{"id":205259,"date":"2017-07-13T06:51:06","date_gmt":"2017-07-13T10:51:06","guid":{"rendered":"http:\/\/www.euvolution.com\/prometheism-transhumanism-posthumanism\/privacy-blunder-firefoxs-get-add-ons-page-uses-google-analytics-ghacks-technology-news\/"},"modified":"2017-07-13T06:51:06","modified_gmt":"2017-07-13T10:51:06","slug":"privacy-blunder-firefoxs-get-add-ons-page-uses-google-analytics-ghacks-technology-news","status":"publish","type":"post","link":"https:\/\/www.euvolution.com\/prometheism-transhumanism-posthumanism\/tor-browser\/privacy-blunder-firefoxs-get-add-ons-page-uses-google-analytics-ghacks-technology-news\/","title":{"rendered":"Privacy blunder? Firefox&#8217;s Get Add-ons page uses Google Analytics &#8211; Ghacks Technology News"},"content":{"rendered":"<p><p>    The Firefox web browser ships with an add-on management    interface that users may load directly by typing about:addons    in the browser's address bar, or by using menus of the browser    the page is linked from.  <\/p>\n<p>    The management interface comes with several pages that separate    extensions from themes, plugins, services, scripts and other    \"add-ons\" that users may add to Firefox in one way or another.  <\/p>\n<p>    There is also a Get Add-ons page that lists add-on suggestions    to users. It is making the rounds right now connects to Google    Analytics when users access it.  <\/p>\n<p>    Nicolas Petton posted a message on Twitter    on July 11, 2017 that Mozilla was using Google Analytics on the    about:addons page. The message was picked up on social news    sites such as Reddit and Hacker News shortly    thereafter.  <\/p>\n<\/p>\n<p>    Some users voiced concerned about the integration of Google    Analytics in Firefox (on this one page), stating that a browser    that advertises with being privacy-focused should not do that.  <\/p>\n<p>    Mozilla employees provided detailed information on the    implementation on various sites, including on GitHub where a issue was    raised by a concerned user.  <\/p>\n<p>    According to Mozilla employee Matthew Riley MacPherson, known    as tofumatt on GitHub, about:addons loads an iFrame with    content hosted on a Mozilla website which contains the Google    Analytics script.  <\/p>\n<p>    Mozilla has a special agreement with Google which means that    the data is aggregated and anonymised. Another Mozilla    employee, who goes by the handle potch, added on Hacker News    that Mozilla negotiated a special deal with Google that only a    \"subset of data\" is collected, and that the \"data is only used    for statistical purposes\".  <\/p>\n<p>    When asked why Mozilla was not using self-hosted analytics    scripts like Piwik, Matthew replied that hosting their own    analytics product -- Piwik in particular -- was more work for    \"a worse product\".  <\/p>\n<p>    Matthew suggested to disable the    tracking for users who have opted out of Telemetry tracking in    the Firefox browser. This has not been implemented yet, and it    is unclear whether this is going to happen.  <\/p>\n<p>    Ultimately, this seems to be Mozilla's stance on the issue    right now according to Matthew:  <\/p>\n<p>      We won't be discontinuing our usage of analytics for our web      properties, but I do think it would be nice to consider easy      opt-outs for users like yourself who clearly do not want to      participate in analytics sharing.    <\/p>\n<p>    The maker of uBlock Origin posted an interesting observation in    the thread as well. The legacy version of uBlock Origin can    block the requests on internal Firefox pages, while the    WebExtension version cannot.  <\/p>\n<p>      Legacy uBlock Origin can block the network request to GA.    <\/p>\n<p>      However webext-hybrid uBO as per Network pane in dev tools      does not block it. Same for pure webext Ghostery, the network      request to GA was not blocked, again as per Network pane in      dev tools.    <\/p>\n<p>      What is concerning is that both uBO webext-hybrid and      Ghostery report the network request to GA as being blocked,      while it is really not as per Network pane in dev tools. It's      as if the order to block\/redirect the network request was      silently ignored by the webRequest API, and this causes      webext-based blockers to incorrectly and misleadingly report      to users what is really happening internally, GA was not      really blocked on about:addons, but there is no way for the      webext blockers to know this and report properly to users.    <\/p>\n<p>    The Tor browser developers, a browser that is a modified    version of Firefox for added security and privacy, have voiced    concerns as well.  <\/p>\n<p>      Disallow 'about:addons' unless the extensions directory is      volatile, because regardless of what Mozilla PR says about      respecting privacy, loading Google Analytics in a page that      gets loaded as an IFRAME as part of an 'about:' internal      page, is anything but.    <\/p>\n<\/p>\n<p>    Tip: Firefox users who don't use Get Add-ons can disable the    functionality in the following way:  <\/p>\n<p>      Read also: Firefox: copy multiple text bits at once    <\/p>\n<p>    See how to block automatic    connections that Firefox makes for additional information,    or the list of Firefox security and    privacy preferences.  <\/p>\n<p>    It is clear that there are multiple points of view on the issue    at hand:  <\/p>\n<p>    My personal stance on the matter is that I think it is unwise    to integrate anything that connects back to Google in the    Firefox browser. Unwise because it torpedos Mozilla's stance on    privacy in the eyes of some Firefox users.  <\/p>\n<p>    Now You: What's your take on this?  <\/p>\n<p>      Summary    <\/p>\n<p>          Article Name        <\/p>\n<p>          Privacy blunder? Firefox's Get          Add-ons page uses Google Analytics        <\/p>\n<p>          Description        <\/p>\n<p>          Mozilla Firefox connects to          Google Analytics on the browser's internal Get Add-ons          page. Some users see this is a privacy violation.        <\/p>\n<p>          Author        <\/p>\n<p>          Martin Brinkmann        <\/p>\n<p>          Publisher        <\/p>\n<p>            Ghacks Technology News          <\/p>\n<p>            Logo          <\/p>\n<\/p>\n<p>    You are here: Home >    Firefox >    Privacy blunder? Firefoxs Get    Add-ons page uses Google Analytics  <\/p>\n<p>    You can support us in many ways, for instance by disabling    adblockers. Alternatively, you may support us with a PayPal donation.  <\/p>\n<p>    Please check out our other support options here.  <\/p>\n<p>    Advertisement  <\/p>\n<p>    Recent Updates:  <\/p>\n<p>    Remove Intel True Key    Firefox 54.0.1    Windows 10 Privacy Software    The best Chrome extensions    The best Firefox addons    Firefox privacy and security    preferences    Firefox Release Schedule    Firefox multi-process    information    Windows Backup Software    overview    Anti-Ransomware Software    overview    Pale Moon 27.3    The Best Windows Software    Firefox Roadmap 2017  <\/p>\n<p>    Advertisement  <\/p>\n<p>    Topics  <\/p>\n<p>    Apple    Development    Facebook    Games    Ghacks    Hardware    Internet    Internet Explorer    Linux    Microsoft    Mobile Computing    Music And Video    Networks    Opera    Security    Tutorials  <\/p>\n<p>    Advertisement  <\/p>\n<p>    Latest Downloads:  <\/p>\n<p>    WinSuperMaximize    Fing Network Discovery<\/p>\n<p><!-- Auto Generated --><\/p>\n<p>Read the original post:<br \/>\n<a target=\"_blank\" href=\"https:\/\/www.ghacks.net\/2017\/07\/13\/privacy-blunder-firefox-getaddons-page-google-analytics\/\" title=\"Privacy blunder? Firefox's Get Add-ons page uses Google Analytics - Ghacks Technology News\">Privacy blunder? Firefox's Get Add-ons page uses Google Analytics - Ghacks Technology News<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p> The Firefox web browser ships with an add-on management interface that users may load directly by typing about:addons in the browser's address bar, or by using menus of the browser the page is linked from. The management interface comes with several pages that separate extensions from themes, plugins, services, scripts and other \"add-ons\" that users may add to Firefox in one way or another <a href=\"https:\/\/www.euvolution.com\/prometheism-transhumanism-posthumanism\/tor-browser\/privacy-blunder-firefoxs-get-add-ons-page-uses-google-analytics-ghacks-technology-news\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[94875],"tags":[],"class_list":["post-205259","post","type-post","status-publish","format-standard","hentry","category-tor-browser"],"_links":{"self":[{"href":"https:\/\/www.euvolution.com\/prometheism-transhumanism-posthumanism\/wp-json\/wp\/v2\/posts\/205259"}],"collection":[{"href":"https:\/\/www.euvolution.com\/prometheism-transhumanism-posthumanism\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.euvolution.com\/prometheism-transhumanism-posthumanism\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.euvolution.com\/prometheism-transhumanism-posthumanism\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.euvolution.com\/prometheism-transhumanism-posthumanism\/wp-json\/wp\/v2\/comments?post=205259"}],"version-history":[{"count":0,"href":"https:\/\/www.euvolution.com\/prometheism-transhumanism-posthumanism\/wp-json\/wp\/v2\/posts\/205259\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.euvolution.com\/prometheism-transhumanism-posthumanism\/wp-json\/wp\/v2\/media?parent=205259"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.euvolution.com\/prometheism-transhumanism-posthumanism\/wp-json\/wp\/v2\/categories?post=205259"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.euvolution.com\/prometheism-transhumanism-posthumanism\/wp-json\/wp\/v2\/tags?post=205259"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}