Hacker News new | past | comments | ask | show | jobs | submit login

However, Mozilla has a special agreement with Google Analytics that ensures all data is anonymized.

Some discussion which mentions that here: https://github.com/mozilla/addons-frontend/issues/2785




Jesus, that is not about Google Analytics on Mozillas websites but on the about:addons page of Firefox. That is terrifying.


See also about:telemetry to see if anything enabled. If enabled, they are sending a bunch of information with unique id. Even if disabled, the telemetry is still always being gathered, just not sent.


> If enabled, they are sending a bunch of information with unique id.

That is not the issue. The issue is when they send Firefox user's data to google of all places.


I know, but I imagine Mozilla has the same policy everywhere they use Google Analytics and that was the best source I could find for it.


No, what I mean is: Apparently Mozilla injects Google Analytics right into Firefox.

That is terrifying.


about:addons is an iframe that includes the addons.mozilla.org website - which happens to use GA with a special contract. This page now respects the Do-Not-Track setting.


> about:addons is an iframe that includes the addons.mozilla.org website

Only in the "Get Add-ons" section, mind you. Everything else is local.


Not much more terrifying than every website using it.


> Not much more terrifying than every website using it.

Actually it is. It suggests the organization behind the browser actively takes steps to embed tracking right in the browser.


It's more terrifying because

a) I can block it from websites easily. Not so from Firefox about:... pages.

b) Firefox has a marketing angle that they are privacy protecting. But injecting external tracking code into the browser itself is the opposite.


If you really want to be sure then you should block it in your hosts file anyway and not just on an extension level.

Homebrew also has it included with a pretty good description why I think: https://github.com/Homebrew/brew/blob/master/docs/Analytics....


Most people use Chrome which sends every keystroke to Google.

That should be a whole lot more terrifying.


There is waterfox. I'm curious how quickly it will incorporate the new features.


The fact that someone in the organisation actually thought "on let's approach Google and ask for this special agreement" shows a naïvety that really shouldn't exist in a company I'm supposedly trusting to protect my privacy.

I really hope this kind of non-sense starts changing in Mozilla soon. This post is promising, but—as the gp points out—still not without glaring irony/hypocrisy.


What's naive about it when they _got Google to agree under contract_? Let's turn that around instead: I really hope this kind of sensible demand becomes wider spread, with more people going to Google saying "we only want to use your tools if the data is anonymised and you do this under a contractual obligation that we can sue you over if you ever violate, as a partner agreement rather than a service/customer relation".

Plenty of huge sites out there could quite easily demand the same thing without affecting ABC's bottom line while making the lives of others better in incremental steps.


https://bugzilla.mozilla.org/show_bug.cgi?id=697436#c14

"Mozilla went through a year long legal discussion with GA before we would ever implement it on our websites. GA had to provide how and what they stored and we would only sign a contract with them if they allowed Mozilla to opt-out of Google using the data for mining and 3rd parties.

We now have two check boxes in our GA premium account that allows us to opt-out of additional usage of our data. Because Mozilla pushed Google so hard, those two check boxes are available to every other GA user in the world regardless if they have a premium account like we do. GA also doesn't track IPs or store PII within the tool."

--

Seriously, those bastards.

Only having internal controls and debate, sustained legal engagement, and ultimately DNT-obedience.

I expected more. /sarcasm


is their contract even public?

"GA had to provide how and what they stored and we would only sign a contract with them if they allowed Mozilla to opt-out of Google using the data for mining and 3rd parties."

(emphasis mine) am I the only one who finds the usage of the word provide odd? Literally it means GA had to list what and how (insinuating they blindly trust GA to do only what it says it does). Not-literally but the flow of the phrase makes it seem like they want to convey "GA had to prove how and what ..." but without actually making that claim. In the case Mozilla does have proof why don't they share the anonymization framework with proofs? In case they don't we are supposed to be OK with their feigned naivety?


