Firefox Community Forum

Firefox releases email addresses and our data to third parties!

I installed the Arc browser and Arc offered to load my bookmarks from mozilla. Out of curiosity, I let it, and it loaded my bookmarks and folders smoothly. Arc didn't navigate Firefox to the login page, so Firefox released my information without asking me.

What probably happened in the background was that the Arc browser told Firefox which email address it was requesting data from, and Firefox handed over the data to it "on notice". Firefox was not even convinced that the real owner of the email address asked the Arc browser to synchronize the folders.

Is it the famous Firefox reliability?

I went to Ugsound.com accidently while using Firefox on my Imac. The Firefox warning came up immediately and I left the site. Did Firefox protect me from malicious virus or was it too late? I was on the site for maybe 7-8 seconds.

I already occasionally run into sites that don't behave well with Firefox, forcing me to use another browser in some cases.

Will enabling these settings tend to contribute to exacerbating the problems?

I'm using Firefox 129.01 (64-bit), trying to log in to my Tufts Health Plan account, and get a security warning (screen shot attached). Customer Service at Tufts Health Plan tells me that I should use Chrome.

Should I ignore the Warning and proceed?

Hi!

First of all, mods, if I chose the wrong category and this had to go in "customize settings and preferences" feel free to move it :)

So, for several reasons I decided to completely disable SSL and the old TLS 1.0 and 1.1. I still didn't decide if TLS 1.2 is still important or it's enough with 1.3 so for now I am leaving them both. I did this system wide, with PowerShell, following the instructions in THIS THIS article.

But then there's Firefox. I don't know if Firefox can establish SSL (or old TLS) connections despite the system "ban". But I came across THIS THIS article about how to enable TLS 1.3 in Firefox and when I went in about:config and I typed "security" I saw that there are a lot of voices with SSL and a lot more about TLS than just the security.tls.version.max mentioned in that article, so I am here to ask you what to do to be 1000% sure that all SSL and older TLS are completely disabled in Firefox, and that only TLS 1.3 is enabled.

If you have reasons to believe that disabling TLS 1.2 is not a good idea, let me know, but in THIS THIS article I've read that 1.3 is much better and it's anyway backwards compatible with 1.2 in case some server only supports 1.2, so I decided to leave only 1.3.

Thanks!

So, it happened again today. Saw their commercial on TV today and went to legacybox.com (NEVER BEEN THERE BEFORE; they transfer VHS tapes, and other stuff, to digital) and got an email from them after closing the browser tab and leaving their website. While I didn't open the email, their email Subject/title was "Thanks for stopping by...".

All I did was look around their website for a few minutes AND DID NOT GIVE THEM MY EMAIL ADDRESS!

This is EXTREMELY DISTURBING!

PLEASE, If anyone here has the Video DownloadHelper extension installed in Firefox AND their Companion App (it costs ~$28, I think.. so don't bother if you don't have it). And make sure you've updated to a recent version, WHERE THEY HAVE YOUR EMAIL/Licens# IN THE SETTINGS (L click on the VDH icon, click on the gear icon, and at the bottom of the menu, click on "More settings....". If your email is there, PLEASE GO TO Legacybox.com AND SEE IF THIS SITE SENDS YOU AN EMAIL as this may help to confirm if Firefox is leaking emails thru that app. Thanks!

16.7.2024

I read this German article:

Firefox 128 liefert per Default Daten für Werbetreibende

Mozilla lässt eine neue Technologie für "datenschutzfreundliche digitale Werbung" in den Firefox einziehen. Die Aktivierung erfolgt ohne Einwilligung der Nutzer.

Which means Firefox 128 Delivers per-default Data for Advert agencies. Mozilla allows a new technology for "Date protection friendly digit Advertising" on Firefox. The activation is without permission from the user.

This is not good at all. I am now thinking of rejecting Fierfoy and moving to Opera or similar. Why did Morzilla take this fatal step?

I keep getting: Save Login for http://blabla.xyz?!!

if i say 'never' it just keeps asking.

now your saying. aah. thats cause it cannot differentiate a ipv4 and a hostname.

The gethostbyname() function returns a structure of type hostent for the given host name. Here name is either a hostname or an IPv4 address

i wonder then what this browser does. not remembering by name. here thus the word never is better replaced by -> ask me again next time.

