Firefox Community Forum

I have happily used Firefox for years now, but I avoid using AI for both privacy and environmental reasons. I am extremely concerned by Mozilla's increased emphasis on these technologies. I do not want, nor will I put up with, new AI features in my browser. If the company continues this push, I will move to a different browser. It'll be very annoying, and I'll be really upset about it, but it's what I'll have to do if y'all keep going down this path. Please stop.

One of the add-in permissions is "Access your data for sites in the “named” domain". I looked at that and thought, "That certainly cannot include passwords"; BUT the explanation for this permission is: "The extension could read the content of web pages you visit in the specified domain, as well as data you enter into those web pages, such as usernames and passwords. "

I was stunned.

That means that addins that get this permission have access to my banking/medical/etc. usernames & passwords. This is not acceptable. Can a permission be developed that would be: "Access your data for sites in the “named” domain" (except usernames/passwords).

The permission "Access your data for all websites" is significantly worse in that it applies to all sites.

I am incredibly concerned and disappointed over the announcement of the intention to turn Firefox into an AI browser. I use Firefox primarily for privacy concerns, and the already existing AI "features" that it has are pushing my boundaries already. The addition of more AI into this browser will slow it down, deplete natural resources, and ultimately push me away from it. I've been using Firefox happily for over 15 years now, don't ruin the good thing we have here.

AI is trash that doesn't do what it's being touted as capable of doing, and I'm sick of having it shoved in my face. Don't flush decades of good will down the toilet for no reason.

I keep getting pop-ups in the right lower corner from "mozilla firefox" (not sure if they are legit). They will say: "zeus.2020 trojan detected" or "virus detected" or "system is infected", etc. All have "Mozilla Firefox" in the upper left of the pop-up, and "via rgfirewall.xyz" at the bottom. Is this truly legit, or is it just a nuisance? I've just been closing them with the x or dismiss buttons.

I followed your instructions but they did not work. Specifically, I clicked on "Exceptions" after "Ask to save passwords," next to which I had clicked the box. Under exceptions, I put the URL for my bank. I clicked on "Block" and "Save Changes." Nevertheless whenever I go to my bank's log in page, it still autofills my user ID and password. (Yesterday I accidentally clicked the box when signing in to my bank's web page "Save User ID." Even though it only referred to my User ID, it now autofills both that and my password.

Also, even though there is a (non-working) Exceptions page for Saved Passwords, there is no such page for Saved User IDs.

Btw, when I used another browser to sign in to my bank's website, it did not autofill, so it's not the bank's software that is autofilling.

Thanks, Joe

Is there a security setting that allows me to show all my passwords rather than having to toggle them on each time?

I am a recluse. There's never anyone looking over my shoulder. I just don't want to have to mess with it anymore.

If there isn't, could some kind developer please make an add-on?

I am using two computers: an iMac (late 2009) running 10.13.6 (High Sierra) and a Macbook Pro (13-inch, 2012) running 10.15.7 (Catalina).

Thank you!

K

I posted here the other day and no help came my way.

I had all my emails accounts at Google, my xbox account, my facebook and my MS account hacked.

What do they all have in common?

Their log in and password were saved in my Firefox.

The other gmail accounts I have that are not saved were NOT hacked.

Is it just a coincidence?

Can anyone at Mozilla care to respond?

Thank you

I am looking to turn on review checker and cannot see how to do it. I don't have the price tag icon displayed nor do I have any reference to Review Checker in my settings. I'm wondering if my version of Firefox supports it (133.0). Any ideas?

Hi all,

I have a question regarding the permission requests of the Simple Tab Groups extension by Drive4ik.

As I'm sure many of you know, this extension needs to: This add-on needs to:

• Download files and read and modify the browser’s download history
• Monitor extension usage and manage themes
• Display notifications to you
• Access recently closed tabs
• Hide and show browser tabs
• Access browser tabs
• Store unlimited amount of client-side data
• Access your data for all websites

This add-on may also ask to: Read and modify bookmarks

Theoretically, I find this extension useful but I am concerned about the "Access your data for all websites" requirement. I read through Mozilla's permission request messages for Firefox extensions documentation and it seems like granting this extension these permissions would be a huge risk for the work I do– investigative journalism. It seems like I'll trade organizational benefits for a wider attack surface.

Can anyone speak more about the risks involved with using this extension, the trustworthiness of the developer, and why it needs the "Access your data for all websites" capability?

Thank you.

I'm using 107.0.1 vers. At this link it states: https://support.mozilla.org/en-US/kb/view-pdf-files-firefox-or-choose-another-viewer#w_use-a-different-pdf-viewer-for-downloaded-pdf-files

Disable the built-in PDF viewer and use another viewer

You can also set a different third-party PDF viewer to handle PDF files, instead of Firefox’s built-in PDF viewer. To switch from using the built-in PDF viewer to another viewer: 1. Click the menu button and select . 2. In the panel, go down to the Applications section. (SO WHERE IN THE HELL IS THIS SECTION???) YOU CAN'T DO I never selected Mozilla to open any pdf and there's no where to opt out or change based on what all the troubleshooting tips say... All these tips must be located on a much older version of Firefox cause they ain't in my version OR they are hid under some dubious section... Pretty frustrating....when you want to use Adobe and can't cause I'm locked in under Firefox....don't know how that has happened unless it was done automatically under one of the many current upgrades that have been coming down over the last month.

