this post was submitted on 10 Dec 2024
135 points (98.6% liked)

Firefox

1058 readers
291 users here now

The latest news and developments on Firefox and Mozilla, a global non-profit that strives to promote openness, innovation and opportunity on the web.

You can subscribe to this community from any Kbin or Lemmy instance:

Related

Rules

While we are not an official Mozilla community, we have adopted the Mozilla Community Participation Guidelines as far as it can be applied to a bin.

Rules

  1. Always be civil and respectful
    Don't be toxic, hostile, or a troll, especially towards Mozilla employees. This includes gratuitous use of profanity.

  2. Don't be a bigot
    No form of bigotry will be tolerated.

  3. Don't post security compromising suggestions
    If you do, include an obvious and clear warning.

  4. Don't post conspiracy theories
    Especially ones about nefarious intentions or funding. If you're concerned: Ask. Please don’t fuel conspiracy thinking here. Don’t try to spread FUD, especially against reliable privacy-enhancing software. Extraordinary claims require extraordinary evidence. Show credible sources.

  5. Don't accuse others of shilling
    Send honest concerns to the moderators and/or admins, and we will investigate.

  6. Do not remove your help posts after they receive replies
    Half the point of asking questions in a public sub is so that everyone can benefit from the answers—which is impossible if you go deleting everything behind yourself once you've gotten yours.

founded 2 years ago
MODERATORS
top 30 comments
sorted by: hot top controversial new old
[–] [email protected] 16 points 21 hours ago

DNT is going to give a false sense of security.

  • like leaving your shop door open when you go out for lunch and posting a sign saying 'Don't come in here and steal'.

It only works for websites who respect it, but leads users to think they're somehow 'protected'.

[–] [email protected] 7 points 22 hours ago

Privacy focussed engineers add DNT feature to browsers...

Marketeer assholes: hey, another tracking data point!

[–] BananaTrifleViolin 132 points 1 day ago (2 children)

Good, it's about time the lie of Do Not Track was put to bed. It gives people a false sense of control over their data and privacy - the intention was good but if it's not enforced then it makes people think they've done something to protect their privacy when they have done nothing.

[–] [email protected] 43 points 1 day ago

plus it was another data point for profiling people based on their browser settings.

[–] x00z 25 points 1 day ago (1 children)

It was also possible to be used as part of a fingerprint.

[–] [email protected] 10 points 1 day ago

Its removal is as useful in preventing fingerprinting as its presence was in protecting privacy.

[–] [email protected] 7 points 1 day ago

In fact, sadly, DNT can be used to track user because only few users enable it.

[–] [email protected] 30 points 1 day ago (5 children)

This is sad and yet another step backwards for Firefox. Yes, not many websites honored it, but some did and automatically set cookie preferences accordingly. There should've been more lobbying for this to become legally binding within the EU instead.

[–] [email protected] 11 points 1 day ago* (last edited 1 day ago)

It did basically nothing and just made you easier to identify and gave false sense of privacy. Good riddance imo

[–] TheTwelveYearOld 42 points 1 day ago (1 children)

It was a double-edged sword. While websites could honor it, it could also be abused as another data point for fingerprinting.

[–] [email protected] 12 points 1 day ago (1 children)

Even more reason to make it legally binding.

[–] [email protected] 2 points 17 hours ago (1 children)

How are you going to prove that this particular metric was used to fingerprint? That's the issue I have - you can identify cookies, pixel trackers etc but there's no way to prove whether a site uses a flag you send anyways. And enforcing something that can't be proven is really hard - currently, not only the easy rules are enforced.

[–] [email protected] 1 points 12 hours ago (1 children)

If it was law to abide to the Do Not Track setting, then a leak about a company dishonoring this would simply face massive fines, which is usually enough encouragement for them to abide.

[–] [email protected] 2 points 12 hours ago (1 children)

So they just set up hosting for the site or service in a locale that doesn't have those laws.

Now what?

[–] [email protected] 2 points 12 hours ago

That does not matter. If you operate within the EU then you have to abide to EU law.

[–] [email protected] 1 points 21 hours ago

Yeah, and I've been seeing more lately...

At least the forks will probably keep it...

[–] ocassionallyaduck 1 points 1 day ago

It was like wearing a technicolor badge with flashers that said "don't look at me" while playing the sound from Inception.

It made you more trackable because the entire ad industry ignored it. While there were a true, TRUE handful of sites that respected it, those are never the sites usually it was meant to deal with.

[–] [email protected] 1 points 1 day ago (1 children)

Presumably it's easier to lobby for something that's already legally enforced elsewhere. And sometimes lobbying is just unsuccessful.

With a reasonable alternative available, removing the additional fingerprinting vector seems like the best idea to avoid tracking. The few good actors can look at the Global Privacy Control instead, so there's literally no downside here.

[–] [email protected] 1 points 1 day ago (1 children)
[–] [email protected] 1 points 13 hours ago

GPC? It's different because there's already a jurisdiction that legally enforces it.

[–] [email protected] 21 points 1 day ago* (last edited 1 day ago) (3 children)

How about the rare sites that respected it 🤔

[–] [email protected] 10 points 1 day ago (1 children)

If you wish to ask websites to respect your privacy, you can use the “Tell websites not to sell or share my data” setting. This option is built on top of the Global Privacy Control (GPC). GPC is respected by increasing numbers of sites and enforced with legislation in some regions. To learn more about this, please read Global Privacy Control.

So those sites can look at that.

[–] [email protected] 5 points 1 day ago

Ohh it's forced by law in some countries, sounds better ngl.

[–] [email protected] 30 points 1 day ago

If you respect it odds are that you aren't part of the problem to begin with.

[–] [email protected] 11 points 1 day ago (1 children)

why would small sites track you to begin with?

[–] [email protected] 3 points 1 day ago (1 children)

Talking about odysee,broadcomm,at&t,etc

[–] [email protected] 3 points 1 day ago (1 children)

so not small at all. i see you corrected the post too.

the main response to that is: how do you know they respect it?

[–] [email protected] 2 points 1 day ago* (last edited 1 day ago) (1 children)

Odysee it says in their privacy policy when they detect do not track is on they wont track you,At&t and boradcomm they have a system that sees the signal and declines tracking automatically

[–] [email protected] 5 points 1 day ago (1 children)

that doesn't mean anything, since it's all server side there's no way to verify. that's the problem with the dnt header. all it is is an extra data point.

also, fwiw i would not trust a service like odysee to abide by it's own policy at all, considering its history.

[–] [email protected] 1 points 1 day ago