Skip to content(if available)orjump to list(if available)

Mozilla rewrites Firefox's Terms of Use after user backlash

robshep

We need to get behind Mozilla and Firefox for the simple reason it is the last bastion on the path to omni-chrome

Those who care very deeply about very tight privacy have enough niche options.

But I want there to be browser that has enough privacy to be sustainable so there’s a reliable option for me to recommend to family members etc which is holds enough market share for websites to test against.

If Firefox’s market share dips any lower website makers won’t support it - testing only against the homogeneity of chrome/edge/safari and then it will become a death spiral and humanity will have taken a step backwards.

It’s a case of use it lose it.

thomassmith65

If we need to do anything, it's get behind Ladybird, and put up with a Firefox fork for the next 12-24 months as a 'daily driver'.

Mozilla has little enthusiasm for developing its actual web browser, and doesn't seem to like its users very much.

For the past decade, Mozilla has made one bad choice after another, and every time it blows up in their faces, their takeaway is that they failed to properly 'educate the customer'.

Mozilla should just get out of the way. If Google Legal didn't need them, they already would be out of the way.

nopcode

Why is Ladybird going to be more successful than all the other failed browsers?

LightHugger

I've been optimistic on ladybird after watching the speed of progress with tests in their monthly youtube updates, they are quite well presented.

Ladybird is also not ideologically captured by anti freedom extremists with self contradictory beliefs. Mozilla refuses to allow anyone to donate to firefox development because they demand the right to redirect funds you give them towards discriminating against people they don't like.

thomassmith65

The makers of other browser had either worse incentives, or were bad at getting attention, or couldn't execute, or offered just a reskinned Chrome/Firefox, or included too many avant-garde features that nobody asked for, or existed back when Firefox was liked enough to make them irrelevant.

xtanx

> If we need to do anything, it's get behind Ladybird

and servo please ...

spinningslate

> Those who care very deeply about very tight privacy

> that has enough privacy to be sustainable

These are the key phrases. Mozilla has hitched its wagon to advertising. Behind all the bluster over last week, the underlying direction is clear. They bought Anonym [0] and Ajit Varma, the new VP of Product for Firefox and source of the updates, is ex-Meta. It's reasonable to assume that he's there, in part, because of advertising expertise.

Some will see Anonym's "privacy-powered advertising" as "enough privacy" and the only viable way to sustain Firefox without Google's annual cash injection.

Others won't buy that, believing that a browser can be built without relying on advertising. Ladybird is taking this approach - so we'll find out.

> If Firefox’s market share dips any lower website makers won’t support it

This is the risk the exec team must know they've taken. Specifically: what proportion of the current Firefox user base exists because of the historic pro-privacy stance, and what percentage of that will leave because of the advertising-based future?

[0] https://www.anonymco.com/

--

EDIT: addedd missing reference

seba_dos1

> Others won't buy that, believing that a browser can be built without relying on advertising. Ladybird is taking this approach - so we'll find out.

I'm afraid that we'll find out indeed and end up with no Ladybird and no Firefox either.

godelski

I'm with you, I really am. I've been on Firefox for nearly two decades, even the shitty years. But I still think this was a foreseeable issue and even the claim that "there was confusion" only shows a disconnect.

If you make a move like this you need to announce it in advance. You announce it loudly! You need you recognize that users concerned with privacy are looking for canaries. So when you have to put a canary down you fucking tell people before and don't just wait for them to find a dead canary. Of course people are going to freak out, that's what canaries are for.

bjord

I agree completely that something needs to change procedurally—this can't be allowed to happen again

BSDobelix

>We need to get behind Mozilla and Firefox

No we need to get rid of Mozilla (the org and the company), transform/fork Firefox and Thunderbird to a community project with (maybe?) a Foundation behind like FreeBSD or Blender.

Mozilla's CEO's and Manifesto writers did nothing to support Firefox but fill their own pockets and hype the AI train, I really wonder how much money goes directly into the development of Firefox, if we compare it to the Linux Foundation supporting Linux (the Kernel) it's about 3%, it's probably even less for Mozilla.

bjord

if that were truly (sustainably) possible, I'd support it, but imo that'd just be signing ff's death warrant

side note, thunderbird is already independent and democratically-managed by the community (as of a few years ago). the way I understand it is that they effectively just use mozilla's resources for legal, logistical stuff

BSDobelix

>if that were truly (sustainably) possible, I'd support it, but imo that'd just be signing ff's death warrant

I really don't think so, have a look at the ladybird browser:

https://ladybird.org/#sponsors

Or even Servo:

https://servo.org/

Zealotux

I just wish I could get enthusiastically behind Mozilla, right now I stand behind them in spite of their leadership.

