Bonum Certa Men Certa

Mozilla Firefox Takes Another Step in the Direction of Being Malware With “Firefox Suggest”

Guest post by Ryan, reprinted with permission from the original

Opening: Yesterday I was surfing the web when I found out that LKML.org, a centralized place to see what’s going on in Linux kernel development, was attempting to load an ad script from a company called “BuySellAds dot com”.

When I investigated the company in more detail, I found that there was an entire page where they plot with some of the titans of the web industry to track and psychologically manipulate people.



One such partnership was Brave. Apparently, this company is pushing Brave’s “ethical ads” from behind the scenes, and another was Mozilla.



"One such partnership was Brave. Apparently, this company is pushing Brave’s “ethical ads” from behind the scenes, and another was Mozilla."It said that they feed ads into “Pocket”, which is where the “Sponsored Content” (including from Big Oil companies like Exxon) keep popping up in the Firefox New Tab page, and now in your address bar if you live in the US (under the guise of Firefox Suggest).



Well, what I suggest is that Mozilla CEO Mitchell Baker does with Firefox Suggest and Pocket is probably anatomically impossible, but that’s outside the scope of this post.



It sickens me, that a great piece of software that I used from its inception in 2002 (pre-releases), and even before that (as Mozilla Suite, and before Mozilla, as the proprietary Netscape suite) has gone and done this as a cash grab on the way down.



Each release, there’s more stuff to turn off, and you have to remember to do all of that every time you install it somewhere.



"Each release, there’s more stuff to turn off, and you have to remember to do all of that every time you install it somewhere."There’s like 5 different settings (something like that) to fully disable DRM and keep it from coming back on or demanding it. That’s pretty bad when many of the sites using it are using it not for DRM, but as a fingerprinting attack.



Firefox ceased being Free and Open Source Software when distributed according to the Mozilla Trademark policies long ago, when they enabled Google DRM by default and pestered the user if they turned it off and then didn’t do some “about:config fu” to make sure it stayed off and disappeared from the GUI, but with Cloudflare DNS (a privacy hazard that OpenBSD patched to turn off!), Pocket’s Sponsored Crap, and Firefox Suggest, Firefox has not only straddled the line of what I consider to be “malware”, but has finally crossed it.



Perhaps there’s something very wrong with Debian for not going back to calling it “IceWeasel” and patching this stuff out of the source code so that it can’t come on. They are now in abeyance of their Debian Free Software Guidelines all so they can ship malware and call it Firefox.



You can perhaps forgive, under these circumstances, that some GNU/Linux distributions are throwing in the towel with Firefox, which doesn’t perform very well and uses gobs and gobs of RAM to perform the tasks, and are shipping some other browser.



Linux Mint spins are even putting in Vivaldi. And, if you frame it as a choice between Vivaldi and Firefox, I’d say Firefox is even worse than Vivaldi at this point, though Vivaldi doesn’t pretend to be open source like Firefox does, and they don’t beg for donations while they sell you down the river to adtechs like Mozilla does.



"Firefox ceased being Free and Open Source Software when distributed according to the Mozilla Trademark policies long ago, when they enabled Google DRM by default and pestered the user if they turned it off and then didn’t do some “about:config fu” to make sure it stayed off and disappeared from the GUI, but with Cloudflare DNS (a privacy hazard that OpenBSD patched to turn off!), Pocket’s Sponsored Crap, and Firefox Suggest, Firefox has not only straddled the line of what I consider to be “malware”, but has finally crossed it."What Mozilla fails to understand, obviously, is that by pissing off users into leaving, they not only have less who will stay and drive “ad hits” for them, but they’ll see a further collapse in their search royalty value to Google, and incoming revenue will fall faster than had they just left it alone.



Furthermore, by letting this incompetent twit remain as CEO and firing the engineers while leaving a “Global Chief Diversity Officer” and other dead weight so that they can be a political party, development of the browser’s underpinnings lags while they fritter away valuable capital towards these nutjobs.



Well, enough was enough so….



