Is It Time to Ditch Firefox?

Is It Time to Ditch Firefox?

Show Video

<b>Mozilla's first ever terms</b> <b>of service and privacy policy,</b> <b>raising some eyebrows.</b> <b>Sweden and France are</b> <b>jumping on the encryption</b> <b>backdoor bandwagon, some big news</b> <b>from many beloved FOSS projects and more.</b> <b>Welcome to Surrealist Report 216,</b> <b>where we are dedicated</b> <b>to keeping you private</b> <b>and secure with the</b> <b>latest news from the past week.</b> <b>I am Nathan from The New Oil.</b> <b>And I'm Henry from Tech Law.</b> <b>This week, we want to remind you</b> <b>of our sponsor, Easy Optouts.</b>

<b>As many of you know, your</b> <b>data is publicly available</b> <b>all over the internet.</b> <b>Some of you may not know,</b> <b>you should take a minute</b> <b>to look yourself up online, phone number,</b> <b>full name, email address.</b> <b>You might be surprised what you find.</b> <b>And taking all that stuff down,</b> <b>you can do it yourself.</b> <b>That's definitely a very</b> <b>effective way to do it,</b> <b>but it is also extremely time consuming</b> <b>and may not be feasible for everyone,</b> <b>particularly people who are super busy.</b> <b>So there are a handful of</b> <b>data removal services out there</b> <b>and some are more effective than others.</b>

<b>One of our favorites is Easy Optouts.</b> <b>Both Henry and I use them.</b> <b>They are super affordable.</b> <b>They're only $20 a year</b> <b>and they do offer refunds</b> <b>if you're not satisfied with the service.</b>

<b>We have research from</b> <b>both consumer reports</b> <b>and privacy guides.</b> <b>So you can go look into that</b> <b>and see their</b> <b>methodology and what you think.</b> <b>They ask for very</b> <b>minimal information on signup.</b> <b>You do not have to</b> <b>give them any information</b> <b>that isn't publicly available.</b> <b>They're just trying to use it</b> <b>to find your records and nothing else.</b>

<b>There are only two employees.</b> <b>So they're not sharing your data</b> <b>with a bunch of third-party</b> <b>contractors and a big company.</b> <b>There are no ads or</b> <b>analytics on the site.</b> <b>Removal requests are not submitted</b> <b>unless they find your data on the site.</b> <b>So they're not just</b> <b>blasting out your data</b> <b>to a bunch of people who</b> <b>might not even have it.</b> <b>They are always</b> <b>adding new sites over time</b> <b>as they become aware of them.</b>

<b>And last but not least,</b> <b>they do have business plans.</b> <b>So if you run a business</b> <b>and you're looking for a perk</b> <b>to offer your employees,</b> <b>go ahead and contact them</b> <b>and they will hook you up.</b> <b>We also have a quick</b> <b>correction from last week.</b> <b>Last week, I misspoke as an</b> <b>example of slippery slopes</b> <b>and repressive countries.</b>

<b>What I said was Turkey having a</b> <b>journalist murdered.</b> <b>What I was referring to,</b> <b>whose name I couldn't</b> <b>remember off the top of my head,</b> <b>was Jamal Khashoggi.</b> <b>I mixed up my country.</b> <b>Saudi Arabia had him murdered,</b> <b>but it was at their embassy in Turkey.</b> <b>So it physically happened in Turkey,</b> <b>but the Turkish</b> <b>government wasn't responsible.</b>

<b>For those of you who were</b> <b>correcting me in good faith,</b> <b>thank you.</b> <b>I apologize for getting it wrong.</b> <b>And I'm sorry if that upset anybody.</b> <b>And not to like brush it</b> <b>off, but for the record,</b> <b>I hope that you guys were</b> <b>still able to understand</b> <b>the point that I was trying to make.</b> <b>I was going off script that wasn't</b> <b>written in the show notes.</b> <b>So I apologize that</b> <b>sometimes it's hard to keep track</b> <b>of all the crappy things</b> <b>that repressive regimes</b> <b>are doing around the world.</b>

<b>(upbeat music)</b> <b>That'll take us into our highlight story,</b> <b>which is a big one from Mozilla.</b> <b>I'm actually gonna draw from a few</b> <b>different sources here.</b> <b>And we'll just say Mozilla is introducing</b> <b>terms of use to Firefox.</b> <b>So first let's start off</b> <b>with Mozilla themselves.</b>

<b>And here's what they said.</b> <b>"We're introducing a</b> <b>terms of use for Firefox</b> <b>for the first time,</b> <b>along with an updated privacy notice.</b> <b>Why now?</b> <b>Although we've historically relied</b> <b>on our open source license for Firefox</b> <b>and public commitments to you,</b> <b>we are building in a much different</b> <b>technology landscape today.</b>

<b>We want to make these commitments</b> <b>abundantly clear and accessible.</b> <b>In addition to the terms of use,</b> <b>we are providing a</b> <b>more detailed explanation</b> <b>of our data practices in</b> <b>our updated privacy notice."</b> <b>You can go read that blog post.</b>

<b>You can go read the terms themselves.</b> <b>It's kind of standard stuff in the sense</b> <b>that it's very vague, very PR friendly.</b> <b>I don't think in and of</b> <b>itself it really says a whole lot.</b>

