Skip to main content


Firefox now has Terms of Use! This'll go over like a lead balloon.

You give Mozilla all rights necessary to operate Firefox, including processing data as we describe in the Firefox Privacy Notice, as well as acting on your behalf to help you navigate the internet. When you upload or input information through Firefox, you hereby grant us a nonexclusive, royalty-free, worldwide license to use that information to help you navigate, experience, and interact with online content as you indicate with your use of Firefox.


mozilla.org/en-US/about/legal/…

Update: See below in the thread for their clarification.

This entry was edited (2 weeks ago)
in reply to Taggart

So if they decide ads based on my artwork/writing help me "navigate, experience, and interact with online content," they have the right to steal it from me and use it in their "privacy-respecting" ads?
in reply to Taggart

Seeing how it's worded, I'd say they only have the licence to use your uploads to help you. I mean really just YOU.
in reply to Taggart

Will have to give it a read later but I hope this doesn't affect forks like librewolf
in reply to Tissa The Artista

@_tissa_ it can't. There is not an EULA to run the code. If you download and run Firefox through an installer, yeah it does affect you, because you're presented (I assume) the EULA.

Any forks or people who compile it themselves aren't subject to it.
@mttaggart

reshared this

in reply to Nathan A. Stine

@stinerman @_tissa_ Does this include precompiled packages like those distrobuted by linux package managers?
in reply to NotARobot

@TruelyNotARobot I'm not a lawyer but I don't see how. You were never presented with these conditions. If Mozilla thinks that they can say "this is available under a free software license but oh there's this other website where we take away your rights that you were never notified about" that's uhhhhh not the way it works.

@_tissa_ @mttaggart

in reply to Nathan A. Stine

@stinerman
Has anyone forked the sync host software? I know there's Pocket, or used to be, but I'd love to send my bookmarks elsewhere.
@TruelyNotARobot @_tissa_ @mttaggart
in reply to Hobson Lane

@hobs @stinerman @TruelyNotARobot @_tissa_ if it's just bookmarks you are concerned about you can export them manually or use a tool like xbrowsersync.org/ it's open source and encrypted and works with all browsers. There's an APK you can get and keep up to date with Obtainium for Android devices as well.

reshared this

in reply to Taggart

No, if you upload your artwork they can outright steal it and you can't sue them because you agreed to ToS. That's what it says. This better turn into such massive shitshow Mozilla is going to feel it for a decade. I bet they want to use this bullshit to train their Ai garbage.
in reply to RejZoR

@rejzor
Does it? The fact that the bolding ends before the end of the statement does not delete the "to help you navigate, experience, and interact with online content as you indicate" part.
in reply to DB Schwein

@deirdrebeth @rejzor There's no way they *won't* be interpreting "navigate, experience, and interact with online content" in the same hoover-everything-for-advertising-or-AI-purposes sense that all other tech companies do these days.
in reply to DB Schwein

@deirdrebeth @rejzor And suppose people say no thanks, I can navigate on my own? I somehow doubt Firefox will have that as a selectable option.

The advertising industry corrupts everything it touches.

in reply to DB Schwein

@deirdrebeth "As you indicate" in what way? Via checkbox or via simply using the Firefox you automatically agree to it? It's so vague and broad it's ridiculous.
in reply to RejZoR

@rejzor
No disagreement there. It is vague.
I'm holding out hope that it's vague in a good way (it seems like they're trying to be cute), rather than jumping to the conclusion that it's vague in a bad way.
in reply to Taggart

That wouldn't be "as you indicate with your use of Firefox"
in reply to Nacho

@nachof Are you sure? I'm agreeing to some ads simply by using Firefox
in reply to Taggart

This. And who does decide what I indicate and what I do not indicate with my use of Firefox?
And how is such language even possible in temrs of use?
@nachof
This entry was edited (2 weeks ago)
in reply to Taggart

not seeing what’s objectionable about the quoted section
in reply to Aaron Williamson

If I upload my artwork to anywhere via Firefox, have I just granted a royalty-free license to that intellectual property to Firefox, if they deem use of it is in my best interest in "interacting with online content?"
This entry was edited (2 weeks ago)

F4GRX Sébastien reshared this.

in reply to Taggart

as I read it, you give them a limited license to use that content as needed to do what you’re using Firefox to do. I.e. if you’re uploading an image to a website, you authorize them to do so as you directed.
in reply to Oliver Geer

@WebCoder49 the problem with things that can be interpreted differently is that if your interpretation doesn't match Mozilla's, and they do a snatch and grab of all your stuff, your only recourse is an expensive lawsuit, which no matter which way it is finally decided, the only parties that win are the lawyers.

@copiesofcopies @mttaggart

in reply to Matt Palmer

@womble @WebCoder49 @copiesofcopies Part of what Firefox is doing is now advertising. You are at the mercy of their definitions here.
in reply to Taggart

yes, I've been watching Mozilla's various thrashing movements with slack-jawed horror for some time now.
in reply to Oliver Geer

@WebCoder49 @copiesofcopies Does not matter. Mozilla is not in a position to deserve the benefit of the doubt. They are not trustable.
in reply to Aaron Williamson

@copiesofcopies since when and in what timeline is it necessary to GRANT MOZILLA A WHATEVER LICENCE to send a fucking web request to a random site that does not belong to mozilla?
in reply to F4GRX Sébastien

@f4grx @copiesofcopies
Today you send your reqest to the website. Perhaps they plan for the comm to go through their servers?

(Like emails in outlook)

in reply to Aaron Williamson

@copiesofcopies Yeah, that seems more correct.
The last line is pretty telling "..as you indicate with your use of Firefox".
If you didn't indicate that you wanted Firefox to take your artwork then Mozilla doesn't get that permission. They only get the permissions to do what you "indicate".
The other important part is "When you upload or input information through Firefox"

Basically it's just saying that if you indicate that you want to upload a photo to x website, by for example dragging an image into Firefox, then you give Firefox permission to send it to that website you are on.

To rephrase, when you upload through Firefox, you give Firefox the permission to do what you indicated, i.e. uploading.

The true meaning of the quote seem to have blown over @mttaggart 's head like a helium balloon.

This entry was edited (2 weeks ago)
in reply to Saphkey 🕊️

@saphkey @copiesofcopies It didn't. Your interpretation does not require a "non-exclusive, royalty free, worldwide license."
in reply to Taggart

@saphkey non-exclusive because you can license your content to others too, royalty-free because Mozilla isn’t going to pay users to use its browser, worldwide because the user could be anywhere. All of those are in fact necessary, the first protects the user’s interests.
in reply to Saphkey 🕊️

@saphkey @copiesofcopies So are all software companies that upload content violating laws by not having this language? Or liable for some lawsuit? FTP software for example?
in reply to rsp

@rspfau @saphkey I’d call this a conservative approach to address a possible risk. What I will say is that GDPR pretty clearly applies to personal data “processed” by an app, so they might be trying to ensure they’re getting express permission to process personal data contained in user content.
in reply to rsp

@rspfau @copiesofcopies The lawsuit environment in USA is quite insane. People file lawsuits over any small thing.
And lawsuits are expensive. Often it just turns into a battle of attrition by money.

A terms of use document is cheap way to stand stronger in those battles.
Its not something that is required, but one day you might wish your company had one.

Just go have a look at the page, its mostly just textbook things like "You Are Responsible for the Consequences of Your Use of Firefox",
if you eat Firefox you are responsible for your tummy-ache
mozilla.org/en-US/about/legal/…

This entry was edited (2 weeks ago)
in reply to Aaron Williamson

@copiesofcopies There is no "them" involved in uploading, this is not Gmail, Firefox is software running on your local machine.

Unless you are predicting that Firefox will become a cloud service, running in your Chrome browser...

in reply to Leeloo

@leeloo @copiesofcopies They ARE a cloud service, including but not limited to Firefox Sync, the ReadItLater watchamathing (Pocket), Firefox Relay and a VPN.

Still my browser.

in reply to jandi

@jandi @copiesofcopies We are talking about Firefox, not Pocket, Sync or all the other things Mozilla is doing.

Firefox is not a cloud service running in your Chrome browser.

in reply to Leeloo

@leeloo @jandi @copiesofcopies
If they were serious and sober at #Mozilla, you could install your Sync instance on your NAS since 15(!) years - and use it with Thunderbird, Nandroid, whatever.
What we have is a failed proof of concept of self hosting.
What we could have had, is a blooming garden of free modules for Sync.
in reply to Taggart

@copiesofcopies The way Mozilla has been going recently, and the way it's worded, I'm having two hunches.
1. This is required for their new advertising initiative. Mozilla wants to collect (presumably anonymous) data about shown ads and conversion.
2. This can be used for some kind of AI thingy. Like, imagine a local neural net that'll get trained on sites your visit and images you upload.
in reply to Taggart

oh for fucks sake... I am done with mozilla and their bullshit. sorry firefox, you'll have to go.
in reply to DJ🌞

@infosecdj thats completely depressing. the web was bad enough now the last standing browser is pissing on its users.

people in the thread talk about librewolf. never tried yet.

in reply to F4GRX Sébastien

@f4grx well it is probably a rebuild of firefox, like a thousand of others. I'd rather have something properly security-supported.
in reply to DJ🌞

@infosecdj Sure. I hope we find something.

