Hacker News new | past | comments | ask | show | jobs | submit login

From the article:

> In order to make Firefox commercially viable, there are a number of places where we collect and share some data with our partners, including our optional ads on New Tab and providing sponsored suggestions in the search bar.

And remember, they’re citing CCPA’s definition as meaning “… in exchange for ‘monetary’ or ‘other valuable considerations’”. This is exactly what people mean by “selling”.

It’s not the innocent thing you’re contemplating, about a browser doing its job. It’s specifically about things like serving ads, making that browser “commercially viable”.

Mozilla is stopping claiming they’re never selling your data because they’ve been selling your data for the last few years.




Selling ads isn't even the problem. They could do that and still truthfully, legally claim they never sell your data.

Mozilla is helping perpetuate the illusion that online advertising necessarily includes collecting and selling data about the users who are shown the ads.


AFAIK they do the opposite: They've pioneered ways to target advertising without your data leaving your computer.

See for example,

https://www.adexchanger.com/privacy/mozilla-acquires-anonym-...

"That shared mission is predicated on the notion that advertising and privacy are not – or at least don’t have to be – mutually exclusive."

And it goes into detail on the investment and technology in that area.


If they've pioneered such technologies, they aren't using them. Their Privacy Notice enumerates many types of data that Mozilla collects and passes along to "partners"/advertisers. For example:

> Mozilla collects technical and interaction data, such as the position, size, views and clicks on New Tab content or ads, to understand how people are interacting with our content and to personalize future content, including sponsored content. This data may be shared with our advertising partners on a de-identified or aggregated basis.

There's a lot of tracking data that does leave the user's computer, and Mozilla is trying to justify it by assuring us it's sufficiently anonymized and aggregated—assurances they would not need to make if the data wasn't changing hands.

It's also silly to suggest that targeting advertising without tracking users needs to be "pioneered". It's obvious that Mozilla could have the browser download this month's list of sponsored search keywords and have the browser check search strings against that list, without going off-device. There's no innovation required to implement that. All the attempted innovation is focused on how to exfiltrate data in a form that they can get away with selling.


> There's a lot of tracking data

It's meaningless data to you: It doesn't say what you click on, just where and how big the ads are, and how many times you click. It doesn't identify you or reveal anything about you, except that you clicked on some unknown ads.

> It's also silly to suggest that targeting advertising without tracking users needs to be "pioneered". It's obvious that Mozilla could have the browser download this month's list of sponsored search keywords and have the browser check search strings against that list, without going off-device.

These are the words of someone who hasn't done it. Look at the article; what advertisers want and what the privacy-destroying competition does is much more sophisticated than what you describe. For example,

Anonym also has technology that allows ad platforms and advertisers to securely share encrypted impression and conversion data within a trusted execution environment for attribution, causal lift measurement and lookalike modeling. (A trusted execution environment is the secure area of a main processor where code can be run safely and in isolation.)

To be fair, the major ad platforms have long offered attribution and measurement solutions, Mudd said. “But they required the data to come into their system,” he added. “In this world, that doesn’t have to happen.”


> It's meaningless data to you: It doesn't say what you click on, just where and how big the ads are, and how many times you click. It doesn't identify you or reveal anything about you, except that you clicked on some unknown ads.

I'm not sure what you mean by "meaningless data to you". Obviously, the data Mozilla is collecting, aggregating, and selling is meaningful to the buyers. And you're straight up lying about the extent of the data, directly contradicting Mozilla's Privacy Notice.

> Look at the article; what advertisers want and what the privacy-destroying competition does is much more sophisticated than what you describe.

Obviously? What I was describing was how it's possible to target an advertisement without doing any user tracking. What the advertisers want to do and are doing is tracking users as much as they can get away with. And that includes the ad tracking company Mozilla bought.


> you're straight up lying

You are going too far in your 'pile on Mozilla' performance.


> It's meaningless data to you

I decide whats meaningless to me. Not you. Not mozilla.


Is that "obviously" true? Like if they had ad targetting and also let buyers of ads see aggregate results of impressions or something, that might already fall into user data being sold, right?

At what point does user data stop being user data? I don't think aggregation is enough in some of these discussions, but maybe I'm wrong.


> Mozilla is stopping claiming they’re never selling your data because they’ve been selling your data for the last few years.

If that's true then it sounds to me like there's some liability to sue for in California courts against Mozilla. I wonder if EFF would be interested


CCPA/CPRA has no private right of action for this kind of thing. Only the CA AG can bring forth claims, and penalties would be paid to the state, not individuals, in that case.




Consider applying for YC's Summer 2025 batch! Applications are open till May 13

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: