08:40AM (#31095992)
Keep an eye on it though because they periodically re-enable it for you. So helpful.
Re:De-AMP: Cutting out Google and enhancing privacy by lupire on Tuesday April 19, 2022 @02:41PM (#31087151)
I appreciate this respectful, thorough, evidence-backed response to criticism that makes claims you dispute. It's so rare on HN and the wider world.
Re:De-AMP: Cutting out Google and enhancing privacy by pmurt7 on Tuesday April 19, 2022 @02:21PM (#31086834)
Mozilla faces blowback after slipping Mr Robot plugin into Firefox:

https://www.theverge.com/2017/12/16/16784628/mozilla-mr-robo...

Re:De-AMP: Cutting out Google and enhancing privacy by reflexco on Tuesday April 19, 2022 @02:56PM (#31087334)
Except building the only modern alternative rendering engine on desktop, which is necessary to keep web standards serving the users instead of Google!
Re:De-AMP: Cutting out Google and enhancing privacy by coldpie on Tuesday April 19, 2022 @01:36PM (#31086220)
I like having more than one browser engine in the world, but I do hope Brave pushes Mozilla to do more.
Re:De-AMP: Cutting out Google and enhancing privacy by alanh on Tuesday April 19, 2022 @01:51PM (#31086428)
To be fair, Brave doesn’t really have their own browser engine (it’s Chromium), but it is good to have browser choice, so I agree with the sentiment. (I am a Brave user.)
Re:De-AMP: Cutting out Google and enhancing privacy by devmunchies on Tuesday April 19, 2022 @02:15PM (#31086734)
Agree, but at least brave has the expertise and interests ($$) that if chromium goes off the rails, they could fork and maintain an alternative.
Re:De-AMP: Cutting out Google and enhancing privacy by wintermutestwin on Tuesday April 19, 2022 @09:01PM (#31091501)
Everytime I read this kind of hyperbole, I install Brave and try to replicate my Firefox browsing experience and realize that Brave/Chrome extensions suck. Specifically none come close to replicating the functionality of:

Multi-Account Containers

Temporary Containers

Sidebery

Re:De-AMP: Cutting out Google and enhancing privacy by wussboy on Wednesday April 20, 2022 @12:10AM (#31092713)
The triple threat that keeps me on Firefox. Can’t live without Sidebery
Re:De-AMP: Cutting out Google and enhancing privacy by MomoXenosaga on Thursday April 21, 2022 @07:50AM (#31108270)
Brave is a Chromium browser. Mozilla is still the only one fighting Google- and Apple with Safari I suppose.
Re:De-AMP: Cutting out Google and enhancing privacy by huhtenberg on Tuesday April 19, 2022 @01:36PM (#31086219)
There's an irony there somewhere. I can feel it.
Re:De-AMP: Cutting out Google and enhancing privacy by mulmen on Tuesday April 19, 2022 @03:55PM (#31088128)
> Getting AMP results from Google search has been one of the drivers leading me to switch to DDG, so congrats Google, one less customer.

It is a cliche but you are not Google’s customer. You are their product. If you don’t find AMP compelling they don’t want to serve you ads anyway.

Re:De-AMP: Cutting out Google and enhancing privacy by bbarnett on Tuesday April 19, 2022 @04:08PM (#31088308)
Yes, but less product is less profit, and they do want to sell you ads, AMP or not!

So yes, it is a loss for Google.

Re:De-AMP: Cutting out Google and enhancing privacy by mulmen on Tuesday April 19, 2022 @07:17PM (#31090651)
> but less product is less profit

Not all products are profitable.

Re:De-AMP: Cutting out Google and enhancing privacy by kingo55 on Tuesday April 19, 2022 @04:22PM (#31088502)
> sometimes weird actor

Like that time Brave replaced links to a site with their own affiliate links? Yeah, I no longer trust them.

Re:De-AMP: Cutting out Google and enhancing privacy by BrendanEich on Tuesday April 19, 2022 @04:25PM (#31088549)
That never happened. We never "replaced links".

The issue was about address bar input autocomplete for two domains, binance.us and binance.com, along with keywords which all browsers offer several possible autocompletions for, we autocompleted by default not just via dropdown suggestion, with referral code attribute identifying us (not the user) to Binance at end of domain name. We fixed this right away and made nothing off of it. But it was a blunder for sure.

Re:De-AMP: Cutting out Google and enhancing privacy by SquirrelOnFire on Tuesday April 19, 2022 @07:48PM (#31090896)
Mozilla's biggest source of revenue? Google. By about a factor of 5.
Re:De-AMP: Cutting out Google and enhancing privacy by hackerfromthefu on Wednesday April 20, 2022 @11:57AM (#31098833)
Mozillas real competitive threat to google - 0.

Mozillas effectiveness at diverting/absorbing/stopping other community initiatives that could actually impact google - worth the dollars from google's point of view.

Re:De-AMP: Cutting out Google and enhancing privacy by go_prodev on Tuesday April 19, 2022 @02:15PM (#31086733)
I generally trust the Brave folks, but have reservations about rewriting URLs becoming a new tool in their toolbox.

DDG sounds like a promising alternative.

Re:De-AMP: Cutting out Google and enhancing privacy by spicybright on Tuesday April 19, 2022 @02:31PM (#31087000)
I'm sure it just changes the URL bar so you can see what happens.

Regardless, it's already in their tool box because they make the browser.

They could be re-writing urls and not showing you, if they wanted to. And as long as no one notices, you can keep doing it.

Re:De-AMP: Cutting out Google and enhancing privacy by go_prodev on Tuesday April 19, 2022 @02:41PM (#31087155)
Good point. It also sounds better to build it in than having a browser extension for it.
Re:De-AMP: Cutting out Google and enhancing privacy by mastazi on Tuesday April 19, 2022 @02:51PM (#31087279)
> DDG sounds like a promising alternative

Unfortunately, switching to a different search engine does not prevent you from ever stepping onto AMP again. For example all links in the mobile version of Twitter used to be AMP until recently: https://www.theverge.com/2021/11/19/22791002/twitter-amp-ios...

Re:De-AMP: Cutting out Google and enhancing privacy by nocman on Tuesday April 19, 2022 @04:30PM (#31088633)
I suspect go_prodev is referring to the DDG app ( https://duckduckgo.com/app ) and not just the search engine.

I only recently became aware that the app existed, so I don't know how/if it deals with all things AMP-based.

Re:De-AMP: Cutting out Google and enhancing privacy by dheera on Tuesday April 19, 2022 @02:17PM (#31086770)
AMP sometimes helps me get past paywalls though.