From this toot it looks like they embed some additional crap in their binaries. Maybe we're safe with a rebuild from source.

infosec.exchange/@mttaggart/11…


@wtrmt No. From the Terms:
These Terms only apply to the Executable Code version of Firefox, not the Firefox source code.



in reply to F4GRX Sébastien

@f4grx with rebuilds, the question is how well they port security fixes to their fork. well, that and when will they get themselved pwned of course, with a backdoored update getting pushed to users...
in reply to DJ🌞

@infosecdj @f4grx It's not out yet, but #LadyBirdBrowser is perhaps the only real alternative that we have when it's released. It's open source of course. I'm begrudgingly sticking with Brave until then

ladybird.org

in reply to Sam Sinclair

@playleft @infosecdj and do they support manifest v2 plugins? The web is unsufferable without at least ublock origin, blocktube, and a few more.
in reply to F4GRX Sébastien

@f4grx @infosecdj I couldn't say without being directly involved with development. However, the devs have said they plan to support popular extensions, but are currently focused on building the engine. It is being built from the ground up afterall, and Alpha (to early adopters) is only scheduled for Summer 2026 at this stage.
in reply to Taggart

This clause explicitly separates the information they claim license over from the data collected in the Privacy Notice. This clause is more expansive—"information uploaded through Firefox" is basically anything in a HTTP request or a websocket.

mozilla.org/en-US/privacy/fire…

reshared this

in reply to Taggart

This is the press release. I do not believe there is concord between this language and the actual policy: blog.mozilla.org/en/products/f…

reshared this

in reply to Taggart

Hey FWIW, Vivaldi does not have anything like this language: vivaldi.com/privacy/vivaldi-en…
in reply to Taggart

This is your hojillionth reminder that non-profits are corpos that figured out how to avoid taxes. When the chips are down, most will readjust the "mission" toward revenue.

tante reshared this.

in reply to Taggart

I would say you are being too cynical, except it keeps happening.
in reply to Taggart

but wait, Mozilla has this cute new logo now. They cannot be that bad...

witch_t *lizzy reshared this.

in reply to Taggart

yup. there are some less greedy for profit and non-profit orgs, but it is important to remember that non-profit is a tax status. it does not mean a mandate to only do charitable works. it just puts some restrictions on how profit may be used and how much of revenue can be profit.
in reply to ⚠️CYBER⚠️katze ⚡

@schrottkatze
much like the Cylons, this has happened many times before, and will probably happen again a bunch more times.

I think LibreWolf is the most popular, there's also one called Floorp I remember usually because it sounds like a meme.

in reply to Taggart

vivaldi is chromium based, which has it's own risks

Maybe I'll use librewolf or some-such 🤔

in reply to Taggart

I have spent my night reading browser Terms and Privacy Policies. Why? Because I love you and hate myself, apparently.

So here's the deal: that "non-exclusive, royalty-free, worldwide license" you're granting to Firefox/Moz when you upload data through it? It is boilerplate language. Pretty common actually!

But not in browsers. In fact, not a single browser ToS has anything resembling this provision.

Know what does?

Facebook
X
Instagram

I wonder why Mozilla would want to use the same language those platforms do.

in reply to Taggart

Mozilla has updated their press release with the following clarification:

UPDATE: We’ve seen a little confusion about the language regarding licenses, so we want to clear that up. We need a license to allow us to make some of the basic functionality of Firefox possible. Without it, we couldn’t use information type into Firefox, for example. It does NOT give us ownership of your data or a right to use it for anything other than what is described in the Privacy Notice.


blog.mozilla.org/en/products/f…

That is good to hear, but their reasoning makes no sense given that no other browser uses that language.

in reply to Taggart

... yeah, we don't want Mozilla to use information that we type into Firefox? that's our entire objection

sotolf reshared this.

in reply to Irenes (many)

@ireneista Many have suggested that the intended meaning here is something like "We literally need to license your data to transmit it via HTTP," but this feels off to me, given that no other browser's Terms contain this language. I'd be interested in your thoughts on that.
in reply to Taggart

we're not a lawyer but we have for sure worked on this sort of thing, and that would be quite a radical interpretation compared to any we've seen before... it's conceivable that something in the digital markets act or digital services act creates a new requirement we're not personally aware of, but our best guesses are >
in reply to Irenes (many)

> that it's one of two things:

  1. Mozilla's lawyers overthought it and came up with something weird and unnecessary and are now regretting they didn't loop in the PR team
  2. the company needs this permission because it intends to use this permission, because it intends to use browsing data in all the ways everyone is concerned about

reshared this

in reply to Irenes (many)

A third possibility is that someone lazy just copied and pasted from other terms of service, and now they're scrambling to justify why that cruft is in there rather than just own up to it.
in reply to Taggart

@ireneista That is bullshit.

I mean, no, I am not a lawyer, either. But the *language* clearly states that you grant Mozilla license, and if in doubt, the legal language counts.

It would also be the first time in decades of Internet and copyright that this language was necessary.

You know what makes this necessary? AI training.

If the feature they're referring to is a machine learning system, they need license to train it on your data. But that has little to do with the base...

in reply to Jens Finkhäuser

yes. we said something to that effect earlier today, and we still think it's the most likely explanation.
in reply to Irenes (many)

also, like, this does not happen in a vacuum, the company has spoken about its intent to pivot, since its main business model was to get paid by google to be the default search engine and that was found to be an antitrust violation
in reply to Jens Finkhäuser

@ireneista ... functionality of a browser, so should terms you may have to agree to to use such a feature.

But it's opt-out, isn't it?

And that's where the GDPR and DSA matter; the former require e.g. "informed consent", and you cannot by definition be informed enough of the consent they assume in an opt-out scenario. And the latter prohibits the use of deceptive patterns like e.g. cookie banners to convince users to grant consent against their best interests.

I'm seriously...

in reply to Jens Finkhäuser

@ireneista ... thinking a lawsuit due to both should be made against them. It's stuff that makes sense in the US legal system, but is going to be painful for them here.
in reply to Jens Finkhäuser

@jens @ireneista

Then the licence cannot be a blanket one but specific to the purpose. Given search terms are currently used without licence and search results are storable and reusable without a specific licence it simply puts a barrier between the user and Mozilla that wasn't there before.

Given that search behaviour has not needed to be licenced up to now and it's a necessary feature of a browser enforcing one now is bound to fail without consideration.

in reply to Simon Lucy

@jens @ireneista

I think the objections to these changes are going to be much deeper and wider than just 'information' type usage, they change the whole relationship between Mozilla and the User.

The User can avoid a lot of this by never updating or removing the Firefox account and never logging in. Licences with unidentified users cannot be relied upon by the Licensee as a defence for use.

It essentially destroys the point of FOSS.

in reply to Taggart

I think it makes sense for specific services that need to transit through Mozilla's servers first, but for anything else it doesn't. Examples of such services would be account synchronization, online translation (although Firefox has offline models, but maybe they also have online?), search suggestions (pretty sure those go through a Moz server that also serves "recommended" sites)... Essentially all optional features that aren't the core of what a browser does, but some may be enabled by default so it's easier for them to just ask for the rights to use the necessary information instead of having the users specifically activate them and get an extra clause to look at. Although having them opt-in by default would be more privacy friendly...
in reply to 🪨

it's always easier for a company to reserve every possible right to itself, but that doesn't mean the public should stand for it
in reply to Irenes (many)

But it also doesn't mean we should shout "they became evil!!" when they choose the easy option, I saw your responses basically saying that now they are using all our data for AI training but nothing in their privacy policy suggests that they do...
in reply to 🪨

we didn't say anything about "now". we've been involved in this sort of change from the other side, the update to the legal documents always comes before the feature rollout.
in reply to Irenes (many)

we've really tried pretty hard to avoid taking extremist positions such as "evil", and instead to speak only to what's in evidence. of course, social media being what it is, people will choose to hear things we don't say. we try our best, but people are very determined about that.
in reply to Irenes (many)

Oh yeah that wasn't from you, my bad. But my point stands: I did see some reactions going straight to the AI harvesting based on this change, but based on what I see in other companies that changes their terms to slurp all user contributes data into their LLM trainer, it is not enough.
in reply to 🪨

can you elaborate on what exactly "is" is that is not enough, and not enough for what?
in reply to Taggart

@ireneista some lawyer thought it was a good idea to put the TCP/IP stack into legalese.
Next: "we have the right to copy all your data as needed" (to put it into a network packet)
in reply to Taggart

@ireneista Mozilla the company is not transmitting the data. It provides the means to do so to me. -I- cause my data to be transmitted.