<b>So I'm gonna quote a</b> <b>couple of other sources</b> <b>that added some additional context.</b> <b>And the first one is Omgobuntu,</b> <b>who wrote, "This</b> <b>official terms of use will,</b> <b>Mozilla argues, offer</b> <b>users more transparency</b> <b>over their rights and permissions</b> <b>as they use Firefox to browse the</b> <b>information superhighway,</b> <b>as well as Mozilla's</b> <b>rights to help them do it.</b> <b>As this excerpt makes clear,"</b> <b>and this is a quote</b> <b>from the terms of service,</b> <b>"You give Mozilla all</b> <b>necessary rights to operate Firefox,</b> <b>including processing data,</b> <b>as we describe in the privacy notice,</b> <b>as well as acting on your behalf</b> <b>to help you navigate the internet."</b> <b>Quick pause there.</b> <b>That's actually the edited</b> <b>version, the original version.</b> <b>It didn't say all rights necessary.</b>

<b>It basically said like all rights,</b> <b>just it was a lot more vague</b> <b>and they did tighten</b> <b>that up a little bit.</b> <b>I guess that's worth</b> <b>giving them credit for.</b> <b>Continuing on, this is still quoting</b> <b>their terms of service.</b>

<b>"When you upload or input</b> <b>information through Firefox,</b> <b>you hereby grant us a</b> <b>non-exclusive, royalty-free,</b> <b>worldwide license to use that information</b> <b>to help you navigate, experience,</b> <b>and interact with online content</b> <b>as you indicate with</b> <b>your use of Firefox."</b> <b>Again, that one is</b> <b>edited and tightened up.</b> <b>It used to say just</b> <b>information you upload to Firefox</b> <b>or something like that,</b> <b>which was very unclear.</b> <b>Omgobuntu notes that,</b> <b>"Mozilla has since added an</b> <b>addendum to their announcement</b> <b>to clarify the wording</b> <b>in the above excerpts.</b> <b>For example, it says that it, quote,</b> <b>"needs a license to allow us to make</b> <b>some of the basic</b> <b>functionality of Firefox possible.</b>

<b>Without it, we couldn't use information</b> <b>typed into Firefox.</b> <b>For example, it does not give us</b> <b>ownership of your data</b> <b>or a right to use it for anything</b> <b>other than what is</b> <b>described in the privacy notice."</b> <b>And actually, on that one,</b> <b>let's bounce over to TechCrunch.</b>

<b>And I'm sorry, I've got like four</b> <b>different sources here,</b> <b>but they all had like</b> <b>different perspectives</b> <b>that I thought were relevant.</b> <b>"The company told</b> <b>TechCrunch that its privacy notice</b> <b>still applies when using its AI features</b> <b>and content data is not</b> <b>sent to Mozilla or elsewhere.</b> <b>Plus, data shared with</b> <b>advertisers is de-identified."</b> <b>Quick pause, veterans know you cannot</b> <b>de-anonymize most data.</b>

<b>That's just worth noting.</b> <b>Anyways, back to quoting TechCrunch.</b> <b>"The company said that users can opt out</b> <b>of having their data</b> <b>processed for advertising</b> <b>by turning off a</b> <b>setting relating to technical</b> <b>and interaction data on both desktop and</b> <b>mobile at any time."</b>

<b>And there's links on how to do that</b> <b>in the TechCrunch article.</b> <b>"Mozilla also further</b> <b>claimed why it used certain terms,</b> <b>saying that the term</b> <b>non-exclusive was used to indicate</b> <b>that Mozilla doesn't</b> <b>want an exclusive license</b> <b>to user data because users should be able</b> <b>to do other things with that data too.</b> <b>Royalty free was used</b> <b>because Firefox is free</b> <b>and neither Mozilla nor the user should</b> <b>owe each other money</b> <b>in exchange for handling the data</b> <b>in order to provide the browser.</b> <b>And worldwide was used because</b> <b>Firefox is available worldwide</b> <b>and provides access to</b> <b>the global internet."</b> <b>I think those are some fair points,</b> <b>but we'll get into a</b> <b>deeper analysis later.</b>

<b>The last one that I drew</b> <b>from here is Ars Technica.</b> <b>And this is more of a newer side of this</b> <b>that's coming to light.</b> <b>So this is kind of a</b> <b>little bit of an update,</b> <b>it still concerns this same</b> <b>terms of use and privacy change.</b> <b>Ars says, "Firefox maker</b> <b>Mozilla deleted a promise</b> <b>to never sell its users personal data</b> <b>and is trying to assure worried users</b> <b>that its approach to privacy hasn't</b> <b>fundamentally changed.</b>

<b>Until recently, a Firefox FAQ promised</b> <b>that the browser maker never has</b> <b>and never will sell</b> <b>its users personal data.</b> <b>An archived version</b> <b>from January 30th says,</b> <b>"Does Firefox sell</b> <b>all your personal data?"</b> <b>And the answer is, nope,</b> <b>never have, never will.</b> <b>And we protect you from</b> <b>many of the advertisers who do.</b> <b>That promise is removed</b> <b>from the current version.</b> <b>There's also a notable</b> <b>change in a data privacy FAQ</b> <b>that used to say, "Mozilla</b> <b>doesn't sell data about you</b> <b>and we don't buy data about you."</b>

<b>The FAQ now explains that Mozilla</b> <b>is no longer making blanket promises</b> <b>about not selling data</b> <b>because some legal</b> <b>jurisdictions define sale</b> <b>in a very broad way.</b> <b>And here's the updated version.</b> <b>"Mozilla doesn't sell data about you</b> <b>in the way that most</b> <b>people think about selling data</b> <b>and we don't buy data about you.</b>