Timshel

For the share issue we are already there, with Firefox+Linux so many websites started to just block, usually with chrome at least a captcha is still offered.

With the current board and directors and focus I don't see any ways Firefox will gain share in the future (or not any that I really care about), and I certainly have no interest to support the current goals ...

For the privacy part Mozilla has been sitting on features like containers for years with no improvements. At this point I believe Mozilla ending might be better since it would shake things up ...

TwoNineFive

> We need to get behind Mozilla and Firefox

That's some bizarre upside-down-world Stockholm Syndrome thinking on display here. That or you are a paid PR influencer working on behalf of Mozilla. Just absolutely astonishingly weird psychological behavior.

Mozilla is violating user privacy. They are the bad guy. You don't ask the bad guy for help. You punch them in the face. These guys are making it worse, not better, and helping them will only make privacy worse, not better.

There are already multiple forks for Firefox and destroying Mozilla as an organization would greatly help one or more of them take off and carry the banner of true enabling privacy for the user, which Mozilla is not doing.

robshep

No it's realism.

ALMOST EVERYONE is voilating user privacy to some extent. That's the price to pay for free software. It sucks, but how do we climb out of that reality?

Punch the bad guy in the face if you like, YOU have options, but once FF is sunk, the the only provider most people can turn to for the stuff they need is Chrome.

If Mozilla/FF is the bad guy in your analogy then Chrome must be an atroticy-committing omni-cidal megalomaniac, which correct me if i'm wrong, is not better.

If you understand the privacy landscape and don't want to get involved you don't have to. I'm on a multi-container, multi-privacy extension, private-search setup because I roughly understand the environment. But I'm certainly not recommending that setup to my parents.

In my view MZ/FF is the least worst of the VIABLE alternatives and has the best chance of success. Sinking Mozilla's firefox in favour of ladybird or brave but none of these will ever have the marketing collaterall that mozilla has/had to be anything other than niche, until they are bought by Meta or Amazon or (you get me)

Most banking websites that most people need to use don't give a fuck about niche browsers and actively agent-sniff to reduce their support and security footprint. Whining down the phone to megacorp's customer support that "you don't want to use Chrome on privacy grounds" and "they really should support ladybird" will not be the mighty hammer of resistance you think it is.

I don't have a better suggestion and so I'm willing make a deal with a bad guy it means I don't have to install Chrome on my mother's PC.

JohnFen

> once FF is sunk, the the only provider most people can turn to for the stuff they need is Chrome.

There are a number of FF forks available as well.

chownie

> Mozilla is violating user privacy.

They have changed literally nothing except the FAQ. The "selling" is describing behaviour they already do and have been doing for years. They set the default search engine to Google, this is now considered selling user data.

> There are already multiple forks for Firefox and destroying Mozilla as an organization would greatly help one or more of them take off and carry the banner of true enabling privacy for the user, which Mozilla is not doing.

You do realize that if Mozilla dies then every single one of these forks dies with it? Surely?

None of the teams working on these forks actually do any core browser engine work. Without Mozilla you are an ECMAScript update or a new web standard away from your fork of choice becoming a brick.

nickthegreek

I have yet to see where Mozilla confirmed that is the only thing they are doing with data. The ToS gives them more power than that. They could limit that by updating the ToS. But they are not doing that.

112233

Huh? You do understand that Firefox is just a single executive decision away from becoming a chromium skin? In order to forward-think, proper-size and upward-achieve , so that limited funds can be utilized with most impact etc.?

mdp2021

Please, directly skip to the real announcement:

https://blog.mozilla.org/en/products/firefox/update-on-terms...

The actual content:

> [Given that the definition of "selling" in legal terms can be slippery, we must be aware of not falling in cases like the following:] In order to make Firefox commercially viable, there are a number of places where we collect and share some data with our partners, including our optional ads on New Tab and providing sponsored suggestions in the search bar. We set all of this out in our Privacy Notice. Whenever we share data with our partners, we put a lot of work into making sure that the data that we share is stripped of potentially identifying information, or shared only in the aggregate, or is put through our privacy preserving technologies (like OHTTP)

troupo

This was discussed before on HN.:

> in some places, the LEGAL definition of “sale of data” is broad and evolving. As an example, the California Consumer Privacy Act (CCPA) defines “sale” as...

