Mozilla Slipped a 'Mr. Robot'-Promo Plugin Into Firefox and Users Are Pissed (gizmodo.com)
MarcAuslander shares a report from Gizmodo: Mozilla sneaked a browser plugin that promotes Mr. Robot into Firefox -- and managed to piss off a bunch of its privacy-conscious users in the process. The extension, called Looking Glass, is intended to promote an augmented reality game to "further your immersion into the Mr. Robot universe," according to Mozilla. It was automatically added to Firefox users' browsers this week with no explanation except the cryptic message, "MY REALITY IS JUST DIFFERENT THAN YOURS," prompting users to worry on Reddit that they'd been hit with spyware. Without an explanation included with the extension, users were left digging around in the code for Looking Glass to find answers. Looking Glass was updated for some users today with a description that explains the connection to Mr. Robot and lets users know that the extension won't activate without explicit opt-in.
Mozilla justified its decision to include the extension because Mr. Robot promotes user privacy. "The Mr. Robot series centers around the theme of online privacy and security," the company said in an explanation of the mysterious extension. "One of the 10 guiding principles of Mozilla's mission is that individuals' security and privacy on the internet are fundamental and must not be treated as optional. The more people know about what information they are sharing online, the more they can protect their privacy."
Mozilla justified its decision to include the extension because Mr. Robot promotes user privacy. "The Mr. Robot series centers around the theme of online privacy and security," the company said in an explanation of the mysterious extension. "One of the 10 guiding principles of Mozilla's mission is that individuals' security and privacy on the internet are fundamental and must not be treated as optional. The more people know about what information they are sharing online, the more they can protect their privacy."
Seriously, WTF?!
If they were trying to win back Chrome users, this is a pretty effective way to sabotage their efforts.
I hope they were paid a shitload of cash for this little stun, because it's gonna cost them.
Mod me down with all of your hatred and your journey towards the dark side will be complete!
Did you get paid to ship this? If so, your privacy explanation is the purest bullshit since ajit pai claimed net neutrality repeal helped promote internet freedom.
Good people go to bed earlier.
So I disabled the addon as soon as I read the article, and I am legit mad that Mozilla would do this, but... what does the addon actually do? I didn't notice any difference before disabling it, and I've dug through all the links and nobody seems to be saying what it does.
Even if it was just a blank addon, no effect other than putting what's essentially an ad into my addon list (pun unintended), that would be bad, but it would be less bad than if it actually disrupted the browser in some way.
Mozilla's half-assed apology seems to indicate the addon only starts doing things once you "opt-in", with no mention of how or where one would do that. Which is probably the least evil way you could do this, I'll admit.
Thanks for all the Headzup but I've never seen it in my Add-ons. And it's still not there in v. 57.0.2 64-Bit. Is this maybe just a US thing?
May the lies we live by make us strong, healthy, happy and wise - Kurt Vonnegut.
I noticed the plugin a day or two ago and couldn't remember installing it (I don't watch Mr. Robot though wifey does), but assumed I must have installed it and simply forgot.
Definitely not happy that Mozilla installed it without my express permission. Nothing from me in their stocking this year.
Give a hand, not a hand-out.
(I wonder if this has anything to do with the weird XSS blocking dialog NoScript threw three times earlier today. It was blocking an XSS attempt between two domains, neither of which was open in any browser tab at the time.)
Editor, A1-AAA AmeriCaptions
You know it's crap like this that encourages end-users to find ways to block auto-updates, because of abusive use of it.
Need to reel that BS in, it's not a good idea, auto-updates should be a good thing. Don't be muddying the waters any further, it's getting pretty obnoxious as it is.
This, this, a thousand times this.
Nobody cares about privacy, or really even about security, as long as they get their new fresh modern stuff.
The dream of the web died years ago, and the dream of personal computing is dying right now before our very eyes.
It was inevitable. There is nothing that the corporate shitheads can't co-opt, corrupt, and ruin - the genius of Capitalism at work.
Oh well, it was fun there for a while...
I know a lot of people are going to be upset, I think they're wrong to be. A lot of people have been wondering if Mozilla has turned on their users, if a historic FOSS project has been totally corrupted. I think Mozilla is awesome to include advertising like this - I mean think about it, they're getting paid to advertise for alternatives and forks to Firefox. Plus now we all know for damned sure that Mozilla is a sinking ship and we need to hop on the nearest life raft.
Barclay family motto:
Aut agere aut mori.