<b>Since we strive for transparency</b> <b>and the legal definition of sale of data</b> <b>is extremely broad in some places,</b> <b>we've had to step back</b> <b>from making the definitive</b> <b>statements you know and love.</b> <b>We still put a lot of</b> <b>work into making sure</b> <b>that the data we share with our partners,</b> <b>which we need to do to make Firefox</b> <b>commercially viable,</b> <b>is stripped of any</b> <b>identifying information</b> <b>or shared only in the aggregate</b> <b>or is put through our</b> <b>privacy-preserving technologies</b> <b>like OHTTP."</b> <b>Mozilla didn't say</b> <b>which legal jurisdictions</b> <b>have these broad definitions.</b>

<b>Last but not least, I</b> <b>wanted to end on going back</b> <b>to OMG Ubuntu.</b> <b>They said, "The new terms only apply</b> <b>to the executable</b> <b>code version of Firefox,</b> <b>not the source code, which</b> <b>means that downstream forks</b> <b>shouldn't be roped into these terms</b> <b>against their will."</b> <b>So there is a lot to unpack here.</b> <b>Those of you who</b> <b>listen to the patron version</b> <b>or follow me on Mastodon personally,</b> <b>know that I am very critical of Mozilla.</b>

<b>In my opinion,</b> <b>they've been going downhill</b> <b>for quite a while.</b> <b>I think objectively in</b> <b>terms of their browser,</b> <b>there's a lot of</b> <b>complaints about it not supporting</b> <b>a lot of modern features,</b> <b>a lot of modern security</b> <b>standards, web standards,</b> <b>things of that nature.</b> <b>Personally, I'm a little</b> <b>bit less concerned by that.</b>

<b>I'm a little concerned by</b> <b>the direction of the company.</b> <b>I've said this before</b> <b>for veteran listeners,</b> <b>this is nothing new,</b> <b>but I know this is usually the section</b> <b>that's hidden behind a patron paywall,</b> <b>so you guys don't usually</b> <b>get to hear this analysis.</b> <b>I don't like the way that it</b> <b>feels to me like as a company,</b> <b>they're just throwing</b> <b>everything against the wall</b> <b>and seeing what sticks.</b> <b>They bought a fake review spotter,</b> <b>which I mean, sure that's a cool plugin,</b> <b>but like why is that Mozilla's crusade?</b> <b>Like that seems really out of left field.</b> <b>They've been investing</b> <b>a bunch in AI right now,</b> <b>which you know,</b> <b>Andy Young from Proton</b> <b>made a pretty good argument</b> <b>that like that's the</b> <b>direction the market is going,</b> <b>and it's gonna go that way</b> <b>whether or not you jump on board.</b> <b>So they may as well jump on board</b> <b>and provide people a</b> <b>privacy friendly version of AI,</b> <b>which I would argue we now</b> <b>have plenty of those options</b> <b>in the form of like</b> <b>locally run LLMs, Braves, Leo,</b> <b>I think DuckDuckGo even has a proxy.</b>

<b>And then of course, most recently,</b> <b>they acquired an advertising company</b> <b>and they're trying to get</b> <b>into the advertising game.</b> <b>And look, I understand Mozilla's trying</b> <b>to be self-sustaining and profitable.</b> <b>I approve of that because I</b> <b>think it's really concerning</b> <b>that they get like 80% of</b> <b>their money from Google,</b> <b>but it doesn't feel like</b> <b>they've got an actual vision.</b> <b>It seems like they're</b> <b>just jumping on anything</b> <b>and they're like, well, let's</b> <b>try this and see what works,</b> <b>which to some extent that's</b> <b>gonna happen with any company.</b> <b>It just doesn't feel organized</b> <b>and it doesn't feel like</b> <b>there's a clear direction</b> <b>going on at Mozilla.</b> <b>I guess the only thought I really have,</b> <b>because I kind of put in a lot of my</b> <b>analysis as we went,</b> <b>I understand the</b> <b>argument for Firefox itself.</b>

<b>Like I understand the</b> <b>argument of we need an alternative</b> <b>to Brave and the Chromium</b> <b>Engine and the Google Monopoly,</b> <b>but I don't understand standing up for</b> <b>Mozilla at this point,</b> <b>especially with this,</b> <b>like this is so broad</b> <b>and this to me is very concerning.</b> <b>And I know all the</b> <b>apologists are gonna sit here</b> <b>and be like, well, you know, they</b> <b>explained like their wording</b> <b>and their licenses and</b> <b>its privacy preserving</b> <b>and it's this and that and the other,</b> <b>but to me, it's no different.</b> <b>Like this is just all</b> <b>part of a broader trend.</b> <b>I don't know why I'm</b> <b>trying to convince those people.</b>

<b>They're not gonna be convinced.</b> <b>To me, this is just really troubling.</b> <b>And I think it opens a lot of doors</b> <b>that are not gonna end well.</b> <b>And this is just further</b> <b>interdification of Mozilla</b> <b>as a company, which is</b> <b>inevitably running off on Firefox.</b>

<b>But unfortunately, I</b> <b>don't have a better solution</b> <b>at this time.</b> <b>There are a ton of forks out there.</b> <b>I have lost track of how</b> <b>many Firefox forks there are.</b> <b>There's Zen, which is still new.</b> <b>So it's kind of too</b> <b>early to call on that one.</b> <b>There's Mulvat and Leberwolf,</b> <b>which are a little bit too</b> <b>hardened for the average person.</b>

<b>There's like all these other</b> <b>ones that never get updated</b> <b>and you have to compile the code</b> <b>and like this, that and the other.</b> <b>It's really kind of crappy.</b> <b>Like Firefox and Brave,</b> <b>I feel like are the two</b> <b>best browsers we have.</b>

