yoasif @ yoasif @fedia.io

Posts

90

Comments

116

Joined

2 yr. ago

Moderating

---

I gave the Grsecurity anecdote to try to explain what I see as the weirdness surrounding the fact that Firefox as distributed by Mozilla is governed by both the source code license and its new ToS that adds new restrictions to the distributed product.

Clearly the uncompiled source code is open source and governed under an open source license.

Do you see Mozilla as displaying "aggression" and is their imposition of the ToS "rage baiting"? Mozilla made changes to the status quo. If the situation changes, are people not supposed to react?

It's not a couple of days, it is in place today. We need to wait until new code is developed to enable Labs for people who have telemetry or studies disabled.

I wonder if you will get excoriated for this opinion, since I had to respond to people in my last post with an update because people were adamant that Firefox was open source. 😼

I have no idea what prompted them to shift their position - I just know that they shifted. Look at the release notes and the support pages if you disagree. There is clearly a change.

Yes, it sends data by default - but you can disable that. Not so for Firefox Labs.

Plenty of OSS licenses have rules baked into them about how you can use the code, or lay out obligations for redistribution.

"Is it really open source if I have to edit the source code I was given to remove a feature I don't like?"

I'm really not being aggressive about this position and I tried to express the ambiguity here. I think what irks me most are these things:

1. Forking Firefox means it isn't Firefox - yes, this means that the original was OSS, but you really need to be an expert to get at all the OSS code running on your machine. I mean that it is literally not Firefox, since your fork doesn't have permission to use the trademarked name.
2. If we think of the enabling functionality in Firefox as a virtual lock, breaking that lock is illegal under the DMCA. That seems very weird for code that is ostensibly open source.
3. The addition of the Terms to Firefox seems like an additional restriction (a la Grsecurity, as I mentioned in the post) to the existing license in Firefox. Indeed, Mozilla says that the existing license isn't "transparent" enough for Firefox users.

Yes, the purpose of a system is what it does, but the author isn't presenting any evidence of what it's doing vis a vis their claim of making technical users quit FF.

The purpose of the system being what it does is Firefox being spyware - you can't escape it if you want to use Labs features.

Love the feedback, and I while I think Firefox is open source, I do see the addition of software locks as backing away from OSS.

I also went ahead and posted a small update with some additional clarifying thoughts - I don't think it will satisfy you, unfortunately - but it might help people understand where I am coming from.

https://blog.mozilla.org/en/firefox/firefox-labs-fx138/

Orion isn't open source.

I talk a little about this in the post, but it feels very weird to think of the new Labs features as being open source but not being accessible unless you are giving Mozilla data -- OR you are compiling your own copy of Firefox (which is also no longer Firefox).

I think it is a very weird situation, but of course I do see the ambiguity.

Well - I don't know about them being the same.

The new terms specifically disclaims Mozilla's ownership of your data:

This does not give Mozilla any ownership in that content.

which limits their license to your data to processing it for usage within Firefox or Mozilla services. That is a huge difference. I don't see how they would be able to claim - in a clickwrap agreement - that Mozilla saying that they don't own your data somehow grants Mozilla ownership of your data.

That would be mind boggling.

I'm not pushing the video, it is there for people who don't want to read. 🤷

Sorry for wasting your two minutes.

Here's some more analysis (also linked on the original post).

My feeling on this is basically with Mozilla potentially running advertising campaigns on their own in Firefox (especially with Google funding possibly drying up), Mozilla felt that they needed to clarify their permission for access to user data.

Still, that doesn't really explain why their initial terms were so over-broad in the first place -- that is why everyone's thinking went straight to AI as soon as they made their initial announcement. They haven't deigned to provide us with an explanation for that - besides telling us that it was due to the CCPA.

Clearly we can't lay all the blame on CCPA, since the rights grant is more limited today than at first introduction - a fact that they readily admit.

Yep, it is also not enabled for Linux, and your distribution might not be using a Mozilla binary anyway.

Right now, it is for new users only. Existing users are going to have to opt in at some later date.