3 ms·

I agree, which is why I asked what data is being collected. If it's like, "a user launched Firefox version 105.0.1 and has Pocket disabled," I've got a tough ti

I agree, which is why I asked what data is being collected. If it's like, "a user launched Firefox version 105.0.1 and has Pocket disabled," I've got a tough time caring. Telemetry is genuinely useful information. But if it's like, "a user with IP 123.45 opened MyFavoriteReligion.com and spent 20 minutes at that domain" then it's bad news. So, I'd like to know what's actually being transmitted.

EE84M3i 4y ago
I'm not sure I follow your example, because any telemetry event will always include the IP as it's required to establish a connection.
sfink 4y ago
https://www.mozilla.org/en-US/privacy/firefox/ https://www.mozilla.org/en-US/privacy/firefox/ answers that question, though admittedly it's not a quick answer that can be easily summarized. It's basically "a user at IP x.y.z.w launched Firefox version 105.0.1 and has Pocket disabled" where the IP is not collected other than in the server logs: "When Firefox sends data to us, your IP address is temporarily collected as part of our server logs." Actual URLs are treated very carefully. The only ways I know that they could be leaked: (1) there is limited exposure via the SafeBrowsing stuff, and (2) if you crash then URLs could be swept up in the crash report and visible to privileged people at Mozilla. Or if you manually submit a profile and don't anonymize it (there's a checkbox to submit URLs that is checked by default), but you have to go out of your way to do that. There very well could be other ways, but browsing history is treated as very sensitive data for both legal and moral reasons. Personally, I would not trust Mozilla to be unable to answer the question "has this IP address ever used Firefox?", especially if under subpoena. The IP is temporarily in the server logs, it's used for coarse location information, etc. I doubt anyone is all that interested in asking that question, though.

EE84M3i 4y ago

I'm not sure I follow your example, because any telemetry event will always include the IP as it's required to establish a connection.

sfink 4y ago

https://www.mozilla.org/en-US/privacy/firefox/ https://www.mozilla.org/en-US/privacy/firefox/ answers that question, though admittedly it's not a quick answer that can be easily summarized. It's basically "a user at IP x.y.z.w launched Firefox version 105.0.1 and has Pocket disabled" where the IP is not collected other than in the server logs: "When Firefox sends data to us, your IP address is temporarily collected as part of our server logs." Actual URLs are treated very carefully. The only ways I know that they could be leaked: (1) there is limited exposure via the SafeBrowsing stuff, and (2) if you crash then URLs could be swept up in the crash report and visible to privileged people at Mozilla. Or if you manually submit a profile and don't anonymize it (there's a checkbox to submit URLs that is checked by default), but you have to go out of your way to do that. There very well could be other ways, but browsing history is treated as very sensitive data for both legal and moral reasons. Personally, I would not trust Mozilla to be unable to answer the question "has this IP address ever used Firefox?", especially if under subpoena. The IP is temporarily in the server logs, it's used for coarse location information, etc. I doubt anyone is all that interested in asking that question, though.