I finally figured out the dependency matrix to get Debian to allow me to apt purge firefox-esr from my Debian 11 system without trying to take out GNOME metapackages and the X server.



It turns out that I had to give up on using the GNOME Web flatpak from FlatHub, because it collides with the Stable version from Debian. So I backed that out, and deleted its settings and cache under the .var folder hierarchy, and put the epiphany-browser package back in.



"...on a clean install, Firefox Suggest is on by default and doesn’t even ask whether the user wants ads or a keylogger malware in their address bar."As long as that’s there, and those internationalization and LibreOffice Help Packs and foreign spell checkers and such that I removed the other day are gone, you can remove firefox-esr and the system won’t complain that you need a web browser.



It seems that Apt only wants to remove the gnome metapackages and xorg (Jean-Baptist…Emanuel….Zorg! Sorry.) if epiphany-browser is not already installed. If it is, it’ll shut up and let you get rid of Firefox.



Now you can also reclaim some disk space by removing .mozilla and all of the .mozilla and .firefox stuff under your Home folder (it’s all hidden but unhiding it with Ctrl+H and then using the finder is easy enough). In my case, I don’t use Thunderbird either, so I got rid of its stuff and now it’s just GNOME Web and Evolution.



Mozilla lies and says Firefox Suggest is off by default and that it is opt-in.



In the Bleeping Computer article about Firefox Suggest, which also notes Firefox’s dwindling market share (they went from being almost half of all web users at their peak to being only slightly more popular than Vivaldi, and still falling), they say that in their own tests and user reports, on a clean install, Firefox Suggest is on by default and doesn’t even ask whether the user wants ads or a keylogger malware in their address bar.



I installed the Firefox 93 Flatpak to find out myself. Mozilla even builds it and uploads the builds to Flathub, so they are official. Firefox Suggest was on by default, no message asking me if I wanted it.



When Ubuntu briefly implemented a keylogger that sent your Shell searches to Amazon in their now-abandoned Unity Shell, Richard Stallman called Ubuntu malware.



In its default configuration, Firefox not only sends everything you type into the address bar to Google (even though you can turn that off and split searches into a different box), but also to Mozilla, and Mozilla’s advertisers. This is certainly malware.



"How is it that Debian says the firmware to run my wifi, SSD, and graphics chip isn’t allowed (in the official image, which will lead some people to think Debian is broken and not bother figuring out why….while others have to know there’s a real installer that has firmware that is semi-hidden) but Widevine DRM blobs and a malicious keylogger in Firefox are fine?"How much longer will “Free” operating systems like Debian continue ignoring their own Free Software Guidelines to package this? It already had a grabber that’s on by default to download Google DRM blobs, and now this.



It’s bad enough that Fedora chucked its own Free Software policy out the door when IBM took them over, and started pushing Zoom, Microsoft Teams, and Microsoft Edge.



How is it that Debian says the firmware to run my wifi, SSD, and graphics chip isn’t allowed (in the official image, which will lead some people to think Debian is broken and not bother figuring out why….while others have to know there’s a real installer that has firmware that is semi-hidden) but Widevine DRM blobs and a malicious keylogger in Firefox are fine?



Sounds like someone at Debian should explain this.



As an aside, Mozilla is also considering changing the default search engine to Bing.



Every few years, they come in and decide which crappy privacy-violating mess with worse search results than Google to switch all their users to as part of a cynical ploy to ultimately get Google back to the table for more money.



Microsoft has never offered any browser vendor more money than Google, which is why Google is the default search engine on almost every browser, and the iPhone/Safari, even though Apple pretends they’re bitter enemies (over 60% of Apple iOS apps have Google tracking libraries in them).



I’m not a big fan of Google, but Bing is much worse. Instead of Google violating your privacy, it will be Microsoft, and then the search results often won’t even be usable.



When will Mozilla learn to stop manipulating its remaining users? Never?



