5 ms·

Oh yeah. It’s going to be super difficult to guess who I am when I log into example.com and it redirects me to example.com/profile/igorpartola. Nothing to see h

Oh yeah. It’s going to be super difficult to guess who I am when I log into example.com and it redirects me to example.com/profile/igorpartola. Nothing to see here. Nothing at all.

482794793792894 9y ago
It's described here, how they deal with that sort of stuff: https://gist.github.com/solso/423a1104a9e3c1e3b8d7c9ca14e885e5 https://gist.github.com/solso/423a1104a9e3c1e3b8d7c9ca14e885...
- Vinnl 9y ago
  To summarise: they're not going to send which URLs you visit. However, they can set up specific experiments, and will send the results. Thus, they could set up an experiment "did users first visit example.com and later example.com/profile/igorpartola, and then have only you report that to be the case. That example is of course not that likely and thus troublesome. What worries me, though, is the described experiment "what search terms have led to users switching search engine", and then reporting the search engine. They acknowledge this problem, but the response is "at least that's better than gathering that data server-side". True, but it's still too much data, I think.
floatingatoll 9y ago
We don’t want to know who you are. We obsess over not knowing who you are. None of us want to know who you are. I know this is of little assurance, but all the same.
- kuschku 9y ago
  Have fun dealing with ALL the 16 Landesdatenschutzbeauftragten taking a very close look at you. Considering that all this tracking has to be opt-in under German law (I talked with the Landesdatenschutzbeauftragte of my state about your "experiment" here already, and they confirmed it), I’d say you can expect quite some trouble with the way you’re running this shit.
  - embik 9y ago
    Please follow up with this, if Mozilla does not understand anything short of the law this might be the only way to make them believe they are actually doing privacy a disservice.
    - kuschku 9y ago
      I will, I’ll continue discussing this on monday with them. And, in contrast to Mozilla, the Landesdatenschutzbeauftragte actually uses PGP email.
  - Feniks 9y ago
    True. Americans tend to forget the EU has very different privacy and consumer protection laws. Either out of ignorance or arrogance.
  - 482794793792894 9y ago
    Collecting personally identifying information has to be opt-in. They don't collect personally identifying information.
    - kuschku 9y ago
      That is for the Datenschutzbeauftragte and the courts to decide, if your IP and your entire browsing history combined is personally identifying or not. But even if it is not, hopefully the resulting media presence is enough to either kill Mozilla, or to ensure everyone at Mozilla that considers this a good idea is fired.
      - 482794793792894 9y ago
        They don't either collect the IP. They receive it, simply because a network communication has to take place, but they don't store it. And while they do collect your browsing history in fuzzied form, it's intermixed with other people's browsing history, therefore cannot either be used to identify you. And yes, at the end of the day, it's up to the Datenschutzbeauftragte and the courts to decide, but I really do think that you delude yourself, if you believe this will go anywhere. They'd have locked up the entirety of Google and Microsoft multiple times already.
- rambojazz 9y ago
  These are just promises and don't mean anything. If you want to be trusted, you need to offer proofs. I will never use your products, and I'll probably stop using Firefox too because I'm tired of all the shit they are pouring in.
  - deleted 9y ago
    [deleted]
  - 482794793792894 9y ago
    The proofs are in the blog post. The code is linked and the statements in the blog post are official statements from Mozilla, therefore if it was factually inaccurate, they could be sued over misleading customers.
    - rambojazz 9y ago
      I didn't mean proof of Mozilla involvement with Cliqz. I meant proof that their system will not screw me.

Oh yeah. It’s going to be super difficult to guess who I am when I log into example.com and it redirects me to example.com/profile/igorpartola. Nothing to see here. Nothing at all.

482794793792894 9y ago

It's described here, how they deal with that sort of stuff: https://gist.github.com/solso/423a1104a9e3c1e3b8d7c9ca14e885e5 https://gist.github.com/solso/423a1104a9e3c1e3b8d7c9ca14e885...

Vinnl 9y ago
To summarise: they're not going to send which URLs you visit. However, they can set up specific experiments, and will send the results. Thus, they could set up an experiment "did users first visit example.com and later example.com/profile/igorpartola, and then have only you report that to be the case. That example is of course not that likely and thus troublesome. What worries me, though, is the described experiment "what search terms have led to users switching search engine", and then reporting the search engine. They acknowledge this problem, but the response is "at least that's better than gathering that data server-side". True, but it's still too much data, I think.

floatingatoll 9y ago

We don’t want to know who you are. We obsess over not knowing who you are. None of us want to know who you are. I know this is of little assurance, but all the same.

kuschku 9y ago
Have fun dealing with ALL the 16 Landesdatenschutzbeauftragten taking a very close look at you. Considering that all this tracking has to be opt-in under German law (I talked with the Landesdatenschutzbeauftragte of my state about your "experiment" here already, and they confirmed it), I’d say you can expect quite some trouble with the way you’re running this shit.
- embik 9y ago
  Please follow up with this, if Mozilla does not understand anything short of the law this might be the only way to make them believe they are actually doing privacy a disservice.
  - kuschku 9y ago
    I will, I’ll continue discussing this on monday with them. And, in contrast to Mozilla, the Landesdatenschutzbeauftragte actually uses PGP email.
- Feniks 9y ago
  True. Americans tend to forget the EU has very different privacy and consumer protection laws. Either out of ignorance or arrogance.
- 482794793792894 9y ago
  Collecting personally identifying information has to be opt-in. They don't collect personally identifying information.
  - kuschku 9y ago
    That is for the Datenschutzbeauftragte and the courts to decide, if your IP and your entire browsing history combined is personally identifying or not. But even if it is not, hopefully the resulting media presence is enough to either kill Mozilla, or to ensure everyone at Mozilla that considers this a good idea is fired.
    - 482794793792894 9y ago
      They don't either collect the IP. They receive it, simply because a network communication has to take place, but they don't store it. And while they do collect your browsing history in fuzzied form, it's intermixed with other people's browsing history, therefore cannot either be used to identify you. And yes, at the end of the day, it's up to the Datenschutzbeauftragte and the courts to decide, but I really do think that you delude yourself, if you believe this will go anywhere. They'd have locked up the entirety of Google and Microsoft multiple times already.
rambojazz 9y ago
These are just promises and don't mean anything. If you want to be trusted, you need to offer proofs. I will never use your products, and I'll probably stop using Firefox too because I'm tired of all the shit they are pouring in.
- deleted 9y ago
  [deleted]
- 482794793792894 9y ago
  The proofs are in the blog post. The code is linked and the statements in the blog post are official statements from Mozilla, therefore if it was factually inaccurate, they could be sued over misleading customers.
  - rambojazz 9y ago
    I didn't mean proof of Mozilla involvement with Cliqz. I meant proof that their system will not screw me.