It is strictly less privacy-preserving than not implementing this "feature" that has zero benefit to the user running the browser. At the very least it pings yet another third party, most likely it effectively leaks much more.
> The best objection to these proposals isn't privacy, it's that a browser vendor is lifting a finger for advertisers. I guess the fundamental question there is if we prefer to outright shut down online advertising, or give it the tools it needs to be less bad. Opinions differ, but all major browser vendors are in the latter category.
That is a very very generous assumption of the browser makers' goals. Particularily when one of them IS an online advertising company and another one is almost exclusively funded by said advertising company. They do not deserve the benefit of the doubt.
I myself do not like ads or tracking, but we need to be realistic and there needs a way to make web sustainable.
How to do that and making sure that monopolies like Google are in check is a valid concern though, but in these conversations is the only point I hear. Ironically Google does not even need these apis because it already has so much data on users, it is primarily for smaller companies.
I don’t think this is true. No one “needs” to make money. Museums don’t need to make money. OSS doesn’t need to make money.
The web has value without making money.
But even if it does make money, it doesn’t need to maximize profits at the expense of user privacy and joy.
I think there’s lots of software written by people who have jobs and code because it’s fun.
For example, Linus Torvalds made Subsurface [0] as open source. He had a job while he made this. He didn’t get paid for it directly, but it’s not like paying him extra would make it better.
It could be zero in some conditions, but in the other cases, I'm also against ads. Fortunately, there are other ways of making money, without compromising the "open source" / "free software" part:
- consulting (including prioritizing new features and fixes)
- support
- providing an actual paid service
- selling free software extensions (and yes, that means someone can recompile the extension and distribute it gratis - that's what happening with OSMAnd+ on F-Droid, but they are still doing fine)
Where do you get them for web?
Check out Wikipedia for an example of a huge site that doesn’t make money and just runs on donations.
I run my crappy blog and a bunch of other sites for “free” because I just pay the fees.
Commercial use of the internet was banned until 1991, it worked perfectly fine until then.
An example, look at TikTok or YouTube. 99.999% garbage, essentially clickbait farms, with zero valuable content.
Influencers? A plague. Political click bait videos? Harmful to democracy. Nutty flat earth, perpetual motion, conspiracy videos? Same.
The rest of the web is the same. Affiliate links are vile, evil things. And endless pages copy pasted to steal hits.
Monetization has destroyed the internet.
I'd much prefer people setting up their own small webpages, their hobbies, etc, with no monetization incentives.
Absolutely, but as long as adverting is allowed to finance the whole bloody thing we're not going to improve anything. Advertising should be limited as to not influence content and that's currently not what's happing. As it stand, outside of "the small web" ads are the main attraction and any content that may be provided to us is done so to enable advertising, or at least not upset advertisers.
I want privacy pushed so far that the majority of the web is going to have to find financing outside of advertising, be it micro-payments, donation, subscriptions or benefactors. People should pay directly for software, service, like social media, news, email and possibly even search. If we as a side-effect uses these things less I see that as an absolute benefit.
Locally produced, given the cheaper labour cost they should also be able to compete in the EU or US by offering a cheaper product, due to cheaper production cost. At least in some areas.
I don't think the current state of the web is doing poor regions any favours by granting the free access to western products, compared to encouraging or even forcing them to build their own infrastructure or products.
Donating Europe's discarded clothing to Africa killed pretty much all of Africa's textile industry. Free access to the online services from the west (or China) is just as much of an obstacle to growing their own technology and media companies.
Edit: Free access to general knowledge, open source software and learning material is clearly a bonus, but it also takes little away from local industry and can help kick start companies.
They wouldn't be losing a lot if they lost out on TikTok and Instagram. It would be no great loss if affiliate link blog spam went away.
[0] e.g. https://axler.net/ has multiple free books on advanced mathematics written by a well-regarded author. This kind of thing (and/or lecture notes, syllabi, and homework) is not at all abnormal to find on professors' home pages if you want a free education.
No, it doesn't. I have no issue with it making money, but that was neither the original purpose of the web nor is it an end goal for everyone using it.
> Giving tools to advertisers while making sure user privacy is preserved is better than free reign of tracking we have before, no?
This statement is unconnected to the first. The way people just link "web", "money" and "advertising" without even stopping to think that there might be alternatives is exactly why everything online is in such a sad state of affairs.
I'm old enough to remember a day when the "social media" that I used was a set of phpBB forums paid for by one or more of the members because they wanted to host the community. Nothing on the modern ad-supported web comes close to the dynamic of friendship and camaraderie of those community-supported forums—if anything the new platforms are a great place to ruin real-life friendships rather than create new ones.
