Re: Firefox Hello new data collection

2016-04-05 Thread Joseph Lorenzo Hall
On Tue, Apr 5, 2016 at 12:05 PM, Chris Hofmann wrote: > Thie passage in https://www.mozilla.org/en-US/privacy/firefox-hello/ also > would lead me to believe that the contents of my communication with another > user (including shared URLs) are encrypted (and would be

Re: Firefox Hello new data collection

2016-04-05 Thread adam
I think this should be abandoned in favour of an optional survey for Hello Users 05.04.2016, 17:06, "Chris Hofmann" : > On Mon, Apr 4, 2016 at 3:01 AM, Romain Testard wrote: > >>  Firefox Hello has its own privacy notice (details here >>  

Re: Firefox Hello new data collection

2016-04-05 Thread Chris Hofmann
On Mon, Apr 4, 2016 at 3:01 AM, Romain Testard wrote: > > Firefox Hello has its own privacy notice (details here > ). > > Its unclear to me reading the follow through link to the TokBox Privacy Policy. ->

Re: Firefox Hello new data collection

2016-04-05 Thread Randell Jesup
>The privacy review bug is >https://bugzilla.mozilla.org/show_bug.cgi?id=1261467. >More details added below. >> On 04/04/2016 10:01, Romain Testard wrote: >> >>> We would use a whitelist client-side to only collect domains that are >>> part of the top 2000 domains (Alexa list of top

Re: Firefox Hello new data collection

2016-04-04 Thread Chris Hofmann
On Mon, Apr 4, 2016 at 1:35 PM, Ian Bicking wrote: > On Mon, Apr 4, 2016 at 10:44 AM, Gijs Kruitbosch > > wrote: > > I put some comments about data bias against international users and the .edu domains and possible data leaks that could result

Re: Firefox Hello new data collection

2016-04-04 Thread Ian Bicking
On Mon, Apr 4, 2016 at 10:44 AM, Gijs Kruitbosch wrote: > On 04/04/2016 11:01, Romain Testard wrote: > >> The privacy review bug is >> https://bugzilla.mozilla.org/show_bug.cgi?id=1261467. >> More details added below. >> > > See response at the bottom. > > On Mon, Apr

Re: Firefox Hello new data collection

2016-04-04 Thread a...@imgland.xyz
However it is concerning to have code in an Open source project that is1.Mostly undocumented2.Could be confusing to privacy-aware users3.Harvests data without proper privacy notices4.Has been added prematurely without proper documentation and serves no purpose like say, dom.webcomponents.enabled ,

Re: Firefox Hello new data collection

2016-04-04 Thread Mark Banner
On 04/04/2016 16:49, a...@imgland.xyz wrote: I don't know much about Mozilla's privacy but in my opinion feel the need to immediately remove it from Firefox and push a new beta build I can understand your concern, however, please understand that this logging functionality is currently

Re: Firefox Hello new data collection

2016-04-04 Thread Georg Fritzsche
On Mon, Apr 4, 2016 at 5:44 PM, Gijs Kruitbosch wrote: It also seems like you filed the privacy review after the functionality was > implemented and is now shipping, which per > https://wiki.mozilla.org/Privacy/Reviews seems like it is too late to > incorporate

Re: Firefox Hello new data collection

2016-04-04 Thread adam
I don't know much about Mozilla's privacy but in my opinion feel the need to immediately remove it from Firefox and push a new beta build 04.04.2016, 16:45, "Gijs Kruitbosch" : > On 04/04/2016 11:01, Romain Testard wrote: >>  The privacy review bug is >>  

Re: Firefox Hello new data collection

2016-04-04 Thread Gijs Kruitbosch
On 04/04/2016 11:01, Romain Testard wrote: The privacy review bug is https://bugzilla.mozilla.org/show_bug.cgi?id=1261467. More details added below. See response at the bottom. On Mon, Apr 4, 2016 at 11:23 AM, Gijs Kruitbosch wrote: On 04/04/2016 10:01, Romain

Re: Firefox Hello new data collection

2016-04-04 Thread adam
I agree with chofmann in that a simple survey request when users open Hello would probably work since Mozilla is trusted by alot of people. 04.04.2016, 16:22, "Chris Hofmann" : > It also seems like you haven't explored other alternatives to get the data > you are after,

Re: Firefox Hello new data collection

2016-04-04 Thread Chris Hofmann
It also seems like you haven't explored other alternatives to get the data you are after, have some theories around what results you might expect, and what possible out comes will be pursed once you get the data. Have you looked at other studies like this and many more that tell about general

Re: Firefox Hello new data collection

2016-04-04 Thread Romain Testard
The privacy review bug is https://bugzilla.mozilla.org/show_bug.cgi?id=1261467. More details added below. On Mon, Apr 4, 2016 at 11:23 AM, Gijs Kruitbosch wrote: > Hi, > > It's very concerning to me that you have not answered the obvious > question: what domains are

Re: Firefox Hello new data collection

2016-04-04 Thread adam
This isn't technically about the data collection but it would be better if there was some sort of api that web developers could implement on sites like games so instead of regular chat things like co-op and game events could be streamlined into Hello itself 04.04.2016, 10:02, "Romain Testard"

Re: Firefox Hello new data collection

2016-04-04 Thread Gijs Kruitbosch
On 04/04/2016 10:01, Romain Testard wrote: Implementation bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1211542 Because this bug does not link to it: where is the bug for the privacy review of this collection? Judging by the people you CC'd I assume you got one, but where is it? ~ Gijs

Re: Firefox Hello new data collection

2016-04-04 Thread Gijs Kruitbosch
Hi, It's very concerning to me that you have not answered the obvious question: what domains are collected? All of the ones visited while the browser is running? The ones visited while Hello is open? The ones visited while shared through Hello? What about the ones that someone shared with

Firefox Hello new data collection

2016-04-04 Thread Romain Testard
Hi all, We wanted to let you know about new data collection that we will be doing for Firefox Hello starting with FF46 launch on April 19th, and the steps we took to prevent it from collecting personal identification. We want to collect more data about the websites that people share with Hello,