That's like saying Bosch heats my water for me, or Citroen drives me to work.

in reply to Advanced Persistent Teapot

that's under the present implementation. the normal way to roll out features that require legal changes is to do the paperwork first, and only then deploy the feature. so we're left only speculating about what future changes might bring, once the company has the right to do that........
in reply to Advanced Persistent Teapot

@http_error_418 @ireneista So, having done a fairly exhaustive review of browser terms, I can tell you that this language is rare. But when it's present, such as in Arc's terms, it is explicit about the use of your data in transmission, and that's it. Arc is also notable—perhaps because it is an AI product—for starting its Privacy Policy with statements about what it will not collect from you. Firefox's policy, sadly, makes no such definitive claims.
in reply to Taggart

Hey, tnx for updating your original post to include this piece of vital info! 😃
in reply to Taggart

There's nothing wrong with Mozilla not using data typed in to or travelling through Firefox, they could just not.
in reply to Taggart

That clarification doesn't help. To me it doubles down.

I've already deleted Firefox.

Real shame as I've been using it as my primary or second browser for 20 years, since it first came out.

in reply to Taggart

The issue is that "anything described in the Privacy Notice" is incredibly broad.
IMO it would be easy to argue that "training an AI model on it" is "helping you yadayada". Like… yeah, they can't sell it to data brokers. But almost anything else they *might* want to do with it can be justified with that clause. And most of it I don't want.
in reply to Taggart

What I find troubling is the vagueness about 'upload' - to me, an upload is anything at all sent in the upstream, including personal logins and private identity data you may be sharing with a secure system. If this is what they mean, then they need to break down exactly what data is being collected. Is it everything you send to a site via the browser?

Or is this whole thing just about basic telemetry that you can disable in privacy settings?

in reply to Taggart

Aaah the ole' not legally binding or material in anyway blog post 'clarification'.
in reply to Taggart

I might not even be a country lawyer but this language is still overreach. Never mind the termination clauses where they can try and stop you from using Firefox?
in reply to Taggart

It appears that #Mozilla wants us to read the ToS a certain way.

But if in doubt, the only thing that counts is the actual legal document, not a random blog post from Mozilla. This is actually a common tactic from companies to calm the crowds without actually reverting controversial changes.

As long as the Terms of Service stay like that, I can not agree to them, as they are way too broad and vague in my opinion.

This entry was edited (2 weeks ago)
in reply to Taggart

That doesn't clarify anything.

Not that it matters, because a blog post is marketing, and when their own legal department says a company is doing questionable or morally corrupt stuff, be assured they are not admitting to a crime they aren't going to commit, no matter what marketing says

in reply to Taggart

For all the shit that Brave gets, not even Brave has this in there TOS
in reply to Taggart

why the hell do THEY need to use information that should only go between me and a website? FF worked for tens of years without this, what "basic functionality" are they talking about at this point?
in reply to Taggart

- This shouldn't have needed to be clarified in the first place. If that blogpost was proofread by anyone they would have seen that section and called it out for being likely to be 'misunderstood'
- It's indeed still really weird phrasing
in reply to Taggart

To me as zero value what they say in a blog, what it matters is what they say in the terms, and their they say the opposite.
in reply to Taggart

We might need a description of said "basic functionalities". For instance, is spying on us to display targeted ads a basic functionality?

I'm not convinced one bit.

in reply to Taggart

> We need a license to allow us to make some of the basic functionality of Firefox possible.

Which basic functionality, exactly?
How, exactly, would it be impossible without the license?

> Without it, we couldn’t use information type into Firefox, for example.

Use *how*, exactly?
Can we please be more specific here, @mozillaofficial ?

in reply to Taggart

Ope! Got one browser that does.

Thanks to @Schouten_B for uncovering the license language in the extended Google Terms of Service for Chrome.

reshared this

in reply to Taggart

Found another! Arc has worldwide license language.

But its language is clearly-scoped and explains the purpose.

start.arc.net/terms-of-use

in reply to Taggart

Could this be a precursor to rolling out Privacy-Preserving Attribution (PPA)?

noyb.eu/en/firefox-tracks-you-…

in reply to Taggart

Any thoughts on Librewolf?
librewolf.net/
in reply to David

@deFractal Sorry, I have none. Unlike many here, I do not require my browser to be FOSS. I use Vivaldi quite happily, and have never felt the need to explore the Firefox forks.

Talk to me when Servo makes it into something.

in reply to Taggart

My priority criteria are full @ublockorigin compatibility and support for all my user scripts and user styles for fragile or consent-contemptuous sites requiring something more complex than uBlock Origin filters. Tab containers are also important.

Essentially, I care about ensuring I can eat my cake and still have it: block each part of every site that doesn't serve my purpose, and still make the parts which do serve my purpose work despite that.

This entry was edited (2 weeks ago)
in reply to Taggart

If your ToS and privacy statement require a lawyer to understand what you actually do with user data that is not GDPR compliant.
This entry was edited (2 weeks ago)

paulasimoes reshared this.

in reply to Taggart

I notice they haven’t clarified the section on collecting data for “Compliance with law in responding to data subject rights requests, responding to law enforcement requests, managing and protecting our (and our users) rights, property and/or safety. Legitimate interest, where compliance is not appropriate, in supporting legal or regulatory processes or requests, preventing fraud and managing and protecting our (and our users’) rights, property and/or safety.”
in reply to Taggart

sorry, in case i'm answering rhetorical questions, but those platforms have that license thing because they publish your content.

So that would mean mozilla wants to publish my browsing behavior?

AI training could be kind of seen as publishing, but the license seems to be too heavy for that.

I think gmail has that clause as well, so advertising?

Well once it goes into effect we should be able to DSGVO it.

This entry was edited (2 weeks ago)
in reply to Taggart

I like Vivaldi, but hate the fact it's furthering Google's dominance by using Chromium engine.
in reply to Taggart

@tante

Pfft...

Bunch of lawyer-speak drivel designed to obfuscate that Mozilla has simply decided they can't ignore the cash they stand to gain from having more and more data to sell.

Joining Google on the ad/data sales evil side.

🤦‍♀️🤷🫏🤡🖕

in reply to Taggart

so they’ve decided to scrape data from every user & become a massive security liability?
in reply to Taggart

Everyone, switch to #LibreWolf. It's based on Firefox but has all the privacy-invasive bullshit stripped out.

reshared this

in reply to si2mev

@si2mev
Mull,if you can stomach the forced 60Hz and other quality of life things that are disabled because of privacy.
in reply to si2mev

@si2mev Fennec (
f-droid.org/packages/org.mozil… ) seems to be the less bad option since Mull Browser went the way of the dodo. It has telemetry removed, still calls Mozilla and Google though. There's also Tor Browser ( torproject.org/download/#andro… ), which has its idiosyncrasies.
@TamsynUlthara @mttaggart
in reply to David M. Kelly

Vivaldi isn't open source, and has telemetry. I wouldn't use it for those reasons, at least.
in reply to Leeloo

help.vivaldi.com/desktop/priva…

Update: The project to remove our unique ID stalled after we encountered unexpected deviations in the number of users counted using other methods. We spent a lot of time researching and understanding the reasons for this. We have concluded that the numbers we get using a unique id are more accurate, so we are sticking with it at the moment. It’s as important not to over-count as it is not to under-count as we develop Vivaldi.
in reply to Tamsyn Ulthara 🏳️‍⚧️⛧🎃🐈‍⬛

@TamsynUlthara Librewolf is cool in theory but kind of Opinionated™. Seriously, deleting all your history when you close the browser??? That should NOT be on by default, what the actual fuck. (I knew there was something I didn't like about its defaults last we tried it, but couldn't remember what, so I looked it up just now and found its settings docs and..yeah.)

Is there something like it that's less... *waves paw* yeah?

Kinda sucks because I'm a wolf and I would love a Wolf Browser that's actually good. But yeah.

in reply to Frost「|霜の狼|人面獣心」

I agree that the LibreWolf defaults are ... not the best for people using it as a standard browser. The idea is to make it as secure and private as possible by default, and let the user scale that back as necessary.

The one thing I find the most annoying is having it always open its window to certain dimensions on startup, to reduce fingerprinting, with no way (that I've found) in the settings to disable it. It doesn't matter in my tiling window manager, but on other machines I've had to use an extension to work around this.

in reply to Frost「|霜の狼|人面獣心」

It would be nice if there were a toggle to easily make LibreWolf more-or-less as functional as standard Firefox, just minus the privacy-invasive bullshit from upstream, and let us add more security/privacy as we saw fit. Right now we have to work in the opposite direction, which is frustrating for new users. (Once you get past that initial one-time phase of tweaking the settings, the experience is solid, IMHO.)
Unknown parent

mastodon - Link to source
Taggart
@scottwilson Sometimes this language gets written without sufficient scrutiny. And sometimes it gets written with all the scrutiny it needs to ensure you, the user, are screwed.
Unknown parent

mastodon - Link to source
Taggart
@scottwilson I think they're being very clear about what they want. In fact, I'd go so far as to speculate that somewhere, around some boardroom table, there was a conversation that Firefox is an albatross around Mozilla's neck. The sooner they can kill it and become the AI/privacy ads org, the better.
in reply to vkc (Veronica Explains)

@vkc I ain't gonna tell people what browser to use (it's not a particularly weighty moral choice!). In terms of stability, however, I like that Vivaldi has arrived at a business model that pays developers without screwing users.
in reply to Taggart

@vkc wait what is Vivaldi's business model? Did I miss a memo?
(I love Vivaldi for what they do but I don't think there is a single browser out there who isn't getting the bulk of its revenue from search companies..?)
in reply to Taggart

@scottwilson My heuristic is that Mozilla, while somewhat aimless, isn’t daft.