<b>And both of the companies</b> <b>behind them kind of suck.</b> <b>So I don't know.</b> <b>I think that's kind of where I'm at</b> <b>is this is just disappointing</b> <b>and I don't know what to do about it.</b> <b>I put some notes here on</b> <b>my end for my analysis.</b> <b>First, I just wanna</b> <b>say this is like to me,</b> <b>the way I'm reading this whole saga,</b> <b>this is 80% legal stuff.</b> <b>This is not a</b> <b>technological change directly.</b>

<b>It's updating terms and conditions.</b> <b>It's legal stuff.</b> <b>And I think speculating</b> <b>what the rest of the 20% is,</b> <b>which is what everybody's trying to do,</b> <b>it's just not possible.</b> <b>I'm seeing people say,</b> <b>this means they're</b> <b>gonna be training LLMs.</b> <b>This means they're gonna</b> <b>install a VPN within the browser.</b>

<b>It's gonna collect your data.</b> <b>It's like, we don't know</b> <b>what this is gonna mean</b> <b>for the tech.</b> <b>For all we know,</b> <b>they're gonna release</b> <b>their best feature next year</b> <b>that might require some data collection</b> <b>and they couldn't have</b> <b>released that feature</b> <b>without these term updates.</b>

<b>My point is both those things are likely.</b> <b>It's just Mozilla's</b> <b>direction definitely makes us think</b> <b>that the negative is more possible,</b> <b>which I don't disagree with.</b> <b>I think that forks are still safe.</b> <b>This only applies,</b> <b>Nate said that at the end.</b> <b>So if you use mall that,</b> <b>if you use anything else,</b> <b>you don't have to</b> <b>really worry about this.</b>

<b>The only people that</b> <b>have to worry about this</b> <b>are people using the</b> <b>actual Firefox browser.</b> <b>This doesn't change the</b> <b>licensing of the source code.</b> <b>It's just the</b> <b>installation of actual Firefox.</b>

<b>I will say a lot of people asked me to</b> <b>make a video on this,</b> <b>like a dedicated video,</b> <b>but I actually don't know how</b> <b>anyone else made a video on it.</b> <b>If you covered</b> <b>everything that's happening,</b> <b>you get less than, like what?</b> <b>We were recording now for 16 minutes</b> <b>and that includes the</b> <b>intro, the sponsor segment.</b> <b>I don't know how,</b> <b>there's nothing else to say.</b> <b>All you can say is,</b> <b>I don't know what's</b> <b>gonna happen from here.</b>

<b>People are coming at</b> <b>this with wild speculations.</b> <b>So if someone says this is</b> <b>exactly what's gonna happen,</b> <b>they just don't know that.</b> <b>We just have to watch to see what happens</b> <b>and then react</b> <b>appropriately once it does.</b> <b>I don't think you need</b> <b>to move away from Firefox</b> <b>because of this right now.</b>

<b>I think maybe if you're</b> <b>currently a Firefox user</b> <b>and down the road they</b> <b>start releasing features</b> <b>that are then considered</b> <b>like a risk to your privacy</b> <b>or your data or your rights, then react.</b> <b>And you'll probably get a heads up</b> <b>before it actually impacts you.</b> <b>So I don't think this</b> <b>needs to be like a plan ahead</b> <b>before something goes wrong.</b> <b>I don't see this going in a direction</b> <b>it's gonna be terrible.</b> <b>I think it's also</b> <b>important to keep context,</b> <b>which is Firefox still</b> <b>has an important purpose</b> <b>in the browser space in some ways.</b> <b>And a lot of these terms are still better</b> <b>than what you'll find in Chrome</b> <b>and some of these other browsers.</b>

<b>So I think it's worth</b> <b>just keeping some perspective</b> <b>on the situation here.</b> <b>I think Mozilla has</b> <b>done worse things than this</b> <b>that they got a lot less crap for.</b> <b>So I'm just weirded out by</b> <b>this being like the thing</b> <b>that set a lot of people off, I guess.</b> <b>I don't think what they did was good.</b> <b>And I'm not really</b> <b>defending Mozilla's behavior,</b> <b>but I am trying to challenge</b> <b>a lot of the common responses</b> <b>I've seen from people</b> <b>which don't seem very grounded</b> <b>in like the actual</b> <b>events that have happened.</b>

<b>Nate might disagree with me on that one.</b> <b>Like I said, I don't</b> <b>really have a better solution.</b> <b>So I'm not gonna tell everybody</b> <b>because my arguments come from,</b> <b>I'm thinking of the new oil.</b> <b>Like if I'm gonna stop</b> <b>recommending Firefox,</b> <b>first of all, I don't wanna do that</b> <b>because I like to give my readers choice.</b> <b>I don't wanna tell</b> <b>everybody just go use Brave</b> <b>because there are a lot of</b> <b>perfectly valid criticisms</b> <b>against Brave.</b>

<b>But then there's also,</b> <b>I asked a couple of my</b> <b>friends to download Moldad</b> <b>and I was like, I straight up told them.</b> <b>I'm like, this was, I</b> <b>think right after Mozilla</b> <b>bought the advertising company.</b> <b>I was like, hey, do me a favor,</b> <b>download this browser,</b> <b>try it out for like a week</b> <b>and tell me your thoughts on it.</b>

<b>And one of my friends, first of all,</b> <b>is paying for some God</b> <b>awful antivirus like Norton</b> <b>or something, which</b> <b>was their first mistake.</b> <b>And I told them that,</b> <b>but they were incredibly frustrated</b> <b>because Norton flag did his malware</b> <b>and then the little flag wouldn't go away</b> <b>even after they uninstalled it.</b> <b>And it was just, they</b> <b>had to reboot the computer</b> <b>and it was really frustrating for them</b> <b>and I felt really bad.</b>