And then they go on to describe what a common-sense definition of a sale is. There's nothing broad or slippery about the example, so yes, they basically say "we're going to sell your data"

chownie

This leaves out the important part, nothing has actually changed. This is entirely a rewording for what they're currently doing and have been doing for years.

If it's such an outrage worthy subject why did no one explode about this when they added the sponsored links years ago?

troupo

> why did no one explode about this when they added the sponsored links years ago?

There was a lot of discussion and consternation about this as well.

nickthegreek

The nothing has actually changed cannot be known. There is no transparency here. This is just what you think based off of their weirdly worded statements. Many people were outraged over the sponsored links here on this very site.

BSDobelix

>"we're going to sell your data"

And:

>>This includes processing your data as we describe in the Firefox Privacy Notice. It also includes a nonexclusive, royalty-free, worldwide license for the purpose of doing as you request with the content you input in Firefox.

So now we can use your photo of your birthday party that you sent via webmail... but don't worry, we don't own it, you just gave us a "non-exclusive, royalty-free, worldwide license".

chownie

> So now we can use your photo of your birthday party that you sent via webmail

Please read the second half of the text you quoted, where it says "for the purpose of doing as you request with the content you input in Firefox."

I cannot find a nicer way to say this, but a lot of people in these threads are essentially winding themselves up and then producing rubbish like this to fuel their own anger.

Mozilla have been clumsy sure, but this collective tantrum as a response makes zero sense especially now with given context it's clear they're not doing anything they haven't been doing for years.

zoobab

No thank you. Fork.

distances

There's no chance I would be able to recommend some Waterfox or Iceweasel to family or friends. Current status is Chrome or Firefox, and there's a long long way ahead for anything else to become relevant. Death of Firefox would mean immediate death of all the forks too.

nickthegreek

Zen is perfectly usable by your family.

chownie

You're forking the FAQ? Because that's the only thing that's actually changed here.

rhdunn

This is even more confusing. I understand that the browser needs to know my primary language and will send that as part of the HTTP requests (e.g. as part of the Accept-Language header) in order to operate ("To provide you with the Firefox browser"). I don't know why Mozilla needs a license for this.

They are not clear where/how the data is being used. For example, why are "Unique identifiers" and "Interaction data" part of "To provide you with the Firefox browser"?

From "Interaction data": "This is data about how you engage with our services, such as how many tabs you have open or what you’ve clicked on." -- Why is it necessary to track how many tabs I have open in order to provide the browser to me? -- That isn't something they need to send via HTTP to make websites function. If it is for telemetry and improving the browser, that should be a separate section.

braiamp

> You give Mozilla the rights necessary to operate Firefox. This includes processing your data as we describe in the Firefox Privacy Notice. It also includes a nonexclusive, royalty-free, worldwide license *for the purpose of doing as you request* with the content you input in Firefox. This does not give Mozilla any ownership in that content.

They are saying that you give a license to Firefox to do as you request. That's all. The language is explicit and explain the relationship between you and the product when you use it. The product behaves as your agent, and would need permissions to do so. Every browser implies this, Firefox just was explicit with it.

rcxdude

It still doesn't make sense unless that info is going via mozilla's servers. Software running on your PC doesn't need permission to process and send data that you are giving it, to send it to the places you intend.

chownie

Mozilla legal apparently think otherwise. They have been spooked by the recent California legal movements which can apply the label "sell" to behaviours we wouldn't normally consider selling user data, like setting the default search engine.

rhdunn

I'm looking at the https://www.mozilla.org/en-US/privacy/firefox/#lawful-bases section of the new privacy document which goes into more detail on what is collected and why, along with the "Types of Data Defined" section above it that describes the different data.

It doesn't differentiate when that data is stored locally, when it is sent to (and collected by) Mozilla, and when it is sent/accessed by the website you are on/using.