So the only possible conclusion is that they’re screwing over their users, and want to cash out selling user data to AI companies.

in reply to Taggart

Does this apply to software that uses the Firefox's engine like Zen Browser?
in reply to Gabriel N

@wtrmt No. From the Terms:

These Terms only apply to the Executable Code version of Firefox, not the Firefox source code.

reshared this

in reply to Taggart

@wtrmt Dammit, so I'll have to start compiling Firefox from now on...
in reply to Taggart

@wtrmt
Which indicates that the "they need that for Firefox to be able to speak http" excuses is bullshit, the open source version does that just fine. It's for the parts that are not included in the source code, i.e. the AI and advertising.
in reply to Taggart

anyone know what the previous terms were?

(Going to be so sad when this turns out to be AI related)

in reply to davidhanzlik

@davidhanzlik Per OMG Ubuntu, they are new new: omgubuntu.co.uk/2025/02/mozill…
Unknown parent

mastodon - Link to source
Taggart
@scottwilson @cR0w We're all gonna be keying in messages via Meshtastic via Morse on @Sempf 's BBS. That'll be it.
Unknown parent

mastodon - Link to source
cR0w
@scottwilson Firefox as a service now, huh? :dumpster_fire_gif:
Unknown parent

mastodon - Link to source
Taggart
@da_667 Vivaldi has committed to MV2 support for as long as possible!
in reply to Rocketman (en pause)

That's my guess too. They will train an AI or several with data we let go through Firefox. That's a no go for me. Is that as serious as it sounds? Is it time to leave a 20+ year-old web partner?
This entry was edited (2 weeks ago)
Unknown parent

mastodon - Link to source
Taggart
@da_667 The very same. Viv has been my standard since I ditched Brave, and I've been very happy with it.
Unknown parent

mastodon - Link to source
Taggart
@cR0w @da_667 True, however their built-in blocker works quite well. I'm unsure how that will be affected, since I believe it is technically an extension.
in reply to Taggart

They make it REALLY difficult to find an alternative to a chrome based browser. I do like Vivaldi but am all for more options than only chrome ones
in reply to Taggart

this wording is wonky but you are not providing context and kind of posturing. That may not be your intent but given the replies it's implied.
in reply to Taggart

It is time to use a browser based on just-rebranded Firefox code. Fennec for smartphone is OK, but I have not found a similar alternative for the desktop. Those I know about have some undesirable delay in releasing updates. Other option is to choose a fork like IceCat and check its update cadence in relation to upstream.
in reply to Taggart

so if I use Firefox to post an article to my self hosted CMS, they are claiming copyright over my work now?
in reply to aburka 🫣

or, say, if I use Firefox at work to submit code changes. This is untenable...
in reply to Taggart

If I haven't left Firefox years ago, I'd probably be upset or something.
in reply to Taggart

In short, Firefox is going to steal people's passwords.
in reply to Taggart

Based on that guess it's time to say goodbye and thanks for all the fish to Firefox.
in reply to Taggart

why does everything have to be speed run to enshittification? I start loosing every last slither of hope. All is drifting away and for no good reasons.
Unknown parent

mastodon - Link to source
Taggart
@da_667 @scottwilson @cR0w I used it. Hell, it's in the old PWST videos. I'm ashamed of that. But yeah, if you're looking for a browser that has a sustainable business model but doesn't screw users, you have a clear option. If you require FOSS, you have a thousand, but I don't trust a single one to be around for > 5 years
Unknown parent

mastodon - Link to source
da_667

@scottwilson @cR0w youtubers were promoting it, like they promoted operaGX, like they promoted NordVPN, like they promoted ---

RAID SHADOW LEGENDS!

assume anything that's a paid bit is probably awful.

Unknown parent

mastodon - Link to source
Scott Wilson

@cR0w @da_667 What do the 3 of ya'll think about Brave?

I keep trying to like it, and I admire Yan Zhu, but I'm really turned off by Brendan Eich and his shenannigans. I'm trying to use software that aligns with my values... I just don't know.

in reply to Scott Wilson

@scottwilson @cR0w I've avoided it like the plague because fuck anything even tangentially related to cryptocurrency. Even if they ripped it out, unless it was the VERY LAST BASTION with ublock/manifest V2 support, I wouldn't touch it.
in reply to Taggart

That's really a very vague, unhelpful statement in bold! I guess it's the only popular browser where you can look at all the code and disable linking to proprietary services through the settings [citation needed], so that will help guard against abuse of that term, but it still feels foreboding...
in reply to Taggart

is this not the same boilerplate language used in almost every website that hosts user content?

Like, no doubt it’s weird for a browser to do this but that wording is typically for allowing websites to publicly host your content on their service/equipment and allow things like image cropping/ re-sharing etc.

Makes me wonder if they’re going to start like, hosting servers as intermediaries between the user and whatever site they’re uploading to. I can’t see why that’d be worth it though except maybe in situations where the end site is unstable. Even if it is at the end of the day for training purposes, I can’t imagine they’d not have some kind of cover story to justify it.

in reply to Malus is here now

@malusdraco A website is not the intermediary between you and the rest of the web. This language suggests every HTTP request you make is fair game. That's the difference.
in reply to Taggart

I don’t know that I buy “any http request” unless that qualifies as “inputted information”
did they do some sort of press release to go with the change in policy?
in reply to Taggart

@da_667 god dammit. Is it even possible for a secure open source browser with its own rendering engine to be maintained without AI and advertising infecting every part of it?
in reply to Taggart

Firefox can go fuck themselves over its new terms of use, effective 25 Feb 2025.
This entry was edited (2 weeks ago)
in reply to Taggart

Gonna get sick asking me if I correctly typed "Kill Godzilla" in my search box.
in reply to Taggart

@da_667 Thanks for this! I’ve now moved over to Vivaldi. Love the blocklist integration!
Unknown parent

mastodon - Link to source
Andres Salomon
@da_667 Chromium (that is, non-official google chrome) browsers still support it for now. Eg, debian's chromium package.
Unknown parent

mastodon - Link to source
F4GRX Sébastien
@cR0w @da_667 in a summary, it's on the launchpad waiting to be yeeted.
Unknown parent

mastodon - Link to source
cR0w

@da_667 vivaldi.com/blog/manifest-v3-u…

We will keep Manifest v2 for as long as it’s still available in Chromium. We expect to drop support in June 2025, but we may maintain it longer or be forced to drop support for it sooner, depending on the precise nature of the changes to the code.
in reply to Taggart

@cR0w @da_667
The built in ad blocker was created as a response to MV2 being deprecated, so I'd expect them to have built it in a way that doesn't depend on MV2.
in reply to Taggart

Has anyone yet looked at #Firefox code and determined whether Mozilla snuck in something that sends them data even before they introduced their terms of use?
in reply to Taggart

"help you navigate, experience, and interact with online content"? What TF does that *mean*?
in reply to Blake C. Stacey

@bstacey
I worry that means they can use whatever you upload through Firefox to train their own "ai" models. That seems at first like an unimaginably expansive interpretation, but that is basically what the whole LLM industry is based on.
in reply to Mx. Eddie R

@silvermoon82 @bstacey No, that seems like the obvious interpretation.

It's either that or their new advertising thing.

in reply to Taggart

So, folks, what are we recommending for a Firefox fork on Android?

Waterfox from BrowserWorks is on the Google Play store, but it kinda looks sketchy. Do we know anything about BrowserWorks or their practices?

I don't see LibreWolf on F-Droid either.

I already use Vivaldi as my daily, but I prefer to have a Firefox family browser as well.

in reply to Mx. Eddie R

@silvermoon82 IronFox is pretty good. It's a fork of the recently archived Mull browser.
in reply to Taggart

reading the bolded sounds like a typical web browsing experience. You type something in, the browser gets your analytics. I'm sure Firefox has some cloud based bullshit given that the browser is such a ram hog.
in reply to Taggart

Thanks, broke the world record in setting up LibreWolf just now
This entry was edited (2 weeks ago)
Unknown parent

mastodon - Link to source
Ruben Schade 🇦🇺🇸🇬
@Tubsta @JoeRess @LateNightLinux
They have such potential to be the Good People given how everything is going. So frustrating they’re fumbling the opportunity… again. :/
in reply to Taggart

Great, another thing where I need to look for an alternative now.
in reply to Taggart

Use waterfox. They gut the tracking and fully support jpegxl
in reply to Taggart

With the lay-offs, the refocus on AI, the introduction of adverts and now this, it's like the Mozilla Foundation is carefully doing everything it can to render itself irrelevant.
in reply to Taggart

I want to believe this is just being misintrepted somehow.... but I keep saying that each time Firefox does something.....