<b>And then my other</b> <b>friend got it installed fine.</b> <b>But the first thing they noticed</b> <b>is they went to all their streaming sites</b> <b>like Netflix and Hulu and</b> <b>HBO and none of them worked.</b> <b>It's hard to find, like I</b> <b>said, that user friendly browser</b> <b>that's been around</b> <b>for more than 10 minutes</b> <b>that I can recommend</b> <b>to people and be like,</b> <b>hey, Firefox sucks, but</b> <b>here's this fork of Firefox</b> <b>that removes all the garbage telemetry,</b> <b>that removes all the Google whitelisting,</b> <b>that removes all the, these</b> <b>are real things by the way</b> <b>that you can look up,</b> <b>removes all the advertising built in crap</b> <b>and just gives you</b> <b>something that isn't Brave</b> <b>and isn't the chromium</b> <b>monopoly and things like that.</b> <b>If you think there is</b> <b>something that fits my definition,</b> <b>please send it to me.</b> <b>But what I was gonna say</b> <b>is like in response to you,</b> <b>like you're right, I</b> <b>don't think this specific move</b> <b>is the worst thing that Mozilla has done,</b> <b>but to me personally, and I</b> <b>can't speak for everybody,</b> <b>but for me, it's part of a larger trend.</b>

<b>Like I said, it's adding</b> <b>the advertising company,</b> <b>it's the buckshot, invest in every</b> <b>company known to man</b> <b>and see what sticks.</b> <b>Some of them, which to me,</b> <b>just don't even</b> <b>really seem to make sense.</b> <b>And then for those of you who don't know,</b> <b>we didn't cover this</b> <b>and it wasn't really</b> <b>directly privacy related,</b> <b>but just like two weeks ago,</b> <b>Mozilla like restructured their board</b> <b>and now they have like</b> <b>three new board members.</b> <b>And I swear to God,</b> <b>maybe this is my bias,</b> <b>but to me, it seems</b> <b>like they were just like,</b> <b>oh, my buddy needs a job,</b> <b>let's create some job titles.</b>

<b>It's like, what are you people doing?</b> <b>Is there anyone at this company</b> <b>who knows how to run a company?</b> <b>But just from the outside looking in,</b> <b>it's like, I don't understand</b> <b>where this company is going.</b> <b>It doesn't seem coherent</b> <b>and it doesn't seem like</b> <b>they have any sort of direction</b> <b>or vision or plan.</b> <b>It's like they just walk</b> <b>into work one day and go,</b> <b>oh, let's try this and see what happens.</b> <b>And it's so frustrating.</b> <b>It's been such a long history of</b> <b>questionable decisions</b> <b>and tone deafness that makes</b> <b>me just not even trust them</b> <b>because at this point,</b> <b>I feel like it's just a matter of time</b> <b>before they wake up one day.</b>

<b>And it's like, hey, we've gone ahead</b> <b>and baked Google</b> <b>Analytics into every single page</b> <b>and ejected into the code.</b> <b>And I'm literally</b> <b>gonna read that headline</b> <b>and just be like, yeah, that tracks.</b> <b>Like I'm not even surprised anymore.</b>

<b>That or they'll wake up and be like,</b> <b>hey, we're proud to</b> <b>announce Mozilla Pizza Company.</b> <b>It's like, cool, nobody asked for that</b> <b>either, but whatever.</b> <b>And now we have the data breaches.</b> <b>We're gonna start with the</b> <b>US employee screening giant,</b> <b>DISA, D-I-S-A, says hackers access data</b> <b>of more than 3 million people.</b> <b>So the services they</b> <b>provide are like drug</b> <b>and alcohol testing and background checks</b> <b>to more than 55,000 enterprises</b> <b>and a third of Fortune 500 companies.</b>

<b>The breach occurred on February 9th</b> <b>and was discovered on April 22nd, 2024.</b> <b>This impacted over 3 million people.</b> <b>It included social security numbers,</b> <b>financial account information,</b> <b>including credit card numbers</b> <b>and government issued ID documents.</b>

<b>Orange Group has confirmed a breach</b> <b>after an attacker</b> <b>leaked company documents.</b> <b>So this is a leading French</b> <b>telecommunications operator</b> <b>and digital services provider.</b> <b>There were about</b> <b>380,000 individuals impacted</b> <b>including current and former employees,</b> <b>partners and contractors.</b> <b>The data leaked included email addresses,</b> <b>source code, invoices, contracts,</b> <b>customer and employee info</b> <b>and partial payment card details,</b> <b>but only for Romanian</b> <b>customers on that last one.</b>

<b>Have I been pwned?</b> <b>If you have never</b> <b>heard of it, check it out.</b> <b>You can put in an email</b> <b>and see if you've been</b> <b>caught in any data breaches.</b> <b>They've added 284 million accounts stolen</b> <b>by an info-stealer malware.</b>

<b>This data was found on a telegram channel</b> <b>known as Alien Textbase</b> <b>and contains almost 500</b> <b>million unique website</b> <b>and email address pairings,</b> <b>244 million new passwords</b> <b>and 199 million updated</b> <b>passwords in the database.</b> <b>The data also includes potentially</b> <b>sensitive information</b> <b>like names, usernames, IP addresses,</b> <b>physical addresses and phone numbers.</b> <b>This last data breach</b> <b>is kind of an update.</b>