(Either action or death.)
Try waterfox, drop-in replacement for Firefox 52 or so.
Were that I say, pancakes?
Chrome? Chrome?! Out of the frying pan, into the fire. I will not have anything to do with any Google product whatsoever.
Mozilla justified its decision to include the extension because "the people marketing Mr. Robot paid us."
The internet has been neoliberalized, and it's not pretty. It was better before corporations took it over. Capitalism screws everything up bad.
Season 1 was nice, after that it just turned into artsy bullshit. I was expecting another post-apocalyptic storyline, except with an actual start to the plot. I got a season of mildly amusing schizophrenia followed by batshit communist bullshit.
Waterfox is a little better, but Palemoon isn't bad.
The extension was able to be installed if you had the "Firefox Studies" checkbox selected. To prevent Firefox Studies from installing extensions on your behalf:
You can have my insecure porn viewing apparatus when you pry it from my cold dead (left) hand.
A little Googling leads me to think the Looking Glass add-on was installed via the Firefox built-in Shield Recipe Client Feature, also described here: Firefox/Shield/Shield Studies, which is documented as:
Shield is a Firefox user testing platform for proposed, new and existing features and ideas.
Shield Studies is a function of the Shield project that prompts a random population of users to help us try out new products, features, and ideas.
I have this disabled via the following pref.js settings:
// Disable Shield Recipe Client
user_pref("app.shield.optoutstudies.enabled", false);
user_pref("extensions.shield-recipe-client.enabled", false);
It must have been something you assimilated. . . .
So, Mozilla, a company that claims privacy is important to them and in their web browser product Firefox, silently mass auto-force-installs an add-on into already installed software, using a built-in feature that almost no one knows about (that comes enabled by default), that promotes the television show Mr. Robot, in which just about everyone in that show routinely breaks the law, breaks into other people's computers (installing backdoors, trojans and root kits), and violates people's privacy. Nice going.
This is precisely why I fret about every new FF release wondering what new crap, I mean "feature", I need to disable. For fucks sake Mozilla, just concentrate on making a good *web-browser*. Seriously, what's next - [spoiler] an axe to the head?
It must have been something you assimilated. . . .
after seeing mr robot crap at def con 24 (rofl), this isn't that surprising i guess. i wonder how much actual money the showrunners shell out for this.
"They were pure niggers." – Noam Chomsky
OMG! Please! Pull the other one! Show me the money! Let's see the contract that provoked this. I hope it was worth it.
And I have to ask, is there any reason at all to use Firefox when we have a perfectly good 20 year old browser at our fingertips?
“He’s not deformed, he’s just drunk!”
Mozilla justified its decision to include the extension because Mr. Robot promotes user privacy. "The Mr. Robot series centers around the theme of online privacy and security," the company said in an explanation of the mysterious extension.
Have they even *watched* the show? I'm not sure the word "promotes" is apt here - unless they mean "promotes violating user privacy". The protagonist Elliot Alderson has violated *everyone's* privacy and broken into everyone's computer, as has just about everyone else who owns a keyboard -- though they all do seem to get really pissed when *their* privacy and systems get violated, hmm ...
It must have been something you assimilated. . . .
Nobody cares about privacy, or really even about security, as long as they get their new fresh modern stuff.
These more or less have to go hand in hand. Things are changing so fast and so broadly that the only way to keep up is to make that trade off. Of course the smart move might be to not keep up.
Exactly. It has become a fashion industry. What people will give up in order to be shiny and modern is astonishing. Oh well.
Fake. No such thing.
Don't be apathetic. Procrastinate!
Putting Yahoo as the default search setting was worse.
Just shut up and give us our free browser.
“Common sense is not so common.” — Voltaire
Time for an add on to block pushed content?
Domestic spying is now "Benign Information Gathering"
Mozilla certainly didn't handle this as well as they should have but it's important to keep sight of the bigger picture: switching to another comparable browser risks switching to a nonfree browser. I hope (for your own software freedom) you won't make that bad choice in a hasty emotional decision. That would be quite ironic: to give up on a free browser that can be made better because of an immature stunt ostensibly aimed at increasing user privacy.
Real user privacy simply cannot be had with nonfree browsers. No matter how willing and able you are, you aren't allowed to know what the nonfree browsers do, alter them to suit your needs, or help others by sharing your improvements. Don't throw out your own software freedom because of Mozilla's ill-handled stunt.