Anyways, not regretting switching from Firefox to @zenbrowser (also firefox based)

@Zen
in reply to Taggart

librewolf or waterfox? In favor of the second it has an android app...
in reply to Taggart

Is this from a certain version on, or..? Cause I don't mind stopping updating for a while, I did it already in the past.
in reply to Taggart

I'm skeptical of what exactly this means. Every social media service gets shit for saying you relinquish rights to them for anything you upload but that's kind of the only legalese way that they can allow user generated content. IANAL, so it's hard for me to judge why they would need that text and why they would not.
in reply to Iker

@igimenezblb I think the important distinction here is a site you navigate to and a service you use on the web, and the tool you use to access everything on the web.
@Iker
in reply to Taggart

I am happy I dumped them. Their reasoning is fictitious.
in reply to Taggart

fucking yikes! Does anyone know if they have the same access to forks (the one I have in mind is Tor) or if this only applies if we're using the official Firefox app? I have a feeling it's the latter but better safe than sorry
in reply to Taggart

Oh goddammit why....
Welp, off to something else. Gonna have to check out Vivaldi. Thanks for that @mttaggart, always appreciate a recommendation.
in reply to Taggart

The part about gathering data “to prevent harmful, unauthorized or illegal activity”worries me even more…

mastodon.social/@sarahjamielew…


There is also the incredibly broad "To comply with applicable laws, and identify and prevent harmful, unauthorized or illegal activity." in which Mozilla states they may gather "all data types" - among the defined types include: searches, browsing data (visited URLS), content and any other data.

In support of nebulously defined "identify and prevent harmful," and in response to law enforcement.

That "learn more about" link just goes to a list of definitions.


in reply to Taggart

OK e-mailed legal-notices@mozilla.com

(Note it is a lot more than this one clause where they expand their claimed right to spy on you, and i encourage your e-mails to reflect this where i did not. See Sarah Jamie Lewis' thread, social.coop/@sarahjamielewis@m… )

Anyway what i wrote, before i read that:

Firefox does not have any right to information i enter into the URL address bar or forms on websites

My feedback and suggestion here, absolutely you can use for free.

in reply to benjamin melançon

Which is that this clause is wildly unacceptable, and you need to make very clear that you do not and will not ever spy on people while they browse:

"When you upload or input information through Firefox, you hereby grant us a nonexclusive, royalty-free, worldwide license to use that information to help you navigate, experience, and interact with online content as you indicate with your use of Firefox."

in reply to benjamin melançon

Sounds like a ridiculously overbroad claim so that you can stick "AI" down our throats and advertisements, but with this start you will hand over our private data to a fascist government, too.

And again, that sentence is making a claim to data that was never intended to be shared with Mozilla, that is and must remain solely the private personal communication between the person using Firefox and the website being visited.

in reply to Taggart

Sensitive content

in reply to Taggart

Vivaldi Browser is everything Firefox should have been.

Yes, it is Chromium based, but it does not follow everything Google says or does. For example, Vivialdi has a built-in ad-blocker, but also worked with uBlock to ensure their extension could compliment and work with v3 support in Vivaldi.

You want a good browser? One that works everywhere and is not trying to screw its users. A browser that does not include AI and does not keep calling home like a lost child wanting their mother. You want to use, Vivaldi Browser.

in reply to Taggart

Reminds me of Chrome's "Enhanced ad privacy" in the way this seems to be a form of privacy washing.

Source: ghacks.net/2023/07/01/all-chro…

This entry was edited (2 weeks ago)
in reply to Taggart

Mozilla rejected me as their head of Policy/T&S without even a recruiter reachout interview - So the more I see them fuck up the more amused at them I am 😛
in reply to Taggart

how is this possible? anything i write, upload, input...is basically everything i do in a browser. this includes passwords, media, etc.

fuck ALL the way off, mozilla. now to find some browser that has decent extensions and isnt a right assbag.

in reply to Taggart

I'm surprised to see you spreading FUD like this.

How is this license different than any other license for any other web-based application?

You know how many things your browser interacts with to display what it does and you also know that there are a handful of tools like Firefox Sync or Pocket built into it that interact with backend services that Mozilla runs, and those things probably already had terms like this so....

I'm straining to see any way in which this is an issue other than the fact that everybody in the entire universe is going to make it an issue, because we go through this fucking dance every single time everyone ever sees this language, even though it's used in like every EULA ever and you'd think people would get it by now.

sigh

in reply to mav

@mav I want you to think carefully about the difference between the means of access—the browser—and the site that you choose to access. The language at the browser layer is much more concerning.

Also, I take exception with the "FUD" framing. I have linked only primary sources here. We can disagree about interpretation, but that's not the same thing as FUD..

@mav
in reply to Taggart

So is the issue you're taking here that the EULA is not sufficiently granular, in that it doesn't distinguish between usage for data provided for standard browsing versus data transmitted to built-in services like Sync?

I'm calling this FUD specifically because I think your interpretation of this language, which we really do see almost everywhere, is particularly uncharitable (to put it nicely.)

I'm as frustrated with Moz' governance as everyone else, but I do not think this EULA is some great evil. I think this is probably them trying to have one standard EULA instead of separate EULAs for every damn thing they do, plus they didn't have one at all AFAIK for the data they exchange to provide standard things like CRL lookups and safe browsing checks.

in reply to mav

I guess if you want to say that your beef with it is that this could be stretched to say that every time you submit data to a site you're giving Mozilla a license to use it, but I don't think that's what they intended at all. Moreover, Firefox IS using your data, and if you use Sync, may very well be saving stuff about what you did (depending on what kind of access you did.)

Asking them to clarify is certainly not unreasonable, but this is hardly a "panic lets all switch to Chrome" kind of scenario.

in reply to mav

@mav Respectfully, you are imputing intent where there is none in the language. For one thing, "Sync" shows up nowhere in this paragraph. The language is "When you upload or input information through Firefox." That is broad, and I must assume intentionally broad.

Look, we can disagree on intention, but think defensively. Let's assume Mozilla does want to do gross stuff with my HTTP requests. With this tacit contract, I've agreed to that usage, and any attorney worth a damn could argue so in front of a judge or jury. It's not what they will do; it's what the language could let them do.

@mav
in reply to Taggart

@mav Furthermore, you will note that I did not tell anyone to switch to anything. I merely pointed out that this language is dangerous. And it is.
@mav
in reply to Taggart

in reply to mav

@mav This is a very confusing claim, given that I above linked Vivaldi's Terms, which do not include this seemingly intentionally-vague or expansive language. And those terms satisfy me just fine. So I guess it is possible to satisfy me!

If by "what they acquire," you are referring to the enumerated data in the Privacy Policy, the paragraph in question in the new terms is clear that they are referencing a set of data including, but not limited to, that data. Combined with the expansive "Uploaded through Firefox" language is neither normal nor particularly comforting.

Now, your points on defensive tooling are pure goalpost-moving. Yes, any service can decide to "go evil," as you put it. But look at how Mozilla has been behaving. Why the hell would I give them the benefit of the doubt now?

As far as what's been hashed and rehashed, I cannot recall a time when a web browser, much less an open source one meant to be a paragon of privacy, has included language like this.

I could be entirely wrong! But look at the pattern and tell me I shouldn't be wary.

@mav
in reply to Taggart

This entry was edited (2 weeks ago)
in reply to Taggart

I don’t agree with these terms. I will cease using Firefox at once. Which will be easy because it’s only on a single system. Librewolf is on everything f else.
in reply to Scott Wilson

@scottwilson
@cR0w @da_667

No.

I also quite admire yan and to be honest am surprised they're still involved.

Brave is a crypto scam with a browser wrapped around it, run by a bigot.

Vivaldi is just as good and has none of the creepy baggage.

in reply to Taggart

I'm not sure what these terms mean exactly, but regardless this is why I'm quite happy with Fedora's build of Firefox. A counterweight against ISVs for stuff like this.
This entry was edited (2 weeks ago)
in reply to Taggart

Started using Librewolf instead because the handwriting's been on the wall regarding Firefox and user data/privacy for a while.
in reply to Taggart

I can't think of any respectful reason to expect me to grant non-exclusive wordwide rights to my browsing data of any kind, what the

does konqueror support chrome or firefox extensions

in reply to Taggart

time for a fork, Mozilla no longer has users best interests in mind.
in reply to Taggart

I blogged about this for a wider audience: quippd.com/posts/2025/02/26/mo…

Also open to feedback!

in reply to Taggart

@scottwilson One has to wonder if, one day, Mozilla will just port Firefox to Chromium.
Heck, they have already abandoned Servo.
in reply to Taggart

I actually read the tagline as this;

MOZILLA
Forget: About Your Rights

in reply to Taggart

... So who is making Mozilla afraid of being sued by people uploading stuff to a service marketed as AI
in reply to Taggart

*sigh*
Here we go again. I've had enough with IE ages ago and moved to Chrome. Then to Firefox. Now I'm trying LibreWolf, a fork of Firefox hosted on Codeberg.
in reply to Taggart

@cR0w @da_667 Their built in blocker is not an extension, so it will continue to work as normal afaik
in reply to Taggart

GDPR removal request sent, with the addition that this seems to violate the digital services act in a number of ways. Fun.

