mozilla products phoning home all the time, violating privacy and security policy

I've noticed that Mozilla products (firefox, thunderbird etc) all phone home all the time, which is a violation of both my security as well as privacy policy. In the fire… (funda kabanzi)

I've noticed that Mozilla products (firefox, thunderbird etc) all phone home all the time, which is a violation of both my security as well as privacy policy. In the firewall one can observe persistent, periodic, repeated connections to various non-sanctioned sites and services, apparently run by Mozilla. These include, but are not limited to:

firefox-portal-detection.com etc.

Specifically, there are persistent, periodic and repeated connection attempts to (just copy/pasting from the first page of firewall report; there are many more as well as similar connection attempts from thunderbird as well): firefox-settings-attachments.cdn.mozilla.net:443 assets-prod.sumo.prod.webservices.mozgcp.net:443 content-signature-2.cdn.mozilla.net:443 push.services.mozilla.com:443 etc

These begin at the startup of the browser/mua and continue throughout the session. Given that none of the sites actually browsed have anything to do with mozilla per se, and given that various privacy-violating features such as DNS-over-HTTPS (yes, that's a not a privacy-enhancing feature but the opposite - it just shifts the surveillance point from the ISP to the DoH provider) and other similar "features" are disabled in-browser, there should be no user/browser connections attempted to mozilla servers.

Also, by setting up a local security MITM proxy in order to observe and analyze the content sent to and received from these services and configuring the browser to connect via the proxy, the browser seems to *stop* trying to connect to these services, which indicates *active* measures by the browser/mua to avoid it's browser-fingerprinting and location-revealing content from being intercepted and analyzed.

This is especially concerning as Mozilla actively brands and markets it's products as privacy-respecting, as for-user-rights and as away-from-big-tech-dominated. Consequently I perceive this as complete breach of trust. Even by just *attempting* such phone-home connections a leak of metadata occurs, identifying the IP, the browser and consequently the user and user's location, sometimes actively (such as was the case with now apparently discontinued location.services.mozilla.net). Combined with whatever content these connections carry, this constitutes a serious breach. And there seems to be no way for the user to configure the browser to stop making these connections, other than by using an external application firewall.

And to top it off, with Firefox version 155.0.1, the browser now outright refuses to connect to *any* sites at all if firefox.settings.services.mozilla.com:443, firefox-settings-attachments.cdn.mozilla.net:443, firefox-portal-detection.com:80 and content-signature-2.cdn.mozilla.net:443 are *externally* blocked, at least on that profile (which worked just fine prior to upgrade to 155.0.1), showing a spinner and waiting indefinitely (not even timing out). These are the *only* connections it even attempts, completely ignoring the actual site that it was told to connect to. So that's at least 4 privacy-violating, security-policy-violating phoning-home connection attempts and a complete disregard for user's actual, sanctioned connection request.

Open 1

Domain normalisation is corrupting

I am in the UK. I happen to have used amazon UK enough recently that it gets into the top-8 history in the address bar on a new tab. And then the Amazon sponsorship – whi… (funda kabanzi)

I am in the UK. I happen to have used amazon UK enough recently that it gets into the top-8 history in the address bar on a new tab.

And then the Amazon sponsorship – which is turned off in settings – corrupts it and "normalises" it to reference amazon.com. Screenshot attached with the misalignment highlighted.

Of what possible use is it to surface a top recently-used site when the address gets corrupted so it does not point to the site that has been used? This is idiotic.

Hint. When sponsored sites are turned off, respect that choice. Do not allow them to corrupt the experience. And even if it weren't a corruption introduced at Amazon's behest, domain normalisation is absurd when the site in question is geographically distinct. There is no possible excuse for it.

Open 1

My spell check hardly ever works, I tried suggested remedies.