Digital Citizen
Is this a v57 only issue? I never upgraded to because v57 doesn't support one of my addons and didn't get this installed. How ironic that the new version installs an addon that nobody wants.
The Greek Trojan horse was free too.
There's always Chromium, you know.
good thing Firefox has been broken on Manjato for 2 months
Fun part. In your spiel, you misspelled "communism". This movement to spy on every citizen through backdoors of every kind imaginable started in China as a tool to maintain population control by their Communist Party about two decades ago. This funded a lot of research into knowhow, that was quickly put into use in China.
And once people in power realized just how easy it is to spy on everyone, for profit and/or control, it snowballed very quickly and since most of the ground work was already done, all you needed was to put the tech into essentially everything. But don't put the blame on capitalism for this. This is very much a communist initiative.
Opera 12 was closed source and had better privacy than any browser ever made.
sudo apt-get purge firefox-esr
Sorry folks, but Slashdot just revealed it's true colors. The chorus of OMG! WTF! down with Mozilla, witnessed in this thread is, sadly, proof that the Slashdot audience has become those who the hackers of yore were hacking against. Is there not an ounce of rebellious spirit left on this site? Whether you like the show, Mr. Robot, or not, I just can't fathom the reaction here.
For those those who say this is the last straw for Mozilla-good riddance, don't let the door hit your ass on the way out.
Look there are lots of things I could complain about regarding Firefox, but a chance wanderer coming to Slashdot would think this site is full of nothing but chrome shills and misanthropes who actually *hate* Free software. What made this site so interesting in days long ago was the tension between the rebellious spirit of Free Software and those who made their living working for the man or trying to make a living selling proprietary software. Nowadays corporate shills and libtards reign supreme on this site and the very notion that technology can actually be a source of societal change is completely and utterly lost.
Well duh maybe that's why most here don't even get what Mozilla is, what it represents and how much it actually changed the world around us.
But oh my God they rendered my extension useless, oh my God one of my 80 tabs is leaking memory, or Oh my God it takes a full 1.7 seconds to launch on a modern computer.
Oh well I guess I am just a fanboy, forgot to check the mail and get my check for promoting not only Firefox but Mozilla as a an organization, foundation and corporation. Am I the only idiot here who jumped for joy back in January of 1998 when the mozilla source code was made free and downloaded it just so I could see the code?
My guess is that anywhere from %30-50 of all currently existing jobs in software development wouldn't even exist without Free Software, and Mozilla did more to promote and garner mainstream acceptance of Free Software than the GNU movement ever dreamt of. In all likelihood there would be no Google, Facebook, Twitter, Amazon etc. without the courage and commitment that founded Mozilla. Alas without Richard Stallman and the GNU movement there probably would never have been a Mozilla.
Long live Mozilla
Blah blah non-free blah blah. At least I know where I stand with Google.
With Mozilla I'm never quite sure. I saw an update the other day, well spin the barrel and pull the trigger, what did they screw up today.
Things are changing so fast and so broadly that the only way to keep up is to make that trade off.
What an odd thing to write. We used to compensate people who provided new things we liked to have by paying them.
The reason privacy is dying is because invading privacy has become profitable, and that in turn is because it provided a way to monetize people using a service or enjoying some digital content online without them having to do anything or even necessarily realising what was going on.
Google and Facebook, with their culture of spying-for-ads, and Apple, with its app store culture of software-costing-$3-is-expensive, have much to answer for.
If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
Things aren't changing fast. What is the difference between the web now and 10 years ago? Nothing. Just more ads.
There are forks of Firefox with more sense than this. Plenty of free options available. This is typical for free software, after all - when the maintainer gets too drunk on power, you fork.
...Mozilla justified its decision...
The decision cannot be justified. Period. Full stop. Are the completely wrong people in charge of, and making decisions at, Mozilla? Do those people care not one iota about what the customers want? OK, that last question was rhetorical because these past few years Mozilla has shown a stunning indifference to what the Firefox users want. Stunning indifference.
I'm on the Firefox nightly beta channel and it apparently doesn't install this plugin.
I'm on 57.0.2 and haven't got the said extension. Even the main article hasn't mentioned the update version.
At least I know where I stand with Google.
For my education (please), where do you stand with Google? I'm looking for an answer in a context larger than a rehash of this (admittedly upsetting) Mr Robot thing.
- First they ignore you, then they laugh at you, then ???, then profit.