<b>We might not have</b> <b>covered the original story</b> <b>but there's a company</b> <b>called Lee Enterprises.</b> <b>They're a US-based media company</b> <b>that owns and operates</b> <b>over 77 daily newspapers</b> <b>as well as 350 publications,</b> <b>digital media platforms</b> <b>and marketing services.</b> <b>Their primary focus is</b> <b>local news and advertising</b> <b>with a digital audience</b> <b>that reaches tens of</b> <b>millions of people monthly.</b> <b>The original story is</b> <b>that they were suffering</b> <b>some kind of cyber attack that was</b> <b>crippling operations</b> <b>but they wouldn't really say more.</b> <b>We now know that it was the</b> <b>Quillen-Quillen-Quillen</b> <b>ransomware gang who is threatening to</b> <b>leak the stolen data.</b> <b>This allegedly includes 120,000 files</b> <b>totaling over 350 gigabytes</b> <b>and includes government ID scans,</b> <b>NDAs or non-disclosure agreements,</b> <b>financial spreadsheets,</b> <b>contracts and agreements</b> <b>and quote other confidential documents.</b>

<b>And I think the publication date for that</b> <b>is like March 5th if they don't pay.</b> <b>And now the company news.</b> <b>The first three stories are all Google</b> <b>slash Android stories.</b>

<b>I'll just cover them really quickly here.</b> <b>First one, you might've heard about this.</b> <b>There was a new Android feature</b> <b>scanning your photos</b> <b>for sensitive content.</b> <b>Pretty much there's a</b> <b>service that's being installed</b> <b>on Android devices automatically.</b>

<b>I assume through Google Play services.</b> <b>It doesn't have an icon.</b> <b>It doesn't show up on the</b> <b>usual list of running apps</b> <b>and it makes it difficult</b> <b>for users to find and manage.</b> <b>They've reported that the</b> <b>safety core reinstall itself</b> <b>even during system updates or through</b> <b>Google Play services</b> <b>after uninstalling the service.</b>

<b>Google's come forward and</b> <b>said that sensitive content</b> <b>warnings doesn't allow</b> <b>Google access to the contents</b> <b>of your images nor does</b> <b>Google know that nudity</b> <b>may have been detected.</b> <b>Google also issued users</b> <b>that safety core performs</b> <b>its functions locally on the device</b> <b>without sending any</b> <b>data to external servers.</b> <b>There are instructions to</b> <b>disable it in the article</b> <b>so we highly recommend checking that out</b> <b>if you're on a device</b> <b>with Google Play services</b> <b>to see if this is</b> <b>something on your system.</b> <b>On this topic, Google has confirmed Gmail</b> <b>to ditch SMS code authentication.</b> <b>So they're planning to ditch SMS codes</b> <b>and replace them with QR codes.</b> <b>This will not impact more secure options</b> <b>like TOTP or pass keys.</b>

<b>It's unclear if this will impact</b> <b>requiring a phone number</b> <b>to verify new accounts.</b> <b>My assumption is yes,</b> <b>so they're just</b> <b>replacing the SMS side of it.</b> <b>And then finally, Qualcomm</b> <b>and Google have teamed up</b> <b>to offer eight years of Android updates.</b> <b>This extended support window</b> <b>only applies to Android devices</b> <b>with the latest Qualcomm chip sets.</b>

<b>The eight year support</b> <b>timeline will be extended</b> <b>to devices running the new Snapdragon 8</b> <b>Elite mobile platform</b> <b>which powers devices like</b> <b>OnePlus 13 and the Galaxy S25.</b> <b>Later this year, the</b> <b>same policy will be applied</b> <b>to the company's new Snapdragon 8</b> <b>and Snapdragon 7 series chips.</b> <b>And you can expect the same deal</b> <b>for at least the next five</b> <b>generations of Qualcomm Silicon.</b>

<b>These are their flagship chips.</b> <b>So don't expect this from</b> <b>like the budget phones yet.</b> <b>Maybe we'll see that on that end as well</b> <b>but we haven't seen</b> <b>confirmation of that yet.</b> <b>And the key takeaway here is</b> <b>for privacy and cybersecurity</b> <b>this move will make it easier for OEMs</b> <b>to release full Android OS updates</b> <b>even toward the end</b> <b>of a device's lifespan</b> <b>ensuring a more secure</b> <b>and long lasting</b> <b>Android experience for users.</b> <b>Our last company story comes from Adgard.</b> <b>It says Adgard launches nightly version</b> <b>of world's first Linux ad blocker.</b>

<b>So this protects all</b> <b>browsers and apps on your device</b> <b>while providing precise ad</b> <b>blocking using Adgard's filters,</b> <b>third-party filters and user rules.</b> <b>It also removes annoying</b> <b>elements such as pop-ups,</b> <b>live chat widgets,</b> <b>cookie consent notifications</b> <b>and app download banners.</b> <b>And it warns you about malicious websites</b> <b>with browsing security features</b> <b>and it also supports</b> <b>third-party filters and user rules.</b> <b>It is currently available</b> <b>for download via curl or GitHub</b> <b>and on the roadmap they are</b> <b>planning to add encrypted DNS</b> <b>and split tunneling.</b> <b>All right, research.</b>

<b>We have a few</b> <b>interesting stories this week.</b> <b>So the first one, a single default</b> <b>password exposes access</b> <b>to dozens of apartment buildings.</b> <b>This is from the door</b> <b>access control system,</b> <b>Enterphone Mesh.</b>