Also, did they check those checkboxes or not? Suspense is killing me...


In this case I think provide is just standard language when referring to supplying documents mentioned in a contract.


> What's naive about it

Google is a company that have a track-record of breaking the law to contravene user-privacy. They are also Mozilla's primary competitor (albeit also a large revenue source). Please tell me how, as a company selling oneself on user-privacy, approaching such a company to negotiate a contract that ensures you can continue sending them your users' data is not naïve? Calling it naïve is kind, as the alternative is malice.

No matter what way you cut it, Mozilla is sending your data to Google's servers, and they're deciding what to do with that data. An opt-out contract doesn't change any of that.

> I really hope this kind of sensible demand becomes wider spread, with more people going to Google saying "we only want to use your tools if...

To turn that around, you're going to Google saying "your market dominance makes your tools are so indispensable to our business, that we would rather go through an expensive year long legal discussion with you to negotiate better terms that consider alternative competing solutions"


Hey, don't tell me, tell Mozilla if you know of any established alternatives. Bearing in mind this is part of a multi-year funding agreement between two (not even close to competitor) companies, where the "offer our search" is the price for receiving literally hundreds of millions of dollars in funding. If Google was really Mozilla's competitor, we wouldn't even be talking about this: you don't give your competitor money to keep them afloat. Not in America.

And incredibly, Mozilla talked Google down from their normally "and we get everything your users do" conditions to only "and you make us a trivially changed default search engine, and we are under contractual obligation to anonymise the data we get through our GA channel. And offer everyone in the world the option to have that same anonymisation turned on. For free". That alone is worth one-time changing a search engine after installation. After all, you get this product for free, and you're even given every possible way for you to customize it should you not like any of the default settings, from default search engine to default skin to default webgl hardware binding settings.

So if you still think none of that was worth doing, and just seeing google.com find you search results, but clicking three times to change that is too much work, then... I don't know man. I don't think browsers are for you.


> Google is a company that have a track-record of breaking the law

Like when, and did they get punished for that and change their ways?


One example that's actually undergone a good deal of investigation worldwide would be https://www.nytimes.com/2013/04/23/technology/germany-fines-...

> did they get punished for that

Not really, unless a fine 0.002% of their revenue counts.

> and change their ways?

On that specific issue, after being investigated for it, it seems so. On any other handling of personal data, one can only make assumptions based on their ethical record.


It's to assume that in a company as large as Google it's impossible to know what happens with the data and where its stored and where it gets commingled and when maybe even devs are granted access for "debugging". If you give the data away, it's gone, no control. Facebooks issues taught as that.


(from your Github issue) > We won't use Piwik. Mozilla uses Google Analytics for website analytics. Hosting our own is more work for a worse product.

Apparently there's some people who are not fans of Piwik, that's a shame.


Friendly reminder that Piwik has renamed to Matomo.


Again? Wasn't it like 3 years ago when they switched to piwik?


No, it has always been Piwik. At least that's what it was named when I first used it in 2010.


The predecessor was phpMyVisites, but that was replaced by Piwik in 2007.


Between this and the stupid Mr. Robot thing, I’m starting to seriously question the judgement of PMs at Mozilla (or Firefox at least).


Surely we can trust Google.


Why does Mozilla NEED Google’s analytics?


I don't work for Mozilla but presumably they will be at a disadvantage in identifying and thus prioritizing features that their customers want compared to competing browsers. Less features -> less users -> less revenue from google for paying to be the default search engine which then completes the reinforcement cycle as they will have less money to spend on features.

Now they probably don't NEED it, but with every user they lose to chrome, they get less and less money until the only market for them would potentially be the privacy focused ones (although I here chromes got really good privacy features nowadays) which are such a small population that they wouldn't even have enough customers to justify the revenue to even match competing browser features. Thus, you would end up with a lackluster browser that cannot match competing browsers and its only niche are privacy people.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: