Firefox now tells Mozilla what your default browser is every day (opens in new tab)

(bleepingcomputer.com)

44 pointsCanisDirus5y ago20 comments

20 comments

I really wonder why Mozilla employees think it is acceptable to do that without informed consent for users running Windows. No one would tolerate Mozilla installing a binary in ~/bin/ and configuring it to be run via user crontab on Linux.

Oh well - time to go clean up my Windows installs. sigh

jlgaddis5y ago

They install "allow any connections to anywhere" firewall rules on Windows too. Fortunately, it's "just" for the Firefox process but still...

---

I used to keep one last Windows 7 box around. It had the default firewall policies set to block everything by default and I had even went so far as to disable all the default rules that Windows creates and added explicit rules to only allow the specific traffic to the specific internal services I actually needed.

Then, I installed Firefox one day so I could use it to access a few internal web sites. Shortly afterwards, I went to add new firewall rules to allow connections to these internal web sites and discovered that the installer had automatically added new firewall rules for Firefox allowing it to connect to anything anywhere! Fortunately, this host was on a subnet which was blocked in the "real" firewall anyways, so -- in this case -- no actual harm done (it couldn't get out to the Internet anyways) but I was still a bit surprised to discover that.

Can you imagine the fallout and calls for beheading that would occur if Firefox for Linux added new rules to your Linux hosts' iptables firewalls!?

musicale5y ago

Does Firefox collect so-called "telemetry" data with real, informed consent, and with the default setting being "private?"

Or has Mozilla adopted a dark pattern where all the privacy-violating checkboxes are automatically "chosen" by default?

jlgaddis5y ago

Not only do they collect telemtery by default -- and even send them telemtry data when you disable telemetry! -- they can also remotely change your Firefox settings and/or install "experiments", at any time, without any notice to you!

Hell, if you have a "clean" host/VM, I encourage you to install Firefox, start a packet capture, launch Firefox for the first time, then just sit and wait for 30 seconds or so -- not doing anything or interacting with it in any way -- before closing Firefox. Then, go take a look at your packet capture. I think you'll be quite surprised at all of the connections it makes...

This is really not the Mozilla Firefox I envisioned or expected way back when I first started supporting and advocating for it (when it was first announced!).

2 more replies

lonelappde5y ago

No checkboxes or confirmation on the common flow, just a little warning message on firstboot.

qplex5y ago

Some telemetry is on by default, at least in the official releases.

sneak5y ago

Wow, I had always assumed that Firefox didn’t use telemetry.

This is worrisome. Is there a modern browser available that doesn’t try to spy on you?

Ghjklov5y ago

Pretty much every time I've installed a fresh Firefox, all the telemetry is enabled by default. Opt out instead of opt in. Surprising considering what they sell themselves as.

19965y ago

edge seems the safer choice at the moment.

1 more reply

jlgaddis5y ago

Instead of copying and pasting the registry entry into a text file, merging ("running") it, then deleting the text file, the following (PowerShell) command should do the same thing:

  New-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Mozilla\Firefox" -Name DisableDefaultBrowserAgent -PropertyType DWord -Value 1

To disable the scheduled task (if you simply delete it, it might "reappear" after Firefox is updated):

  schtasks.exe /change /disable /tn "\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB"

Or, you could simply disable the telemetry altogether and tell Mozilla that all this "opt-in by default" telemetry is bullshit.

Note: The above are untested as I don't run Windows (partly because of all the spyware -- excuse me, "telemetry" -- bullshit!).

(Edit: Sorry, changed forward slashes to back slashes.)

19965y ago

spyware that firefox seem to emulate quite well given these news.

BTW, your suggestions do not in the firefox I have:

New-ItemProperty : Cannot find path 'HKLM:\SOFTWARE\Policies\Mozilla\Firefox' because it does not exist. At line:1 char:3 + New-ItemProperty -Path "HKLM:/SOFTWARE/Policies/Mozilla/Firefox" -N ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : ObjectNotFound: (HKLM:\SOFTWARE\Policies\Mozilla\Firefox:String) [New-ItemProperty], ItemNotFoundException + FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.NewItemPropertyCommand

ERROR: The specified task name "\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB" does not exist in the system.

jlgaddis5y ago

Sorry,

  New-Item -Path "HKLM:\SOFTWARE\Policies\Mozilla\Firefox"

might be neccesary first, if Firefox didn't already create it. Or it could be because I originally used forward slashes instead of back slashes (now fixed!).

j / k navigate · click thread line to collapse

20 comments

alyandon5y ago

Oh well - time to go clean up my Windows installs. sigh

jlgaddis5y ago

They install "allow any connections to anywhere" firewall rules on Windows too. Fortunately, it's "just" for the Firefox process but still...

---

Can you imagine the fallout and calls for beheading that would occur if Firefox for Linux added new rules to your Linux hosts' iptables firewalls!?

musicale5y ago

Does Firefox collect so-called "telemetry" data with real, informed consent, and with the default setting being "private?"

Or has Mozilla adopted a dark pattern where all the privacy-violating checkboxes are automatically "chosen" by default?

jlgaddis5y ago

This is really not the Mozilla Firefox I envisioned or expected way back when I first started supporting and advocating for it (when it was first announced!).

2 more replies

lonelappde5y ago

No checkboxes or confirmation on the common flow, just a little warning message on firstboot.

qplex5y ago

Some telemetry is on by default, at least in the official releases.

sneak5y ago

Wow, I had always assumed that Firefox didn’t use telemetry.

This is worrisome. Is there a modern browser available that doesn’t try to spy on you?

Ghjklov5y ago

Pretty much every time I've installed a fresh Firefox, all the telemetry is enabled by default. Opt out instead of opt in. Surprising considering what they sell themselves as.

19965y ago

edge seems the safer choice at the moment.

1 more reply

jlgaddis5y ago

Instead of copying and pasting the registry entry into a text file, merging ("running") it, then deleting the text file, the following (PowerShell) command should do the same thing:

  New-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Mozilla\Firefox" -Name DisableDefaultBrowserAgent -PropertyType DWord -Value 1

To disable the scheduled task (if you simply delete it, it might "reappear" after Firefox is updated):

  schtasks.exe /change /disable /tn "\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB"

Or, you could simply disable the telemetry altogether and tell Mozilla that all this "opt-in by default" telemetry is bullshit.

Note: The above are untested as I don't run Windows (partly because of all the spyware -- excuse me, "telemetry" -- bullshit!).

(Edit: Sorry, changed forward slashes to back slashes.)

19965y ago

spyware that firefox seem to emulate quite well given these news.

BTW, your suggestions do not in the firefox I have:

ERROR: The specified task name "\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB" does not exist in the system.

jlgaddis5y ago

Sorry,

  New-Item -Path "HKLM:\SOFTWARE\Policies\Mozilla\Firefox"

might be neccesary first, if Firefox didn't already create it. Or it could be because I originally used forward slashes instead of back slashes (now fixed!).

j / k navigate · click thread line to collapse