Where I stand with Google is they collect a whole lot of information. This information is their critical bread and butter, it's their equivalent to the recipe for coke. They use this information to provide services to advert companies and to provide services to me with the benefit of knowledge that gives their services an edge over others. Their core competence is the strategic management of information.
Where I stand with Google is that they don't pull stupid shit like this. They protect my privacy by only selling aggregated services. The same can't be said for most other companies who's core business is not information management, as such they have no incentive not to sell my data in its raw form.
Google also has a LONG history of managing data, and in that long history they have shown to be quite trustworthy with it. They have from the start been quite consistent in their actions, unlike say Mozilla the bastion of privacy and openness suddenly doing stupid shit like this (and it's not the first time either).
Mozilla is a wolf in sheep's clothing.
Google is a wolf in wolf's clothing.
Blah blah non-free blah blah. At least I know where I stand with Google.
With Mozilla I'm never quite sure.
Right, with Google, your privacy is always getting screwed. With Mozilla, you're sure that sometimes your privacy is going to get screwed over without your knowledge (or with it), but sometimes you'll get these weird periods where they don't screw you over at all. Much preferable to getting fucked all the time with Google!
What an odd thing to write. We used to compensate people who provided new things we liked to have by paying them.
Yup, the Internet definitely changed that.
The default assumption is that things are "free" and you have to put up with advertising. Advertising gets more invasive the more money that needs to be involved. It's because we decided that we don't need to pay for the newspaper anymore, we just get it for free.
If only there was some criteria for slashdot posts.
And the males there would be too excited.
I guess that's one way to defeat those sorts of guys.
When a pervert masturbates at you, acting offended is what they want. Instead, masturbate back! It will freak them out and ruin their fun.
switching to another comparable browser risks switching to a nonfree browser.
Horse shit. If it is Free Software it will be labeled as such. Details about that are in the license.
Free Software users don't just accidentally stumble and land locked into a proprietary product, that isn't how choice and freedom work.
I am sick of having "experiences" pushed in my face by marketing drones who think I need to know what's "cool" or "interesting." The "experience" I'm really interested in is a browser that functions properly, doesn't crash, supports standards, and which doesn't eat all of the available memory or CPU. I'm even willing to PAY for something like that. If the management team at the Mozilla Foundation has time and resources to surreptitiously load unwanted extensions hyping some television show on the browser, they sure as hell have the time and resources to fix some of the more egregious and annoying bugs.
I sure hope Firefox isn't about to plummet into "form over function" irrelevancy like Skype recently did ("The most expressive Skype ever!"). Bugger "expressive" or "experience"...just make the damned thing work properly.
I trust google with my data, but I don't trust their browser to have the configurability I desire, nor can I trust them to let me make my own changes if necessary.
So I trust them a lot more in the browser, than on the browser.
Mozilla may be a wolf in sheep's clothing, and Google may be a wolf in wolf's clothing. I like wolves just fine. But I don't want my computer to act like a wolf. It doesn't even matter which clothing it wears if I already know they're both wolves.
Which is why I'm not going to update Firefox every again; when my version has some security problem causing me to want an update, I'll select a fork. Easy, easy, easy. My computer is like a sheep, and I it's shepherd; it rests in the pastures of my choosing.
I agree. It's a legitimate beef. The outrage is useful, but I also believe that we as consumers of the product should not expect that it will always be created without our best interest in mind.
The problem with quotes on the internet, is that nobody bothers to check their veracity. -- Abraham Lincoln
I completely agree. I just can't get all that outraged when I know I'm the product, that someone wants to make money from it. It's good that its been found and the information published. Frankly, their "explanation" (read: excuse) doesn't ring true to me at all.
The problem with quotes on the internet, is that nobody bothers to check their veracity. -- Abraham Lincoln
* turn off all the telemetry, crash reports, and sharing of diagnostic information that you can, everywhere you can (apps, OS, browsers, etc.). If you run Windows 10, good luck
* whenever a field says "optional", don't fill it in. This goes for paper as well as virtual. Never share full SSNs, no matter what the form says.
* opt out of all the data sharing you can do and get off all the lists you can - whether Internet-based, phone call, or even letters. Budget time to periodically do this
* get free email addresses and give those out if you have to register. Give out your crappy VoIP number that you don't need and give that out if you have to. It's better than a fake number because it's actually yours (and some losers out there actually use a phone number like a unique identifier)
There's a lot more that can be done, but this is the absolute minimum and you don't have to be technically savvy to do these things. You may still lose the information that you had no choice in sharing, but at least they can't lose what they never had. Regardless of what you do, privacy is dead and has been for a long time. If you want any chance at that, you're going to have to do things like use Tor/Tails (and keep in mind that there are significant functionality trade offs when you go down that road). Ironically, this starts to get into Mr. Robot territory.