I mean, I'm not a lawyer... but @noybeu might want to look into this?

Unknown parent

mastodon - Link to source
Taggart

@Polychrome @lispi314 Yours is a very charitable reading of the clause. But let's consider Mozilla's recent behavior, and ask how much good faith is due. Can you imagine no more expansive interpretation of this language?

I've spent the night reading browser Terms. Not a one includes a clause like this. They do explicitly call out GDPR, which this oddly does not (the Privacy Policy does have appropriate EU affordances). You know what does use this language?

Facebook.

in reply to Taggart

looks like it means they're giving themselves the right to upload the data to the web server that you're choosing to upload the data to.

In other words, they're covering their butt as to their right to do what you're actually intending to do and nothing else but.

What am I missing here?

in reply to Taggart

My credentials on websites. Everything I upload to the cloud. My browsing and search histories.

WTF?

Unknown parent

mastodon - Link to source
Taggart

@Schouten_B I do not agree.

You give Mozilla all rights necessary to operate Firefox, including processing data as we describe in the Firefox Privacy Notice, as well as acting on your behalf to help you navigate the internet.


This means the set of data to which the "license" applies includes, but is not limited to, the data defined in the Privacy Policy. That's why the "when you upload or input information through Firefox" clause is so concerning to me. We don't know the bounds of that expanded set, only that it is expanded.

in reply to Taggart

And I had recently moved to Firefox to get rid of Google and Microsoft browsers. What do I do?
Unknown parent

mastodon - Link to source
Taggart
@Schouten_B Well, they've clarified in that direction, but I still find their rationale bogus, given that no other browser seems to require that language to operate. But hey, at least we can hold them to this.
in reply to Taggart

I won't use a chromium-based browser again, so I might give a Firefox fork a opportunity now
Unknown parent

mastodon - Link to source
Taggart
@Schouten_B What law are you referring to?
Unknown parent

mastodon - Link to source
Taggart

I am certainly not EU law expert, but Article 5, section 1 of 2001/29/EC would seem to obviate this concern:

  1. Temporary acts of reproduction referred to in Article 2, which are transient or incidental [and] an integral and essential part of a technological process and whose sole purpose is to enable:

(a) a transmission in a network between third parties by an intermediary, or

(b) a lawful use of a work or other subject-matter to be made, and which have no independent economic significance, shall be exempted from the reproduction right provided for in Article 2.

This entry was edited (2 weeks ago)
Unknown parent

mastodon - Link to source
Taggart
@Schouten_B What's that even from?
in reply to Taggart

how can open source software have terms of use? The licence prohibits restricting how it is used 🤷‍♀️
in reply to Taggart

This is why I started using LibreWolf, but after only a couple of weeks it stopped working (can't now remember how - clearly time to try it again).
Unknown parent

mastodon - Link to source
Taggart
@Schouten_B Yeah I dunno, this is scoped to the Google Services, aka the applications on the web. And as mentioned, other such services license similarly. But I can not for the life of me find any instance of a browser's own terms doing this.
Unknown parent

mastodon - Link to source
Taggart
@buherator As of today, Mozilla's primary revenue comes from search engine deals, not adtech. That will be true if and until the DoJ's proposed remedies in the Chrome antitrust case are adopted, which would prevent the kind of exclusive deal Google has with Mozilla.
Unknown parent

mastodon - Link to source
Taggart
@Schouten_B I understand that. But the nuance here is where the license for the content is applied: at the service level, or the browser. This reads clearly to me that it's at the service level.
Unknown parent

mastodon - Link to source
Taggart
@rootsnase Based on this, the charitable reading seems to be what they are claiming: they need this license to literally transmit your data via HTTP. But uh, no other browser uses this language, so it's still weird.
Unknown parent

mastodon - Link to source
Taggart
This...makes my point? The enumerated services do not include the browser qua the browser. This is the distinction! Google is not, it seems, claiming a license over all HTTP requests you send anywhere via Chrome. But Firefox now is.
This entry was edited (2 weeks ago)
Unknown parent

mastodon - Link to source
Taggart
@Schouten_B Yeah I see it now. I just missed it because I too am sleepy.
Unknown parent

mastodon - Link to source
Jens Finkhäuser
@Schouten_B It's not about privacy. The language relates to copyright, and it grants Mozilla exactly the uses it states. The broader rationale for it doesn't really matter.
in reply to Taggart

OK, fair enough, so, if I may ask, what is the best alternative to Mozilla/Firefox before I advise my friends to switch from Google Chrome to FF?
in reply to Mani and the Nonos

@maniandthenonos Ain't no best. As this entire conversation demonstrates, browsers are an intensely personal choice. For some, it's a value statement. For others, the choice is purely pragmatic. There have been several mentioned in this thread that prioritize different aspects (privacy, openness, compatibility, etc.). I personally like using Vivaldi, but that's a non-starter for a lot of of people due to its Chromium base. Shop around!
in reply to Taggart

@rootsnase not just weird, ridiculous; if true, it would mean all software should have such a license for doing anything at all, which is of course not the case. The one installing/running the software is the responsible party in terms of processing, and the data does not need to come anywhere near mozilla themselves

sotolf reshared this.

in reply to Taggart

Another US company you can't trust.

More reasons to use EU apps/services like @Vivaldi

in reply to Taggart

1) I kind of like the language, it’s GPL-esque. 2) I dislike the idea of a legal entity having any kind of operation in their behalf on my Linux machine.
in reply to Taggart

Screaming

Sensitive content

in reply to Taggart

servo.org ...the old browser engine project Mozilla started, orphaned and then adopted by Linux Foundation Europe. Probably the only third party that might be a future alternative to the american duopoly. But it as everything else good needs developers.
#servo
in reply to Taggart

Thanks for this.

(FFS I've *just* de-googled / set up FF as my business browser, and started migrating to Protonmail.

To find both are now enshitticorps. Oh well..)

Anyone, how does that fly with EU privacy and data protection laws?

I'm not seeing anything yet. Slow rollout, or highly illegal here??

Unknown parent

mastodon - Link to source
Derek McAuley
@neil @TheVampireFishQueen One @lilianedwards and I did a piece of theatre at #Gikii on this few years back - in the context of the Databox project, a self hosted personal data store - if data never left the device what licence if any did (commercial) SW supplier need, and what GDPR obligations did they have. Not sure we ever actually got to a satisfactory conclusion!
in reply to Taggart

I can switch browsers easily enough. However, I have decades’ worth of email in #Thunderbird. I’m more worried about that. Have they added terms of (dis)service to that app yet?
in reply to Colin Cogle

@colin Thunderbird is, under the hood, a re-skin of Firefox. If Firefox goes, so too does Thunderbird unfortunately 🙁
in reply to Preston Maness ☭

@aspensmonster @colin The Firefox Terms of Use do not apply to Thunderbird or any other products, e.g. Appointment or K-9 Mail.
in reply to Taggart

Like others, I'm trying to figure out what features this could possibly support. The only thing I can think of is the Firefox Sync, so I guess Firefox can use my passwords now? And for Select->Right Click->Translate to English? They get a license to whatever I'm trying to translate
Unknown parent

mastodon - Link to source
Taggart
@buherator They are in adtech, just not as a primary revenue stream. But leaving that aside, compare their Terms with browsers supported by similar models, like Brave or Vivaldi. You'll find this language much more expansive.
in reply to Taggart

the clarification doesn't clarify anything 😞 it is still understandable as "whatever you do with and whatever is passed through the software is ours to do whatever we want"
in reply to corbeau

@c0rb34u It scopes the "license" clause to only the data enumerated in the Privacy Policy. That clause by itself reads as greater than that set, which is problematic.
Unknown parent

@joeyh in the thread:
infosec.exchange/@mttaggart/11…
@gnometsunami @mttaggart


Ope! Got one browser that does.

Thanks to @Schouten_B for uncovering the license language in the extended Google Terms of Service for Chrome.


in reply to Taggart

the clarification is in a blog post, that may not be legally binding. so in my eyes any clarification outside of the ToS is worthless.

If #Mozilla wants to offer AI services or collect and use their users data, this should be a separate opt-in ToS in my opinion, not the terms of the base application.

But TBH #Mozilla is doing too much dumb management decisions these days, so I'm considering to stop recommending it. (colorways, firing #rust and #servo teams, ads for temu and so on)

in reply to Taggart

I think it might have been intended to mean "if you upload copyrighted data using Firefox we're not responsible for any license fees just because you passed it through our software and services."