Recent Techrights' Posts

Alyssa Rosenzweig's LibrePlanet Talk About Freeing the Apple GPU
Alyssa Rosenzweig is the graphics witch behind the reverse-engineered drivers for the Apple GPU. She previously led Panfrost, the free drivers for Arm Mali GPUs powering devices like the Pinebook Pro. She graduated in 2023 with a Computer Science degree from the University of Toronto and now writes free software full-time.
Links 30/06/2024: LLMs Under Fire and Dictatorship of the Old
Links for the day
[Meme] Walking Outside the Guardrails of the Walled Gardens Built by Monopolies
So-called "advertiser-unfriendly" material was never a problem for Wikileaks
This War Crime Footage, Nothing Political Per Se, Is What They Made Julian Assange Plead Guilty To (War Criminals Not Convicted, Only Those Who Expose Them)
Wikileaks' Julian Assange: Exposing the US Military Crimes
20 Years Passed, Let's Go Even Faster Now
We are hoping to bring more original stories
Windows Lost Almost 92% Market Share in Egypt
From over 99% to just over 7%
 
A Crisis of Online Journalism
Almost a week ago a journalist was forced to plead guilty for an act of journalism
Germany One of Many Countries Where Microsoft's Bing Lost Market Share After All That LLM Nonsense (Bing Chat and Further Rebrands/Renames)
openai.com traffic plunged 60% last month
Microsoft’s Latest Antitrust Scrutiny
4 new stories
Microsoft Layoffs, Mass Plagiarism, and More
outrage included
GNU/Linux Climbed 0.25% This Month (in statCounter)
Around midday on Tuesday we'll start seeing preliminary data for July
Ilya Gulko Introduces Pollyanna
"Pollyanna is a web framework that makes it easy to create your own libre social space, such as a social network or blog."
'FSFE': Underage Labour, GAFAM Fronting, and Identity Theft to Undermine the FSF's Current Fundraiser
looking to raise funds at the same time as the FSF
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, June 29, 2024
IRC logs for Saturday, June 29, 2024
Links 29/06/2024: Astronauts at Risk, Ukraine Updates
Links for the day
Fedora and Red Hat Leftovers
mostly redhat.com
Microsoft is Now Googlebombing or Spamming 'Open Source' and 'Linux' to Promote Proprietary Surveillance, Azure
Notice the title and the image, what's being promoted etc.
Seychelles: GNU/Linux Doing OK
Seychelles cannot be considered poor
Gemini Protocol Isn't Even Remotely "Dead"
"Lupa knows of 505,000 (half a million!) working Gemini URLs at present, up from about 425,000 this time last year"
About 10 New Free Software Foundation (FSF) Members Per Day
The total changed from 46 to 47 while typing the article
Vista 11 Adoption Unusually Low in Germany and It's Going Down, Not Up
This is not happening only in Germany
Kevin Korte on Computers Being Allowed to Make Decisions Based on Cryptic Algorithms and Proprietary/Secret Data
It uses buzzwords where none are needed
[Meme] Garbage In, Garbage Out (linuxsecurity.com)
It is neither Linux nor security, just chatbot-generated slop
Microsoft-Invaded CISA Spreads Anti-Free Software FUD (as If Proprietary Software Has No Memory Safety Issues), Brittany Day Uses Chatbots to Amplify and Permutate the Microsoft FUD
linuxsecurity.com became an anti-Linux spam site
Microsoft Laying Off Staff in an Act of Retaliation and Union-Busting
retaliatory layoffs at Microsoft
Gemini Links 29/06/2024: Content Drowning in 'Goo' and LLM Slop
Links for the day
In Ecuador, GNU/Linux Adoption Surged From Under 1% to Over 4% in About 3 Years
Not even counting Chromebooks
LibrePlanet: Cultivating Backups (of Recordings)
an appeal to recover some of these talks
Microsoft/Windows Machines Are Turned Off (or Windows Deleted/Decommissioned) in Web Servers, as the "Market Share" Collapse Continues
Taking full history into account, this is a decrease of over 90% in some cases
Corwin Brust Hosting Freedom: A Behind-the-scenes Tour With the GNU Savannah Hackers
"the "smiling faces" behind it."
Android at 90% or More in Chad
Windows below 2%
David Wilson: Cultivating a Welcoming Free Software Community That Lasts