So, no, I don't think the web needs to be made "sustainable" in the sense you seem to mean. Things were better when people sacrificed a bit to keep their communities alive.
This is not the kind of tool/setting that justifies having it auto-enabled, it's not "we auto-enabled MFA to protect your most critical data". Enabling it was not done for my benefit and it wasn't even made obvious in any way, I had to find out from internet discussions. It's my daily driver on all platforms and have nightly, beta, and stable channel installations. None gave me a hint of this extra enabled setting.
If I'm going to use a browser where shady settings are pushed on me it might as well be one which 99.999% of the internet is built for rather than the one where (too many times) I have to fiddle to get things working. I'll take the fiddling or the lack of control but certainly not both. Mozilla is walking on really thin ice.
Also I believe this is to the benefit of the general populace, who would never enable it otherwise. It allows ads to work in a more privacy-preserving manner.
Personally, I'm not a fan of advertising for reasons beyond privacy; it's also simply attention-sapping mental noise. Yet I'm not sure that's relevant here; removing some harm might be better than nothing even if I'm not happy with the end result.
The informed-consent angle seems fairly superficial. Yes, that matters - but the essential case is only if the tech is _not_ privacy preserving. Additionally, the ability to experiment is essential; to the extent this doesn't harm users and truly is small-scale I we should embrace experiments even if we don't personally at first glance embrace this specific one. It may seem polite to ask users for consent even here (and clearly that would have been the better PR choice), but I'm also not a fan of largely irrelevant consent forms, especially when asked prematurely - that's pretty close to spam. Sure, on Hacker News that may seem like an important question, but that's hardly a normal or representative slice of the population, and I'm just not sure I share the outrage here.
What exactly is the shadiness you're referring to here? Is it a lack of trust concerning their intentions? Is it a lack of trust that this is privacy preserving? Is it that you don't believe this experiment is small scale (enough or at all)? Or is that you don't trust they'll actually evaluate the experiment fairly, instead opting to push things through?
Another thing coloring my perspective here is that the open web sure seems to be heading in the wrong direction. Chromium is pretty dominant and none of the chromium derived browers appear to have resources (or willingness to spend them) to significantly depart from Chrome while still providing prompt security updates. Webkit is languishing and poorly updated in practice by users. De facto google seems to be pushing users towards at least pervasive tracking and leverage by google; Apple seems to support mostly those web features that don't risk competing with their app store. This isn't great; I'd love to see some competition.
Perhaps Firefox could somehow provide opt-in but noisy questions for users that want that, without harassing the likely large majority that doesn't see the point. It's a shame to chase away users over something like this, that's for sure.
The second one also recently purchased an online advertising company, Anonym [0], placing them directly in the advertising game. They might have done so initially because they felt they needed this feature, but now their finances are tied up with the success of this platform in addition to Google's continued payouts.
[0] https://blog.mozilla.org/en/mozilla/mozilla-anonym-raising-t...
And honestly, whenever I see that something has been anonymized I assume it isn't. Mostly because the industry has a terrible track record, secondly because the incentives are almost always misaligned to begin with.
I'd trust mozilla more than most, but not enough to give them free rein and opt in things for me. I don't (yet) know enough specifics on this matter to make an informed decision, but if it weren't for hn I'd have missed this.
I doubt firefox would ask the user after install (again, incentives).
I should go through all options for every update (not just for firefox). But I can't, I don't have enough time. I need to be able to put some trust into the software I use, and things like this erode that trust.
More than Google or Microsoft does not say much. And - judging by how hard it is to fully disable telemetry and call-home on, say, Mozilla Thunderbird:
https://superuser.com/q/1672309/122798
I wouldn't trust them very much.
(Yes, I know it's a different project and not the same team but Mozilla is still the parent entity etc. etc.)
But that link, and the comments at https://connect.mozilla.org/t5/ideas/thunderbird-should-by-d... ('Given that significant parts of Thunderbirds user interface (addons manager details, welcome page, whats new on updates etc) are essentially served as web pages into Thunderbird, perhaps your expectations are becoming unreasonable.') tell me that Thunderbird does not respect my desire to minimize my info leakage to the outside world.
The overall attitude included comments like 'I would like to see significantly more anonymous telemetry not less', while I want no network connections in my mail reader except that which I specifically initiate.
These are people so acculturated to data collection that they don't understand that some others don't want it.
A couple of years back I was involved in an argument about doing something a bit similar in LibreOffice:
https://design.blog.documentfoundation.org/2022/11/01/commun...
Note the back-and-forth in the comments.
OTOH, why can't get get UI feedback from logging institutional users for different domains, where they can get real legal and ethical consent from the institution side?
I mean, yes, it's easier to force it on everyone and have them swallow the pill for lack of alternatives than it is to deal with organizations. But then the issue isn't one of lack of data, it's that they don't want to deal with organizations as equals, since that takes more work.