Likewise, because "Interaction data" covers both "how many tabs you have open" and "what you’ve clicked on" (as well as ad related information in the next paragraph) it can cover things like handling anchor ping attributes (what you've clicked on) which are nec1essary for Firefox to work w.r.t. that feature vs. collecting ad related information ("Click counts, impression data, attribution data, how many searches performed, time on page, ad and sponsored tile clicks.") which is not.

With those broad information categories they are combining different use cases from using the browser, telemetry, and collecting data useful for advertising.

Another example: in the "To adapt Firefox to your needs" section they explicitly call out sending location data to websites like Google Maps but the data collected is listed is "Any data type" not "Location".

I know there are other cases, but the specific wording is vague and unclear. For example that section mentions being able to "clear your browsing history". As a developer I can infer that that is related to JavaScript APIs being able to access your browsing history, but that isn't called out in this section so it is unclear that this is what they are referring to.

apothegm

They use that telemetry to understand how users in aggregate use the product so they can prioritize maintenance and improvements. Like any other software.

Anyway, you can disable that telemetry in the prefs UI with a single click.

cedws

Why does Mozilla keep falling into the trap of bringing these crappy MBAs into their leadership? Promote real ambassadors of privacy and open software instead of people like the current interim CEO, who is ex-McKinsey. If they can't manage that then maybe it's finally time to let Mozilla go. Andreas Kling's browser project sounds like it's coming along well.

squarefoot

They're essentially owned by Google through a contract both cannot refuse, because it keeps the "Google isn't a monopoly" narrative while allowing Mozilla to stay afloat, therefore I wouldn't expect them to do anything that could harm the agreement with Google, like real competition.

Khaine

How about the directors and Management who let this happen, resign. We need another phoenix to rise from the ashes of Firefox.

claudex

They are currently with an interim CEO and searching for a new one https://blog.mozilla.org/en/mozilla/a-new-chapter-for-mozill...

BSDobelix

Let's fork it and call it Firebird...oh no wait ;)

robshep

I am old enough to get that.

bjord

that seems wildly excessive

Khaine

Why? Mozilla has been circling the drain for a while with their poor decisions, and questionable privacy practices all while proclaiming to be all about user privacy. Now they have flushed any goodwill they had right down the toilet.

As leaders, they need to be held accountable for their poor decisions. Which means they need to fuck off, and let new people come in and rebuild trust.

bjord

and no, a decent manager shouldn't have to literally review every little thing every single one of their employees does

obviously something needs to change here procedurally, but micromanagement across the entire board is not the answer

and therefore firing management for this is not really solving anything other than satiating the bloodlust of the mob

bjord

yes, this was a big screw-up all things considered, but crucifying people for a (relatively straightforward, imo) comms issue just seems...borderline violent?

> For instance, Mozilla said it may have removed blanket claims that it never sells user data because the legal definition of “sale of data” is now “broad and evolving,” Mozilla’s blog post stated.

> The company pointed to the California Consumer Privacy Act (CCPA) as an example of why the language was changed, noting that the CCPA defines “sale” as the “selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by [a] business to another business or a third party” in exchange for “monetary” or “other valuable consideration.”

mind you, I sincerely doubt this ever even came across the desks of leadership—if it's legalese compliance bullshit, why would it?

powersnail

It seems like what is happening is not Firefox now making a pivot to the privacy unfriendly side, but Firefox has already been selling data, but in a manner that---for whatever strange reason---they didn't consider to qualify as "selling data", and hence the original Terms of Use included the promise of "We never sell your data". Then lawyers came along and told them that this just wouldn't fly legally, and they have to change their terms now.

Even now, Firefox still doesn't consider what they do "selling data", and they are forced to change the wording only because the laws are weird.

Frankly, I just don't see how sharing data to partners to make yourself commercially viable can be construed as not selling data. In their own words, what Firefox does is:

> In order to make Firefox commercially viable, there are a number of places where we collect and share some data with our partners, including our optional ads on New Tab and providing sponsored suggestions in the search bar.

We could argue about whether the laws are slippery or over-reaching, or how responsible or not Firefox has been handling user data. We could argue about how much anonymization and aggregation of data reduce privacy concerns.

But to argue that the above action is not "selling data" is in my view not a reasonable position.

rickdeckard

Wow, quite black and white views here.

Despite all the justified doubts and concerns, it's also worth noting that Mozilla runs one of the few independent browser engines left, with limited ways to actually fund it.

When they're not here anymore, there aren't many parties left to argue about web standards in favor of a free web.