Yahho search is on my home screen but not on my app list. I suspect malware. I use Bitdefender free for antivirus and scans sho no problem. I read that yahoo search can be hacked.What can I do

I am looking for confirmation that Mozilla is moving to an 'AI browser'.

Will there be an option to not use this data harvesting LLM garbage or will mozilla be abandoning their core values?

I, among many of my peers, have spent the last few years struggling to get rid of unwanted AI in our lives and computers, scraping out information and invading our privacy like a virus. So many Firefox users chose Firefox BECAUSE it had no forced AI. We chose Firefox BECAUSE it doesn't steal our data or invade our privacy.

We have trusted Mozilla for years and heralded it as the only good browser left. We're begging you to not do this. The AI bubble will pop. Everyone is mad about this. Do not do this. Please.

Below is the content-security-policy Firefox loads for chatGPT:

default-src 'self'; script-src 'self' 'nonce-eec8ce04-1f27-4481-8ed6-b8f877eef280' 'wasm-unsafe-eval' chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ wss://*.chatgpt.com wss://*.chatgpt.com/; script-src-elem 'self' 'nonce-eec8ce04-1f27-4481-8ed6-b8f877eef280' 'sha256-RvbVrdDS11FSnQaULCOgXPA5u0nMP2Im1d2pGiRBGC4=' 'sha256-eMuh8xiwcX72rRYNAGENurQBAcH7kLlAUQcoOri3BIo=' auth0.openai.com challenges.cloudflare.com chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://apis.google.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://docs.google.com https://jidori.g1.internal.services.openai.org https://js.live.net/v7.2/OneDrive.js https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ https://www-onepick-opensocial.googleusercontent.com wss://*.chatgpt.com wss://*.chatgpt.com/; img-src * 'self' blob: data: https: https://docs.google.com https://drive-thirdparty.googleusercontent.com https://ssl.gstatic.com; style-src 'self' 'unsafe-inline' chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ wss://*.chatgpt.com wss://*.chatgpt.com/; font-src 'self' data: https://*.oaistatic.com https://fonts.gstatic.com; connect-src 'self' *.oaiusercontent.com api-iam.intercom.io api-js.mixpanel.com browser-intake-datadoghq.com chatgpt.com/ces fileserviceuploadsperm.blob.core.windows.net http://0.0.0.0:* http://localhost:* https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.onedrive.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://content.googleapis.com https://docs.google.com https://events.statsigapi.net https://featuregates.org https://graph.microsoft.com https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ https://www.googleapis.com o33249.ingest.sentry.io statsigapi.net wss://*.chatgpt.com wss://*.chatgpt.com/ wss://*.intercom.io wss://*.webpubsub.azure.com; frame-src challenges.cloudflare.com https://*.sharepoint.com https://content.googleapis.com https://docs.google.com https://onedrive.live.com https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ js.stripe.com; worker-src 'self' blob:; media-src blob: 'self' *.oaiusercontent.com fileserviceuploadsperm.blob.core.windows.net https://cdn.openai.com https://persistent.oaistatic.com; frame-ancestors chrome-extension://iaiigpefkbhgjcmcmffmfkpmhemdhdnj; report-to chatgpt-csp-new; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub1f79f8ac903a5872ae5f53026d20a77c&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=version%3Achatgpt-csp-new

Notice that it includes " frame-ancestors chrome-extension://iaiigpefkbhgjcmcmffmfkpmhemdhdnj"

Would this extension be installed in the computer, kind of like the extensions that are loaded from Chrome (i.e., C:\Users\myUser\AppData\Local\Google\Chrome\User Data\extensions_crx_cache)?

Thanx

I am very much against the utility of modern day AI for the Firefox Browser. More often than not, integration of AI has lead to several consumers having their data read and used against their consent, which leads to both ethical and privacy issues. Firefox as a browser has no need for AI, especially when it lacks its own search engine and thus relies on sites such as Google and DuckDuckGo which already make use of modern day AI.

I implore you to rethink the decision of integrating AI into the Firefox Browser. It is, truthfully, more trouble than it is worth and lacks trust from consumers.

"hi yes we're firefox, a private browser that prides ourselves on being without bloatware. but we're going to add ai integration! yay!" Are you kidding me? What is wrong with you? This new CEO joins and wants to destroy what Firefox *prides itself on* and WHY PEOPLE use it. I am very disappointed. I converted to Mozilla from Google years ago and have loved it ever since. It's such an absolute shame; I will have to find a new company to support. Was the point of Mozilla not to create private, secure programs? Do not integrate AI. We don't want it. We hate it. It's useless and it kills the earth. And I sure as heck won't be comfortable storing my passwords in my account anymore! You will destroy this.

Are Firefox extensions sandboxed from the rest of the operating system? Suppose I have installed a malicious extension/add-on on my system. Would it be possible for the extension to access and tamper with my operating system? I do not care if it tampers with the browser tabs or data inside the browser as long as it does not have a way to tamper with my OS. Using MacOS Sonoma