The toolmakers work to earn a living.
Toolmakers also work out of desire to practice their craft. Many projects are written, not to “earn a living.”
Much FOSS is actually written by people who are being paid to do it,
How do you fund the producers of Firefox and the infrastructure needed to get it built and released. Currently the only way is that the sellers of the adverts you read give money to fund Firefox.
Now if you paid for Firefox then they don't need to get money from advertisers.
Similarly to get ad free webpages you need to pay the authors.
According to Wikipedia[1], most of Mozilla is funded by Google, for setting them as the default search engine, rather than by more conventional advertisers.
On a more personal note, I'd prefer if that money went towards improving their FOSS offering instead of giving the now-former CEO a $7M bonus[2], acquiring advertising businesses [3][4], and littering Firefox with these anti-features.
[1]: https://en.wikipedia.org/wiki/Mozilla_Corporation#Google
[2]: https://en.wikipedia.org/wiki/Mitchell_Baker
[3]: https://blog.mozilla.org/en/mozilla/mozilla-anonym-raising-t...
Wikipedia doesn't fund itself by spying on you and selling the data. They ask for money.
If even a Microsoft Executive is saying that anything on the web can be freely copied then what does a normal user think.
They currently already get 7M/year in donations for no purpose. I imagine they'd get a lot more if that money would fund Firefox, and how many core/paid developers do they really need if they have people that know that they're doing?
Given the firehose of money from Google, how much contributor money from people like me would be needed before Mozilla changes their mind? From my viewpoint, they've built their foundation to expect that firehose, and they don't think user funding is enough - they really want that juicy advertising money instead.
Of the $220M spent in software development in 2023, how much specifically went to Firefox development, vs. the other projects they have?
How much did they pay for Anonym, and how much to integrate Anonym into their systems?
If 5% of my funding goes to 'the producers of Firefox and the infrastructure needed to get it built and released' and 95% goes to crap that make things worse for me, then I'm better off funding something like the Tor browser or variants like the Mullvad browser, where my funding is more directed toward improving my personal privacy.
I'll let them figure out what things to disable so I don't have to watch the release notes with a keen eye every time I update.
Not, originally. Wasn’t Brandon Eich like 17 or something when he rewrote Firefox?
And lots of people put out ad-free web content for free. It’s not that it doesn’t exist, just check out all the blogs and whatnot from HN profiles. Very few people with ads or even making money off their pages.
Ads are one way to get content. Not the only way.
(Before you spend too long looking: there isn't one. Mozilla doesn't want me to pay for Firefox, they want to get their funding other ways.)
Nobody is forcing them to do anything, they literally will not take my money.
This is it. We're polluting the web browser with even more bullshit so that companies can squeeze a few pennies out when someone visits a page.
It was bad enough when pages are loaded with tracking cookies and JavaScript but at least you can block those. Now we get browser functionality on by default cooperating with advertising networks. Insane.
We've been giving advertisers new tools for 20 years. Over that time advertisements have only gotten worse. The less bad state is a myth. There's no economic incentive to be less bad.
It is net negative though.
It is more privacy-preserving to just not implement this in the first place.
It is baffling why Firefox ships with this on by default. Even Chrome prompted users with a (misleading) dialog box to turn it on or off.
Not really. The reason is that Mozilla wants to make money by selling your data/preferences. Probably so that the incompetent CEO can get even more obscene "compensation". They just bought a spyware adtech company.
90% of Mozilla’s revenue, ca. $500,000,000 comes advertising partnerships (almost exclusively Google)
https://untested.sonnet.io/Defaults+Matter%2C+Don't+Assume+C...
My point is: it’s not just lifting a finger for advertisers. It’s deception. Defaults matter.
You mean online tracking, not advertising.
Advertising without tracking has existed for as long as commerce has existed. The elimination of tracking is not a threat to advertising. Historically, tracking is a very recent "innovation", an unwelcome one IMO.
It's that an ads vendor is lifting a finger for ads. Mozilla is an ads vendor now - https://blog.mozilla.org/en/mozilla/mozilla-anonym-raising-t...
This would be my preferred outcome no doubt. And after widespread adoption of content blockers like uBlock Origin, the next step should be mass adoption of webpage mirrors (like archive.is and Wayback Machine do now, but more comprehensive), and stop giving impressions to read-only websites.
In this sense, paywalls are a blessing in disguise: I don't ever visit wsj for example and thus any articles from it must be read from archive.is. But reading from mirrors should be more widespread, even for websites not behind a paywall.
If browsers want to improve the situation regarding ads, besides bundling and automatically enabling content blockers, they should also provide integrations to mirrors like archive.is to go further than that and not even risk a page access to ad-infested sites.