And speaking of irony, yes I do realize that in posting this I violated my own rule. But I guess it's worth taking the hit if anyone is inspired.
If your eye is in your left hand whilst you are viewing porn then you really are doing it wrong.
Waterfox - a Firefox fork with legacy extension support, security updates and better privacy by default.
Actually it's not getting screwed, because Google are one of the few companies I trust to keep my information entirely to themselves and not wholesale sell it to a third party.
Again: I know where I stand with a company that has been consistent. I don't with a company that seems to come up with new stupid ideas every few months.
As for getting fucked? Yeah not feeling it. The other amazing thing about Google is for all the information they have gathered over the past 20 years they've done very little actual fucking. We don't hear an endless string of cases of data breaches, no leaks of personal information, no Google employees getting caught going through people's records, no people finding software fubars breaking up marriages due to strange suggestions, they don't send maternity product adverts to families of teens who haven't revealed they are pregnant, all in all I'm actually feeling a bit left out of the outrage. Maybe they just forgot to fuck me?
What they did do is provide a whole lot of products and services based on the information they collect that makes my daily life easier. But maybe that's what you're talking about when you say getting fucked? Heck I know my wife enjoys a good fucking, so maybe you were talking about the positive aspects.
Ironically, it looks like some of the better newspapers and magazines are now making some of the most successful transitions to a subscription/paywall model online. Several of the organisations that produced original, high quality content in the offline world are now able to do so in the online world, still funded by real money from real readers. No doubt it helps that the target audience for these publications is probably both relatively wealthy and interested enough in good information and analysis to pay for it.
What drives me crazy as a software and web developer is when you get people expecting anything you make, no matter what it does or how much work is necessary to make it happen or how much it costs to produce any original content it includes, to be basically free if it's accessed as a web site or no more than a dollar or two if it's standalone software. In a world of $1 torch apps and low budget, free-to-play games loaded with pay-to-win in-app purchases, consumer expectations for what it takes to produce something original and significant are wildly out of sync with the real world, which means a lot of the time you simply can't do it any more and the cheap junk with indirect revenue models is all that's left.
If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
I'll add this to my list of reasons why I'll never use the new versions of Firefox.
Actually it's not getting screwed, because Google are one of the few companies I trust to keep my information entirely to themselves and not wholesale sell it to a third party.
So because you're personally OK with Google's spying ways, that means everybody should be OK with it?
I could not agree with this more.
Capitalism is an economic system, not a system of governance. Communism on the other hand is both an economic system, and a system of governance by the simple necessity of totalitarian governmental control to achieve the economic "flattening" of population.
As a result, capitalism has no intrinsic interest to spy on people, unlike communism which needs to maintain control over people to maintain the system. The reason why capitalism ended up producing the systems for communist regimes and eventually migrated them to Western governments is in the fact that capitalism attempts to find the most economical way to meet any needs that can be profitable to meet.
That means that once the needs of communist and other totalitarian regimes are met, the know how becomes available to much less totalitarian regimes, including capitalist ones as essentially a surplus.
So because you're personally OK with Google's spying ways, that means everybody should be OK with it?
No. Please read the thread from the top, it'll save you the embarrassment of posting irrelevant garbage next time.
It is obvious to me that such a move (installing a piece of software without asking the user) is a breach of trust.
Why did they do it? Are they THAT stupid? Or was the sum payed to Firefox THAT big?
I re-read the thread from the top. I don't see how it renders my question irrelevant. Care to explain?
Let me highlight:
At least I know where *I* stand with Google.
Look English may not be your first language but understanding the difference between personal and collective pronouns is like the first lesson you lean in every language. It may be time for you to go back to basics and understand why someone talking about what they think doesn't automatically apply a requirement to third parties.
That my friend is why your post is irrelevant. At no point did I talk about anyone but myself. At no point did I ask someone else to do anything, ... except when I asked you to try and follow a conversation without applying a faulty generalisation that never existed in the conversation in the first place.
Thank you. It might have been easier and faster if you just stated your counterargument instead of trying so hard to be insulting that you ended up being obtuse.