My spell check generally doesn't work, but occasionally comes back to life, I have tried the about config, and change value to 2, I have tried uploading dictionary, and m… (funda kabanzi)

My spell check generally doesn't work, but occasionally comes back to life, I have tried the about config, and change value to 2, I have tried uploading dictionary, and making sure check as I type is ticked, but the setting on config seems to keep reverting to 1, and I'm sure if I have successfully uploaded a dictionary, I clicked on language pack, Ironically while I'm typing this, my spell check is actively involved.

Open 3

What have you done???

For a long tome Chrome use to be my go to browser, but with all the recent changes and google buckling to legislation changes, I returned to Firefox as my primary browser… (funda kabanzi)

For a long tome Chrome use to be my go to browser, but with all the recent changes and google buckling to legislation changes, I returned to Firefox as my primary browser. You see, because proxy settings can be set within the browser instead of system wide as with others, I primarily used Firefox to access private networks I was given access to. I still use Firefox for this, but mow for everything else too.

I see that there can be multiple profiles set up, which I hope would allow me to quickly swap between proxied connections and non-proxied connections. The problem I ave found, is how hard it was to find this setting with the latest iteration of firefox. It used to be a simple matter of scrolling all the way to the bottom of the settings screen, now I've had to hunt high and low just to find it. Whilst I have mentioned multiple profiles already, if this does not allow me to quickly swap then its pointless. So, can we PLEASE have the proxy page put back where it was, nice and easily accessible,

Open 2

Unable to save screen capture as PDF using fireshot

I use Fireshot on my Mac to take screenshots and normally save as PDF. This works fine using Safari and Chrome browsers. However, using Firefox, when saving the screensh… (funda kabanzi)

I use Fireshot on my Mac to take screenshots and normally save as PDF. This works fine using Safari and Chrome browsers. However, using Firefox, when saving the screenshot as a PFD it uses file type 'All files' Up till now, I have been unable to open the file saved as an 'All files' document. But this morning, saving the capture as a PDF 'All files' type, has saved the document as a PDF.

QUESTION: Just using Firefox, why does saving a screen capture uses 'All files' when saving as a PDF. And has the issue been noted and resolved, but the All files file type still shown? NOTE: The drop-down arrow on Format does not offer any alternative.

Open 1

I am in China and do not seem to be able to connect to the Mozilla Firefox VPN.

I am in China and do not seem to be able to connect to the Mozilla Firefox VPN, to access my gmail (and other features). When I try to turn it on, I get a message: "Could… (funda kabanzi)

I am in China and do not seem to be able to connect to the Mozilla Firefox VPN, to access my gmail (and other features). When I try to turn it on, I get a message: "Could not connect to VPN: Try again in a few minutes" I did this many times. Should I continue trying or is it hopeless?

Thank you

Open 2

YouTube Has Blocked

YouTube Has Blocked ALL of current VPN I have been using the Built in FireFox VPN from the start was enjoying the ability of watching YT videos I can not find or watch a… (funda kabanzi)

YouTube Has Blocked ALL of current VPN I have been using the Built in FireFox VPN from the start was enjoying the ability of watching YT videos I can not find or watch as I live in the Great White North

is there any planes to fixing FF VPN?

Open 2

Remove clocks and huge padding from input autocomplete list

The autocomplete dropdowns for form fields have recently changed appearance, and I strongly prefer the previous, simple design. The new version has: Clock icons next to… (funda kabanzi)

The autocomplete dropdowns for form fields have recently changed appearance, and I strongly prefer the previous, simple design.

The new version has:

  • Clock icons next to autocomplete/history entries
  • Much more vertical padding, making the list unnecessarily large
  • Rounded "pill-shaped" highlighting when hovering over an entry

The previous autocomplete list was much more compact and clean, without the clock icons, excessive padding or rounded hover backgrounds.

Is there currently a setting, `about:config` preference or other supported way to restore the old autocomplete list appearance?

Ideally, I would like to use the previous style:

  • No clock icons
  • Compact rows with the previous amount of padding
  • No rounded/pill-shaped hover effect
  • Otherwise retain the existing autocomplete functionality

If there is no setting to restore the old appearance, could an option be added to allow users to choose between the old and new autocomplete UI?

Open 8