> or give it the tools it needs to be less bad.
However there are more than two options. If society reach a compromise to ban targeted ads, this doesn't shut down advertising completely but sets it back to TV-era levels of analytics. This discussion should have happened after Cambridge Analytica.
> Opinions differ, but all major browser vendors are in the latter category.
I thought Chrome were in the business of making sure ads stay bad.
It's not to protect privacy, because to protect privacy there is already a solution: it's to block the ad hosts and not talk to them at all (anti-fingerprinting techniques don't work).
The best objection is that I want my software to work for me, not for someone else. Simple.
For example, here's a 2021 blog post describing the protocol
https://webkit.org/blog/11529/introducing-private-click-meas...
Internet advertising worked fine before user tracking, it was just based on the contents of the webpage.
Before that it existed in newspapers and magazines for over a decade, without advertisers insisting the publisher spy on each of their readers.
Doesn't this break most modern methodologies. Can I do next best action without knowing who did what?
Yes, please. Both online and offline. Advertising is probably the most useless, annoying and wasteful industry out there.
We could have pull-only databases of businesses, products and services instead. Ideally, with independently verified, fact-checked information and authentic reviews. Realistically though, this kind of objectivity would probably be infeasible to enforce and maintain. But even if we allow for misinformation, paid rankings and whatnot, the point stands: any such database should follow a pull-only model, users access it voluntarily to search for products and services and it's not an unsolicited broadcast to everyone everywhere all the time.
My state seems to have a search tool, but no list. It also only has name/address (so presumably it's more for serving legal papers or whatever).
If I want to find a plumber, I should be able to ask my government for a list of the licensed plumbers in my area.
Glad the whole thread was apparently flagged to death though. I'd guess 90% of firefox users already turned that off and are actively looking for the next best alternative.
If this is "privacy", then it appears so-called "(ad) tech" companies are attempting to redefine the term.
Question for readers: Is knowing the identity of a person a prerequisite for that person to lose (some) privacy.
Consider the dictionary definition:
Webster's: "The state of being in retirement from the company or observation of others; seclusion."
Wordnet, from the Cognitive Science Laboratory at Princeton: "the quality of being secluded from the presence or view of others [syn: {privacy}, {privateness}, {seclusion}]"
Example:
A person in a building in a large city on a busy pedestrian street draws the curtains or blinds in a window facing the street to prevent passers by from seeing in. The passers by do not know the identity of the person(s) inside.
The scare quotes around "privacy-preserving" are justified. The act of allowing measurement destroys some privacy. It is less private to let people on the street see into the building.
Allowing measurement destroys privacy. How can marketers make it easier to swallow. Using a term like "privacy-preserving" is obviously deceptive, it is sleight of hand to conceal the frog boiling. This is not Mary Poppins. You are not being given a spoon full of sugar to help the medicine go down in a delightful way. It's poison in small doses. Eventually, the frog will die.
The "frog" is the concept of your privacy. The notion of "privacy" for so-called "tech" companies is not being targeted. Even when courts ask them to share what they are doing, they evade such discovery claiming it would put them at a competitive disadvantage: they might ultimately lose money. Whereas if opening yourself up to 24/7 observation causes you to lose some advantage and ultimately to lose money, then your loss is their gain.
There are certain risky activities in life that some folks choose not to engage in. These activities can be made "safer" and even "safe enough" that many will choose to do them despite the risk. But it does not remove all the risk. There are endless examples. Skydiving, bungy jumping and so on all the way down to relatively mundane stuff. But in almost every case, there is an incentive to participate. There is a "reward" for taking the risk.
The incentives for Mozilla, "ad tech" and all those who support this nonsense "business model" based on surveillance is easily discernable. Finding an incentive for anyone using a web browser to want to participate in this "measurement" requires mental gymnastics.
And so it must be opt-out. No one would knowingly subject themselves to such needless observation.
https://jamesfallows.theatlantic.com/archives/2009/07/peace_...
It's not like we've just invented this new advertising thing and are now struggling to make it fit the internet. We've been living with it for decades now, and over all this time that industry haven't expressed even a slightest desire to be "less bad" in any meaningful way. I think we can safely set aside the idea that they don't do it because they just didn't have any tools. No, they don't do it because they are doing just fine without it, and they have zero motivation to do it. And a lot of motivation - billions upon billions of dollars of motivation - to keep doing exactly what they are doing, or worse.
The best objection to these proposals isn't privacy, it's that a browser vendor is lifting a finger for advertisers. I guess the fundamental question there is if we prefer to outright shut down online advertising, or give it the tools it needs to be less bad. Opinions differ, but all major browser vendors are in the latter category.