But I'm sure a good lawyer could twist this in just about any direction they want.

in reply to Taggart

shit company doing shitty things they dont want to do because they need the licence to do what they want to do. Aha Ok now we unterstand...
Unknown parent

mastodon - Link to source
Jens Finkhäuser

@Schouten_B Licensing terms do not require a rationale, they require the correct language. The language in these terms is unambiguous with regards to those terms.

The specifically worded rationale is fluffy. "As indicated by the user's behavior" (TL;DR) is wide open to interpretation with respect to which behavior implies what intent or requirements. In other words, Mozilla has all the legal leeway to grant itself semi arbitrary uses.

So, no, the abstract "privacy" rationale is...

in reply to Jens Finkhäuser

@Schouten_B ... a smoke screen at best.

It's "will nobody think of the children??!" in techbro lingo. Creepy as fuck, and very much a reason to treat Mozilla as the enemy in the battle for the open web.

Unknown parent

mastodon - Link to source
The Vampire Fish Queen
@neil Agreed but I think they are just really really bad when it comes to communication and PR.
Unknown parent

mastodon - Link to source
Jens Finkhäuser
@Schouten_B Oh, I am smart enough to read the ways this can be interpreted, Bas. That's precisely the problem.
Unknown parent

mastodon - Link to source
Jens Finkhäuser

@Schouten_B The precise wording is "to use that information to help you navigate, experience, and interact with online content as you indicate with your use of Firefox"

"indicate" is not "state" or "give consent to". "use" may mean simply starting the browser without interacting with it. "experience" is, by the very nature of the word, subject to interpretation.

This collection of words may mean that by starting Firefox, I "indicate" that I opt into AI training, which an assistant..

in reply to Jens Finkhäuser

@Schouten_B ... can use to enhance my "experience" of search results, without my ever agreeing to this specific use of any data I upload.

It's beautiful, really, if one admires manipulative language which gives you near arbitrary leverage.

in reply to Jens Finkhäuser

@Schouten_B Note also that the privacy notice is referred to as "... including processing data as we describe in the Firefox Privacy Notice, as well as acting on your behalf to help you navigate ..."

So a) it includes processing data as described in the privacy notice, b) it also includes acting on my behalf to *help* me navigate, not to translate my express navigation instruction into practice, but c) the key word is the first, "include".

It's pretty standard US legalese to list...

Unknown parent

mastodon - Link to source
The Vampire Fish Queen

@neil Also agree, I don't think they plan to sale everyone data (atleast not so blatantly), have exclusive rights to any material you upload via Firefox or ban adult content.

Any of that would kill them over night.

in reply to Jens Finkhäuser

@Schouten_B ... known uses ahead of time (done here), but keep the door open for other uses.

The next part about the copyright license notably does not explicitly refer to any specific such use, but stands alongside the previous listed uses. Which is great, because you *infer* it refers only to those, but that's not actually stated there.

Plus, they're open to amendment anyway.

in reply to The Vampire Fish Queen

@TheVampireFishQueen @neil There are a couple of weirdnesses here that I am willing to chalk up to carelessness. But when writing your contracts, that's uh, not awesome as a defense.

But we must consider the alternative, which is that the vagaries in this policy are wiggle room they wanted for one reason or another.

in reply to Taggart

Foss projects in general should be more aware the mayority of their users are going to react negatively to that corpo speak
Unknown parent

mastodon - Link to source
Jens Finkhäuser
@Schouten_B Which first sentence does that magic thing?
Unknown parent

mastodon - Link to source
Jens Finkhäuser
@Schouten_B And you shouldn't mix "legitimate interests" in the GDPR context with copyright licenses. PII is not the same as copyrightable information and vice versa.
Unknown parent

mastodon - Link to source
Jens Finkhäuser

@Schouten_B The digital services act prohibits deceptive patterns. That means when I click a "search" button, a manufacturer may legitimately infer that I wish to search for something. It would be a deceptive pattern (or worse) to also send those search terms for analysis somewhere else *even if* this would improve future searches. Here, explicit and informed consent is required.

So nobody claims a browser should ask for consent of everything, just the shady shit.

Unknown parent

mastodon - Link to source
Jens Finkhäuser
@Schouten_B And that isn't the question now, is it?
Unknown parent

mastodon - Link to source
Jens Finkhäuser
@Schouten_B Read my previous reply. You need to read the actual words of that, not the connections your brain wants to make.
Unknown parent

mastodon - Link to source
Taggart

@Schouten_B @jens Sorry to hop in, but since I've been poring over this for a day now, I think I see where you both are coming from.

The language seems to distinguish what you are licensing and what is covered by the Privacy Policy. That distinction lies in the "as well as" clause. Bas, your gloss is that because they only claim to process data listed in the Privacy Policy, whatever may be in the "as well as," (maybe nothing, maybe something someday) is out of Mozilla's reach. Jens, I think you're reading that to mean the "as well as" data can be processed, uncovered by the Privacy Policy.

Let's leave aside the blog update, which is for all intents not part of the contract.

Functionally, I suspect Bas is close to correct for now. However, it's difficult to imagine that, in drafting, no one read this with the suspicions voiced over the last 24 hours by the public. If we assume the vagueness is intentional, there is a space created for more opt-out (we hope) shenanigans down the road.

in reply to Taggart

What I see is that there is no grammatical connection between the privacy policy stuff and the copyright stuff, and there is no implicit legal connection between processing of PII and licensing copyrightable material. The only connection there is is proximity in the text, and *that* in no way implies the interpretation that Bas is insisting on. Proximity is to logical connection as correlation is to causation.

@Schouten_B

Unknown parent

mastodon - Link to source
Taggart
@Schouten_B @jens The Arc Browser Terms do a very good job: start.arc.net/terms-of-use#:~:…
Unknown parent

mastodon - Link to source
Taggart
@Schouten_B @jens Wow I sure do. This clearly spells out the number and nature of granted licenses. I'll take details over vague blanket statements any time. Also the Account mention is not casual; it's formally defined.
Unknown parent

mastodon - Link to source
Taggart
@Schouten_B @jens I have no idea what change clause you're talking about here.
in reply to Taggart

🤬 thankfully there are enough forks that this will just show Firefox as what it is: a distraction from Google's monopoly.
Time for more Opera in my life.
Unknown parent

mastodon - Link to source
Taggart
@Schouten_B @jens Yeah, again, that does not read to me as vague in the least, certainly not when compared to the Firefox language
Unknown parent

mastodon - Link to source
Taggart

I mean straight up there's a material difference in how the collection policies are framed here. Arc's Privacy Policy opens with the guarantees about what they won't collect from you. Mozilla's has no such guarantee. Moreover, Moz explicitly states that "Browsing data" is collected for marketing purposes, and consent is "as required by law."

Now, back to the new Firefox Terms. Let's say Mozilla decides browser activity like time on site or even search data is important to train an advertising ML model.

Even if your read of the Terms is correct, that kind of processing would be covered under that section of the Privacy Policy. But if Jens is correct, uh oh, we're still covered for that and more because it could be an unenumerated data type that the broad license language now covers. By contrast, Arc's clear guarantees about what won't be collected, combined with the specific license language, remove this risk.

This entry was edited (2 weeks ago)
Unknown parent

mastodon - Link to source
Jens Finkhäuser

@Schouten_B See, I think that's the crux of our problem: you again try to interpret this as somehow related to PII, because in the first part they talk about privacy. I haven't even looked into the privacy question.

The second part, which is explicitly not about PII but copyright, and so wholly separate from the first, literally grants Mozilla "a nonexclusive, royalty-free, worldwide license to use that information" - which refers to anything I upload whatsoever - with no other...

@mttaggart

in reply to Jens Finkhäuser

@Schouten_B... limits in place.

One simple attack scenario here is if I were to e.g. use a web-based editor to write code. It does not matter if I generally publish this code under a FLOSS license, for example, because Mozilla already has permission to that code *but without* any possible extra clauses such as e.g. copyleft related ones.

Any other copyrightable intellectual property I upload they also have rights to. Automatically.

@mttaggart

in reply to Jens Finkhäuser

@Schouten_B This is because copyright is not particularly concerned with fluffy clauses.

"use that information to help you navigate, experience, and interact with online content as you indicate with your use of Firefox."

This part reads like a copyright license restriction, but as I painstakingly laid out before, "as you indicate by your use of Firefox" has quite literally arbitrary headroom for interpretation, and the other parts aren't much better.

FLOSS licenses, which...

@mttaggart

in reply to Jens Finkhäuser

@Schouten_B... thanks to OSI have embraced "we won't tell you what to do" style absolute libertarianism read similarly fluffy, so perhaps you're just used to that.

But more generally speaking, copyright terms can be very precise. I can quite literally restrict the license to use only within five metres of my home, from midnight to 0:13h on the condition that you copy my stuff only in your own blood on parchment made from birch bark, and anything else would not be permitted.