So I'd keep watching them as always, without painting them as evil just because of some misstep...

SapporoChris

Original

"The Firefox Browser is the only major browser backed by a not-for-profit that doesn’t sell your personal data to advertisers while helping you protect your personal information."

Now just says.

"The Firefox Browser, the only major browser backed by a not-for-profit, helps you protect your personal information."

This is not some misstep, it is the breaking of a promise.

rickdeckard

If I remember correctly, more than 50% of their revenue came from Google Search in the past.

They are now at 2.6% market-share, I can imagine that revenue-stream is making it hard to keep the lights on.

It's sad that it came to this, but somewhat understandable as they don't really have these other lucrative side-businesses of Google, Apple, Microsoft.

FWIW, the change is that the new wording allows them to build a revenue-stream based on telemetry data, while the original wording prohibits them from such a financing model at all.

Outside of Europe this might be significant, but in European legal context the difference is that they could now ASK you if you allow them to use your telemetry to create revenue, and only do it IF YOU AGREE (small nudge to push for privacy-friendly laws).

eagle2com

I would say they are changing the promise, not breaking it. Breaking it would have been if they sold data with the old description (which is not the case, is it?).

JohnFen

Since they claim that they are not changing the promise, only being more clear about it, the implication is that they did sell data under the old description.

chownie

The definition of the word "sell" has a different meaning in a post-AI world and in specific California have a new bill adding some other contexts to it, so despite not actually doing anything differently (go and look at the Firefox source tree if you don't believe me) they have to change their wording.

ETA: Setting Google as their default search engine in exchange for funding from Google has been cited as an example of "selling user data to Google", if you'd like a concrete example of what I'm talking about.

nickthegreek

> The definition of the word "sell" has a different meaning in a post-AI world

No it doesn't.

Ferret7446

Does it matter if they weren't arguing in favor of a free web to begin with? Quite the opposite in fact; their stated stance is they want to remove people they disagree with from the web.

novemp

> The company pointed to the California Consumer Privacy Act (CCPA) as an example of why the language was changed, noting that the CCPA defines “sale” as the “selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by [a] business to another business or a third party” in exchange for “monetary” or “other valuable consideration.”

...yeah? That's pretty straightforward.

hysan

Dupe? I didn’t see anything from this article that wasn’t already in the previously posted Mozilla blog posts which have already been submitted here.

thinkingemote

Optics. Mozilla bungled the optics, then in their reaction, bungled it some more! They do not look good here. We respond to looks.

In objective reality it's a bit of much ado about nothing, but in today's world it's optics and perception that rules. It's subjective.

As another comment says it takes forever to gain trust and a moment to lose it all. Trust is subjective.

godelski

People need to resign

It's insane to think Firefox would ever have gone this route? How disconnected is management? The move would be suicide! A major reason people use Firefox is because of privacy. The other major reason is because a user's privacy conscious child or grandchild installed it for them. That's your whole fucking userbase!

It's a shame too because they had the opportunity to double down on privacy. What with Apple caving to governments.

I was a fanboy who's been with you for nearly two decades You can check my comment history. I defended you through tough times, I've donated, and for what? A slap in the face.

You had it going with the rust rewrite and just floundered on every opportunity. You made Thunderbird pretty good and gave many hope, then floundered. You have some great devs, let them make great software

So where do we go now? What browser that isn't just a different color of chrome? Safari? No. Ladybird? Sea Monkey?

dwoldrich

They sold out, Mozilla in name only. My plan is to switch my family to librewolf on Desktop and Brave on Mobile until better options appear. I'm a bit bitter about it. I've often been the only person in my org that insisted on Firefox.

_Exactly_ as you say, like a virus, whenever I visit family I will be switching out their browsers from Firefox to the next best thing.

JohnFen

> For instance, Mozilla said it may have removed blanket claims that it never sells user data because the legal definition of “sale of data” is now “broad and evolving,” Mozilla’s blog post stated.

> The company pointed to the California Consumer Privacy Act (CCPA) as an example of why the language was changed, noting that the CCPA defines “sale” as the “selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by [a] business to another business or a third party” in exchange for “monetary” or “other valuable consideration.”

Wow, I'm actually stunned that Mozilla straight-up admits that they're selling user data here and that's why they removed that language.

Good for them for being honest. Bad on them for selling user data.