Firefox now asks for primary password every time it starts even if it is not needed to access a site with a saved password. Removing and resetting primary password does not fix the problem.

I recently got seriously worried when I became aware about the new AI firewalls these days, which monitors or inspect SSL encrypted packets, before the packets reach to the main website. These new AI firewall systems are installed in some countries by their governments to suppress free speech, or just spy on its people. These firewalls, as you may already know, uses DPI-SSL system, which decrypts packets traveling from user to the main website. To decrypt the HTTPS packets, these firewalls uses its own self signed CA certificates. So I am asking the firefox developers, that why you guys allow this privacy issue? Does the packets sent from a firefoxe browser to other websites are also decrypted, by these firewalls? If yes, then why you guys allow this? Firefox must ONLY allow a specific CA certificate made for firefox browser only. Firefox browser must never let other third party softwares, or any software, to decrypt its encrypted packets. This is a serious privacy issue. With these firewalls, they can see what users write in chats, or posts, they can see witch content we are watching on a website, they can see who we follow on social media platforms, they can see which content or posts we like and etc. Even passwords are not safe anymore, which e use for any website of platform. When passwords are not safe, so does our accounts of various websites. This is a serious privacy breach.

These firewalls is a weapon for those countries which want to suppress free speech or suppress opposition sides in a government or spy on its own people.

Please let me know if I am mistaken or my concerns are genuine.

How do i keep my work computer browser seperate from my home browser account???

Somehow out of the blue my home firefox account became my work firefox account? All my work shortcuts or bookmarks appeared at my home but i dont want them.

If you open this website: https://www.zonnebloem.nl/ with the option Enhanced Tracking Protection the cookiebot popup banner is not shown as the third party tracking cookie from domain https://consent.cookiebot.com is protected and NOT loaded.

Does this mean Mozilla Firefox sees the https://consent.cookiebot.com cookie as a third party tracking cookie that needs to be blocked as nobody gave consent to load the cookiebot consent popup?

Question 1: Is according to Mozilla Firefox https://consent.cookiebot.com a third party tracking cookie that needs to be blocked if you as a user want to have guarantees over your privacy online?

Question 2: Is it not strange to see Firefox blocking a widely used cookie consent system to protect users by giving consent to select which cookies will be set yes/no?

Hi Just a quick one, I am using a VPN but everytime I open my browser I get bombarded with this dam acatcha and it takes ages to clear it, please there is bound to be away I can turn this off.......

Thanks

Why on God's green Earth is there a widget by default that has access to my location? I understand that it's just for weather but it is seriously unacceptable that a browser that claims to care so much about privacy plasters my location on my screen for all to see when I open a new tab. Seriously, who thought this was a good idea and how can I turn it off?

Hello guys, as in title - I use custom NextDNS set of rules on DNS-over-HTTPS. As of today, Firefox can't connect to the provider. AFAIK Troubleshoot Mode is also affected. The other devices using NextDNS on my network work just fine and when I set the DNS to work system-wide as a kind of workaround, I don't get an issue. Same when I use other DNS-over-HTTPS options in the Firefox Preferences. Yesterday the problem didn't occur and I haven't performed any updates since yesterday - both Firefox and NetworkManager seem to be up to date.

Additional info: OS: EndeavourOS (Arch Linux) Firefox version: 129.0.2

If any other info is needed, I'll be happy to provide it to you.

So I was trying to test webauthn so I went to webauthn.io and then signed up with my username but firefox then tells me touch your security key to continue with webauthn.io but it works very well google chrome. and shows me a qr code and then I scan it in my phone. And after some search I think that the problem is that firefox defaults to use the security key which is a physical device but i don't want to use it I want to get the QR code. Also I tried different websites but got the same problem.

And by the way I use arch linux but I don't think that the problem is with arch as I mentioned before everything worked very well in google chrome.

OK - I must be missing something. On my previous browser, Opera, if I wanted to see details of my passwords then I needed to put in the computer password, so keeping them quite secure. However, Firefox seems to let anyone using the browser to access the full details of all my passwords, even offering to copy them! This has to be the most insecure approach possible - surely this can't be correct, can it?