7 ms·
So is that a backdoor into my prefs? How can I check if Normandy is active on my installation?
by chinathrow 8y ago
So is that a backdoor into my prefs? How can I check if Normandy is active on my installation?
- verdandi 8y agoType about:config in the address bar and search for 'app.normandy.enabled' flag.
- DoctorOetker 8y agohere the flag is true but the extensions are still unsupported
- Yoric 8y agoIt may take a little time for the partial fix to be distributed.
- inferiorhuman 8y agoWell that's interesting. I see Normandy enabled, but if I go to the "Privacy and Security" section of the preferences page I see all the data collection and use stuff disabled. There's no obvious way to disable the Normandy back door. Oh well, at least we don't have another season of Mr Robot spam to look forward to.
- deleted 8y ago[deleted]
- AsyncAwait 8y ago> There's no obvious way to disable the Normandy back door. ??? It's a publicly documented feature with a publicly documented way to disable it.
- brynjolf 8y agoWith an obscure name and no correlation to all the other spying and backdoor ING Mozilla are doing. Is this really the best option tog etaprivacy focused browser? I think this is all very worrying.
- awful_waffle 8y agoCan you elaborate on what 'other spying' Mozilla does? Do you mean their telemetry?
- brynjolf 8y agoSpying was the wrong word. But yes, the telemetry. The google analytics that are hidden on the extensions page, that only listen to the Do not track, but not the turn off telemetry checkbox. Sadly it just doesn't seem to stop.
- fjsolwmv 8y agoIt's named after a world famous beachhead of an invasion. The name isn't that obscure for a feature that invades the userbase with a takeover.
- AsyncAwait 8y agoI am not sure what 'spying' Mozilla is doing, but I agree this should be better named and better highlighted.
- rectang 8y agoPresumably the logic is something like: if (studies.enabled) { if (normandy.enabled) { ... } }
- yabatopia 8y agoNot so in Firefox for Android. No normandy to find.
- megous 8y agoSomething with a public wiki page describing what it does exactly is hardly a backdoor. Also here's the code for the server: https://github.com/mozilla/normandy https://github.com/mozilla/normandy
- tssva 8y agoThe wiki entry evidently doesn't describe what it does because according to the wiki entry it allows for the enabling and disabling of preferences. The updating of a certificate is beyond what is described in the wiki. Mozilla should follow up with a post describing exactly how Normandy works and the full capabilities it gives them.
- megous 8y agoSo search elsewhere if you want more info. All code is available.
- tssva 8y agoUsers shouldn't have to search and then be able to understand the code found for such a feature. When a remote capability such as this exists it is Mozilla's responsibility to document how the feature works and the exact capabilities it gives them. Instead of doing so they have produced a wiki entry which appears to falsely describe the capabilities of this remote feature by stating it is used to change default preference values.