<b>And pretty much it</b> <b>uses a default password</b> <b>where it's anyone can use</b> <b>to remotely access door locks</b> <b>and elevator controls</b> <b>in dozens of buildings</b> <b>across the US and Canada.</b> <b>They discovered this and found 71 systems</b> <b>relying on these</b> <b>default shipped credentials.</b> <b>Exploiting the bug is as simple as taking</b> <b>the default password</b> <b>from the systems</b> <b>installation guide on the website</b> <b>and plugging the password into the</b> <b>internet facing login page</b> <b>on any affected building systems.</b> <b>Next up we have Apple's</b> <b>Find My Network exploited</b> <b>to let attackers silently</b> <b>track any Bluetooth device.</b> <b>So researchers at George Mason University</b> <b>have uncovered a</b> <b>vulnerability in Apple's Find My Network</b> <b>that allows hackers to</b> <b>silently track any Bluetooth device.</b> <b>The exploit which has</b> <b>been dubbed En route tag</b> <b>has a success rate of 90%</b> <b>and can be used to track</b> <b>devices with high accuracy.</b>

<b>The way the article summarized it,</b> <b>they said they have</b> <b>essentially found a way</b> <b>to turn any device such</b> <b>as a phone or a laptop</b> <b>into an air tag without</b> <b>the owner ever realizing it.</b> <b>And then after that,</b> <b>attackers can simply</b> <b>remotely track the location.</b> <b>So the researchers have alerted Apple</b> <b>and Apple has said</b> <b>they're gonna roll out a fix,</b> <b>but researchers warned that a fix may</b> <b>take years to roll out</b> <b>as not everyone will update</b> <b>their devices immediately.</b> <b>The attacker can do it all remotely</b> <b>from thousands of miles</b> <b>away with just a few dollars.</b> <b>Scientists are creating</b> <b>the world's first chip</b> <b>that can protect data in the age</b> <b>of quantum computing attacks.</b>

<b>And this was from Switzerland</b> <b>and they developed a</b> <b>new method called QS7001.</b> <b>This is to protect internet security</b> <b>against quantum computing attacks.</b> <b>This combines two quantum resistant</b> <b>encryption protocols,</b> <b>the lithium and Kyber,</b> <b>with a reduction in</b> <b>data transmission time</b> <b>to close the window of</b> <b>opportunity for attacks.</b> <b>Some of the details in the article,</b> <b>and I'm gonna be quoting it,</b> <b>"It is worth noting that this method</b> <b>does not prevent intercepted information</b> <b>from being copied and stored.</b>

<b>And at that point,</b> <b>a quantum computer</b> <b>would not be constrained</b> <b>by the reduced transmission time.</b> <b>However, what this does is narrow the</b> <b>window of opportunity</b> <b>for interception and</b> <b>prevent intercepted messages</b> <b>from being modified or misdirected."</b> <b>We're gonna move into</b> <b>the politics section.</b> <b>So the first one comes from Sweden,</b> <b>where Signal is</b> <b>threatening to pull out of Sweden.</b> <b>The Swedish</b> <b>government is proposing a bill</b> <b>that would require messaging</b> <b>apps like Signal and WhatsApp</b> <b>to store user data,</b> <b>including message history for law</b> <b>enforcement purposes.</b> <b>This has sparked concerns</b> <b>from Signal CEO Meredith Whitaker</b> <b>who stated, quote,</b> <b>"If you create a</b> <b>vulnerability based on Swedish wishes,</b> <b>it would create a way to</b> <b>undermine our entire network.</b>

<b>Therefore, we will never</b> <b>introduce these back doors."</b> <b>The purpose of the bill,</b> <b>which may be passed next year,</b> <b>is for the police and security services</b> <b>to be able to request</b> <b>message history in retrospect</b> <b>for individual suspected crimes.</b> <b>The armed forces, on the</b> <b>other hand, are negative</b> <b>and write in a letter to the government</b> <b>that the proposal</b> <b>cannot be realized, quote,</b> <b>"without introducing</b> <b>vulnerabilities and back doors</b> <b>that can be exploited by</b> <b>third parties," unquote.</b>

<b>And then on a similar note,</b> <b>this one comes from Tudor.</b> <b>It says, "France is about to pass</b> <b>the worst surveillance law in the EU.</b> <b>We must stop them now."</b> <b>So I'm just gonna quote the</b> <b>relevant part of the article,</b> <b>because this is one of those blog posts</b> <b>that's designed for public awareness,</b> <b>so most of it is kind of explaining</b> <b>what is end-end encryption,</b> <b>why is the idea of a backdoor stupid,</b> <b>which we've covered</b> <b>that ad nauseam last week,</b> <b>quoting the article,</b> <b>"France is about to amend a</b> <b>bill against drug trafficking,</b> <b>the narco traffic law,</b> <b>which will force encrypted</b> <b>messaging apps like Signal</b> <b>and WhatsApp to backdoor the encryption</b> <b>for being able to hand</b> <b>over decrypted chat messages</b> <b>of suspected criminals</b> <b>within 72 hours of the request.</b> <b>In order to enforce it,</b> <b>the text provides for, quote,</b> <b>"a fine of 1.5 million</b> <b>euros for natural persons</b> <b>and a fine of up to 2%</b> <b>of the annual turnover</b> <b>for legal persons," unquote.</b>

<b>The amendment has already</b> <b>been passed by the Senate</b> <b>and is now moving fast</b> <b>to the National Assembly.</b> <b>A judge has said that the US government</b> <b>violated privacy law by</b> <b>disclosing personal data</b> <b>to Doge, the new thing in the US.</b> <b>So they blocked Doge</b> <b>from accessing personal data</b> <b>held by the US Department of Education</b> <b>and Office of Personal Management, OPM.</b> <b>The ruling follows</b> <b>one in a different court</b> <b>that blocked Doge's access</b> <b>to Department of Treasury information.</b>