@mttaggart

in reply to Jens Finkhäuser

@Schouten_B So for license terms to be this broad - yes, it does protect Mozilla from litigation, but it also means Mozilla has pretty much all the interpretative power in the world to do with my (copyrightable) intellectual property as they see fit. And it is *not* typical of copyright, which this part leans on, quite the contrary.

So the best possible interpretation I have is that they are currently concerned with collecting AI training data, with no specific use in mind. And...

@mttaggart

in reply to Jens Finkhäuser

@Schouten_B... that is OK, in principle, but this is the part where associating this with non-copyrightable PII by virtue of proximity is highly disingenuous. It suggests that your granting of those broad rights is in your interest, when your interest is nowhere defined here.

Plus, this kind of association by proximity seems like a clear DSA-violating deceptive pattern. It certainly isn't "informed consent" if you were to accept those terms.

Which makes them unenforceable, but..

@mttaggart

This entry was edited (2 weeks ago)
in reply to Jens Finkhäuser

@Schouten_B... shifts the burden to the consumer, i.e. Mozilla in practice receives broad usage rights with little chance of seeing them challenged.

@mttaggart

in reply to Jens Finkhäuser

@Schouten_B Copyright is phrased in terms of restrictions and limitations, because you first grant the right to copy, and then specify how.

Already the phrase "in order to" deviates from how licenses are termed. A decent replacement might be "limited only to uses directly implementing", e.g. navigation.

Maybe this kind of example helps clarify just how open to interpretation those terms are. Because I can most certainly claim that my goal in taking your wallet is to *actually*...

@mttaggart

in reply to Jens Finkhäuser

@Schouten_B... help you protect your money ("in order to"), but it becomes much harder to defend this in the second phrasing unless it's demonstrably and only followed by putting it into a safe.

@mttaggart

Unknown parent

mastodon - Link to source
Taggart

@Schouten_B @jens This is a highly Eurocentric discussion, which is fine, but I gotta tell ya, US jurisprudence is fairly hostile to the consumer in cases such as these. To make it more complicated, depending on what Circuit the case is tried in, it may be contract law or copyright law that holds sway.

natlawreview.com/article/end-u…

Unknown parent

mastodon - Link to source
Jens Finkhäuser

@Schouten_B "use" in copyright is broader than "reproduce".

It doesn't have to be limited to Firefox, because the license text doesn't specify.

@mttaggart

Unknown parent

mastodon - Link to source
Jens Finkhäuser
@Schouten_B Every AI platform certainly has those fluffy copyright terms 😊 @mttaggart
Unknown parent

mastodon - Link to source
Jens Finkhäuser

@Schouten_B It's already well established that caching content, while technically copying, isn't reproduction under copyright law.

It becomes reproduction if the cached content is reproduced/sent elsewhere, but the case law allows this as far as I understand, not in terms of "legitimate interest" (that is business interest), but in terms of "fair use". I'd have to dig up relevant cases, but that discussion is about as old as Napster and settled.

Basically, there is zero need for..

@mttaggart

in reply to Jens Finkhäuser

@Schouten_B... browsers to reserve any usage rights because normal operations such as copying bits to/from a network interface, in-memory in a software or to/from caches is already permitted.

If you note, GPL does not include clauses that you must grant the makers of grep usage rights for sifting through your documents.

It just makes this set of clauses extra weird.

@mttaggart

Unknown parent

mastodon - Link to source
Jens Finkhäuser

@Schouten_B Again, though, that's the point I was already making: it may be the case that if challenged in court, users would always be given preference.

But *until* such a thing happens, there is nothing preventing Mozilla from doing whatever the hell they want. This shifts the burden away from Mozilla to take care to be legally compliant with their use of information over to the consumer. At best, it's irresponsible and and worst it's a deliberate backdoor.

With how much...

@mttaggart

in reply to Jens Finkhäuser

@Schouten_B... legal advice Mozilla can get, this again means at best it's gross negligence not to phrase this stuff better based on legal advice, and at worst it's downright malicious.

There is no option from the consumer side to treat this other than absolutely hostile, and the "clarification" they posted yammers on about "we didn't mean it badly" without retracting those changes or working them over.

It's abundantly clear that the intent is not to change, but to convince...

@mttaggart

in reply to Jens Finkhäuser

@Schouten_B... consumers the changes are in their best interest when they're not. "I didn't mean to hit you, babe, please forgive me". Fuck that abuser logic.

Mozilla at this point is not to be trusted.

Sad, but but wasn't me who made all those dodgy decisions the community has been documenting over the years, so I'm also unable to shed a tiny tear over it.

@mttaggart

Unknown parent

mastodon - Link to source
Taggart

@Schouten_B @jens Serious question: unless you have some insider knowledge, what leads you to think Mozilla, an organization that just stated its intent to develop its AI business/strategy, and is incorporated in the US, built its Terms with EU laws at the top of mind? So far as I know, nobody in the EU was gunning for Firefox because of a lack of Terms.

Conversely, taking the more adversarial reading, this opens the door to potential use of user data down the line. I don't know what the rationale was, but I've seen no evidence to support your interpretation.

Unknown parent

mastodon - Link to source
picofarad

@grillchen that.. looks... normal? firefox does a lot of stuff on your behalf, and explicitly saying so seems alright.

what's the alternative? I use brave too but that's got the same problem, developing a browser is really expensive if you want it to be used by real people instead of nerds.

Unknown parent

mastodon - Link to source
Taggart

@Schouten_B @jens I'm gonna challenge that the scenarios laid out are "mostly legal" in the US. I would describe the use of user data for model training especially as "mostly unlitigated." There are ongoing suits that may establish precedent one way or another, but they have not been decided. And indeed, those cases tend to base their complaints in copyright law, such as the New York Times case against OpenAI.

I'm also gonna push back on the framing that the US government is friendly to corporations here. At the moment, this regime's relationship with tech is fraught at best, with essentially a protection racket holding sway to maintain tech's fealty. But that is distinct from how aby given federal judge may rule.

Now, given all this, I don't think it's crazy to imagine an AI-focused Mozilla taking steps to ensure that any future disputes about model training on user data fall in the realm of contract law rather than copyright law.

Unknown parent

mastodon - Link to source
Taggart
@Schouten_B @jens Yes, we are talking about a speculative future. But I can't imagine how you don't deeper genAI integration is part of their roadmap.
Unknown parent

mastodon - Link to source
Taggart

@Schouten_B @jens Both, really, since neither are spelled out. But tbh it's weird that they haven't said they won't train on user data. Hell, Zoom says so. Notion says so. On the other hand, Meta quietly slipped into their Terms that you license your content for training by using their platforms.

Yes this is speculative. But I have plenty of reason for skepticism, and "No," is not an argument to the contrary.

Unknown parent

mastodon - Link to source
Taggart

@Schouten_B @jens I see plenty of reason to add those terms now.

Let's take as read that neither of us knows what Moz's plans re: AI in Firefox actually are. That also means we don't know their timeline. So from a threat modeling perspective, this language introduces the risk of a dark pattern kind of opt-out consent for the use of user data, similar to how they've handled:

  • Ads
  • Telemetry
  • Chatbot on the sidebar

If my concern is the use of my data in ML processes of any kind, I would say I have ample reason to view these Terms as a potential threat vector.

in reply to Taggart

@Schouten_B @jens To be clear, I'm not saying it's probable, only possible. But possible is enough for many people to be wary.
Unknown parent

mastodon - Link to source
Taggart
@Schouten_B @jens I did read your profile, but did not assume you were on the FF team
Unknown parent

mastodon - Link to source
Jens Finkhäuser
@Schouten_B We knew Google was Evil well before then, too. @mttaggart
Unknown parent

mastodon - Link to source
Jens Finkhäuser

@Schouten_B Language form mental patterns, mental patterns form language.

It's very much in line with the development a lot of tech companies have undergone in the last few decades, with increased enshittification in tow.

To see this having reached Mozilla is to be expected, but still a blow.

And yes, the hit has been made: you do not take my IP rights under the guise of privacy protection and get to offer a lukewarm "just a misunderstanding" reframing attempt. Sorry, but no.

@mttaggart

Unknown parent

mastodon - Link to source
Taggart

@Schouten_B @jens Come onnnn

wired.com/story/google-respons…

Unknown parent

mastodon - Link to source
Jens Finkhäuser

@Schouten_B Yeah, please untag me from this conversation.

@mttaggart

Unknown parent

mastodon - Link to source
Jens Finkhäuser

@Schouten_B Oh yes, they are, and your insistence that the terms say something different from what the words say is starting to piss me off. As long as I can chalk this up to opinion or lack of understanding, I'm fine.

But you keep just repeating your faith in the good intent and optimal interpretations. You're fine to have those beliefs, of course, but I wouldn't consider them actual arguments.

So perhaps it's best to close this conversation here.

@mttaggart

Unknown parent

mastodon - Link to source
Jens Finkhäuser
@Schouten_B I have no belief in malice. I just know contracts must be worded for the worst case, not the best.