"a feeling of shared ownership for all users."
Julian Assange Might Continue Wikileaks, But Certainly Not Yet (Recovery Time Needed)
And probably at a symbolic capacity only
Bringing in 12 Santas and Taking 13 Out (Old Interview With Julian Assange)
Julian Assange's life inside the Ecuadorian embassy
Neil Plotnick on GNU/Linux in the High School Classroom
uploaded to the LibrePlanet instance of MediaGoblin
Asia Appears to be Fastest to Adopt GNU/Linux
the home of a considerable majority of the world's population
Alexandre Oliva's LibrePlanet 2024 Talk About "Software Enshittification"
in spite of technical difficulties encountered while recording
What They Used to Do With Mono They Now Do With Systemd (Lower and Deeper Down Than Userspace)
Now we have a project started primarily by Red Hat (and managed by Microsoft GitHub, which is proprietary) being managed by Microsoft and primarily serving Microsoft and IBM
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, June 28, 2024
IRC logs for Friday, June 28, 2024
Links 28/06/2024: Kangaroo Courts and Patents Spam, EFF Still Fighting for CPC's TikTok (a Digital Weapon)
Links for the day
Links 28/06/2024: Overton window and Polarization
Links for the day
[Meme] In 50 Years...
Microsoft's Vista 11 will take 50 years to be fully adopted
Only About 1 in 8 Russian Windows Users is Using Vista 11
it looks like over the past 12 months Vista 11 hardly grew and it remains very low at around 12% of Windows usage in Russia
Links 28/06/2024: More Attacks on the Press, More Censorship in Russia
Links for the day
Gemini Links 28/06/2024: Christmas Prematurely, Self-hosting
Links for the day
IBM: So Long, Suckers. Your Free OS is Now Proprietary. Pay IBM or Else.
almost exactly a year after turning RHEL into proprietary software
Vista 11 is Doomed and Despite Lack of Adoption Microsoft Already Speaks of Vapourware ("12")
"Microsoft has pulled a Windows 11 update after users reported boot loops and startup failures."
ChromeOS Reaches Highest Share in Years at the World's Most Populous Nation, Windows Now at All-Time Low of 13%
We're talking about India today
[Video] "It Is Incredible That Julian Assange Survives"
There was a positive and mutual relationship between Wikileaks and Dr Jill Stein
Never Assume That Because the Law Exists the Powerful Will Follow the Law
Who's going to hold them accountable now?
Nearly a Month Has Passed and Nobody at the Debian Project Even Attempted to Explain What Seems Like Back-dooring of Debian (and Hundreds of Distros That Are Debian-Derived)
I can cynically guess that only matters when a user with a Chinese name does it
[Video] Julian Assange Explains Wikileaks' Logistics
predating indefinite detention
IBM Was Never the "Good Guy", Just a Self-Serving and Opportunistic Money- and Power-Hungry Monopolist, Living Off of Taxpayers' Money (Government Contracts)
The Nazi Party of Germany was its second-biggest client at one point and now it's looking to profit from the work of slaves
"I Hated Working at IBM. They Were the Most Unfriendly People."
Don't forget what Watson the son did to a poor woman on a plane
State of the News (and Depletion of Journalism Online, Not Just Offline)
Newspapers are not coming back and the Web is not coming back either
GNU/Linux Consolidates in North America
Android rising a lot this year, too
[Meme] More Monopolies Granted While Patent Examiners Die (Overworking for Less Compensation)
Work more; Get less
Staff Union of the EPO (SUEPO) is Taking the New Pension Scheme (NPS) to an International Tribunal (ILOAT)
SUEPO wants more EPO staff to participate in collective action
Stella Assange and the Legal Team Speak to the Media a Day After WikiLeaks Founder Julian Assange Arrives in Australia
Published yesterday by a number of mainstream publishers
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, June 27, 2024
IRC logs for Thursday, June 27, 2024
RIP Daniel Bristot de Oliveira, Red Hat death
Reprinted with permission from Daniel Pocock