<b>The American Federation of</b> <b>Teachers and other plaintiffs</b> <b>have shown that education and OPM</b> <b>likely violated the Privacy Act</b> <b>by disclosing their personal information</b> <b>to Doge affiliates without their consent.</b> <b>Boardman is the judge behind this,</b> <b>and he granted a</b> <b>temporary restraining order</b> <b>that's in place until March 10th.</b> <b>She declined to extend the</b> <b>temporary restraining order</b> <b>to Department of Treasury data,</b> <b>but only because a different court</b> <b>issued a preliminary injunction</b> <b>blocking that access on Friday.</b> <b>This next one I think I included</b> <b>is more of a signal boost.</b> <b>Big Brother Watch</b> <b>condemns the UK's first use</b> <b>of citywide facial</b> <b>recognition in Cardiff.</b> <b>So the South Wales</b> <b>police are introducing, quote,</b> <b>"semi-permanent</b> <b>facial recognition cameras</b> <b>"across Cardiff City Center</b> <b>"during this year's Six</b> <b>Nations Rugby Internationals.</b>

<b>"Cameras will be positioned</b> <b>"at the main pedestrian entry points,</b> <b>"making it impossible</b> <b>for members of the public</b> <b>"to avoid the cameras.</b> <b>"Forces have previously deployed</b> <b>"live facial recognition</b> <b>vans equipped with one camera.</b> <b>Madeline Stone, who is a</b> <b>senior advocacy officer</b> <b>at Big Brother Watch said, quote,</b> <b>"embedding facial</b> <b>recognition surveillance</b> <b>"in a citywide CCTV network</b> <b>"represents a shocking</b> <b>expansion of police surveillance</b> <b>"and turns Cardiff into an Orwellian zone</b> <b>"of biometric surveillance."</b>

<b>Just for additional context,</b> <b>they say for the last three years,</b> <b>South Wales police has</b> <b>not made a single arrest</b> <b>due to its use of</b> <b>technology at sporting events.</b> <b>This technology specifically.</b> <b>Yet the force continues</b> <b>to waste taxpayer money</b> <b>on this rights abusing technology.</b>

<b>No other democracy in the</b> <b>world spies on its population</b> <b>with live facial recognition</b> <b>in this cavalier and chilling way.</b> <b>South Wales police must immediately</b> <b>stop this dystopian trial.</b> <b>So Apple's launched Age Assurance Tech</b> <b>as US states mull social media laws.</b> <b>So Apple said it will</b> <b>introduce a way for parents</b> <b>to share the age of a</b> <b>child with app developers</b> <b>without revealing sensitive information</b> <b>like birthdays or government</b> <b>identification numbers.</b>

<b>The move comes as a number of US state</b> <b>and federal lawmakers</b> <b>consider age verification laws</b> <b>for social media and other apps.</b> <b>That has set up a</b> <b>conflict in the tech industry</b> <b>over which party should be responsible</b> <b>for checking ages for users under 18,</b> <b>app stores or each individual app.</b> <b>As an alternative,</b> <b>Apple said it will roll out</b> <b>what it calls Age Assurance.</b> <b>Using it, parents will be</b> <b>able to input a child's age</b> <b>when setting up a child's account.</b> <b>That'll take us into the free</b> <b>and open source software section.</b> <b>And we have a bunch of stories,</b> <b>but they're all kind of short.</b>

<b>So the first one, Next Cloud Hub 10,</b> <b>your unified modular digital workspace.</b> <b>So there's a ton of</b> <b>new updates in this one,</b> <b>but the one they</b> <b>really buried the lead on</b> <b>and the stuff that's</b> <b>really relevant to this podcast,</b> <b>end to end encryption for</b> <b>calls and files in the browser.</b> <b>And then also there is</b> <b>a brute force protection</b> <b>that they're adding.</b> <b>And there was an</b> <b>extension for that in the past,</b> <b>but now again, they're adding it natively</b> <b>so you don't have to add this extension.</b>

<b>Just another little</b> <b>one to throw on there.</b> <b>They're also adding remote backups.</b> <b>So yeah, lots of new</b> <b>stuff in Next Cloud Hub.</b> <b>Definitely check that out.</b>

<b>Kagi is offering 30 days of pro for free</b> <b>without a credit card.</b> <b>They sent out an email.</b> <b>So I don't know if this is like</b> <b>you already had to have had an account</b> <b>and they're trying to lure you in,</b> <b>but they straight up say</b> <b>that they're like, look,</b> <b>we're so confident you're gonna like our</b> <b>pro service so much.</b> <b>We think you're gonna sign up.</b> <b>So free trial, no strings attached.</b>

<b>So for those of you who</b> <b>are interested in Kagi,</b> <b>they do have a free tier,</b> <b>but now you might be able to go ahead</b> <b>and try out this free trial,</b> <b>which they've never done before.</b> <b>So that's interesting.</b> <b>So this next story comes from Proton.</b> <b>It's not really super privacy related,</b> <b>but just something to</b> <b>keep you guys updated on.</b> <b>Proton has decided to ditch</b> <b>Mastodon in favor of Reddit.</b> <b>The link in the show notes</b> <b>goes to their Mastodon profile</b> <b>and it's not a post.</b>

<b>It's actually written in their bio.</b> <b>So for those of you who want</b> <b>to like see it for yourself,</b> <b>check the bio.</b> <b>And then our last two stories,</b> <b>the first one we'll take from Calix.</b>

<b>They have dropped their Android 15</b> <b>February feature update</b> <b>and

2025-03-10 04:01

Show Video

Other news

The Data Chronicles | The AI dilemma | Balancing GDPR and innovation in the EU 2025-03-10 04:35
Arduino в Proteus БЕЗ Написания Кода. HX711 и тензодтчики. Делаем электронные весы 2025-03-08 15:02
Stanford Seminar - Personal Assistive Technology 2025-03-07 20:43