top 61 comments

sorted by: hot top controversial new old
[–] 130 points 1 month ago (16 children)

Settings, About Firefox. Tap the logo several times until it enables the debug menu. Back to settings, Nimbus Experiments. Find the VPN setting at the bottom of the list and you should be able to turn it off there.

A super straightforward process, 100% seriously good design by Mozilla.

  • source
  • hideshow 16 child comments
  • [–] [S] 43 points 1 month ago (4 children)

    Thanks! All that to disable some advertisement built into the browser. Utter bullshit.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 27 points 1 month ago (3 children)
  • [–] 1 point 1 month ago (9 children)

    100% seriously good design by Mozilla

    bullshit. a hidden multi step process to turn off a paid subscription feature no one asked for should not be fucking hidden

    it should be a simple switch in settings to turn off. not a multistep turning on debug menu level process.

  • source
  • parent
  • hideshow 9 child comments
  • [–] 2 points 1 month ago (3 children)

    paid subscription

    isn't the one built into firefox free and called firefox VPN? and isn't their paid option using mullvad's infrastructure Mozilla VPN?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 1 month ago (1 child)

    You mean the "try it for free" where you only get 50GB of usages per month for "free" where it will stop working if you hit that, and then they have a paid subscription if you want more? That "free"?

    "If you need more data, you can subscribe to Mozilla VPN for unlimited usage"

    Sounds like fucking advertising to me

  • source
  • parent
  • hideshow 1 child comment
  • [–] 22 points 1 month ago
    [–] 56 points 1 month ago (13 children)

    Don't post screenshots with personal identifyable information...

  • source
  • hideshow 13 child comments
  • [–] 21 points 1 month ago (10 children)

    In what world is a public email sensitive PII, mate? Sure, “never post anything on the internet ever” is the best OPSEC posture by default, but this user is a clearly-experienced self-hoster who understands the risks and consequences of what they’re doing.

    It’s listed as their whois domain contact, and anyone with OSINT chops can find a long-term email tied to a custom domain with enumeration tools + breach data. Why hide it?

  • source
  • parent
  • hideshow 10 child comments
  • [–] 15 points 1 month ago* (last edited 1 month ago) (4 children)

    It can now pretty reasonably be assumed what OP's first name is, and that can be associated with his username.

    Granted, his username might also be a derivative, but on its own there is a certain amount of plausible deniability there.

    The more crumbs of identifiable information you leave around, the easier it becomes for malicious parties to gather them together and build a profile on you.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 8 points 1 month ago (1 child)

    Right, but speaking for the dev crowd, plenty of us have public identities. Anyone can find my email trivially by scraping github. If you have a public online identity in the first place, it’s far preferable to treat your public-facing email as public information, rather than to rely on security by obscurity and assume no one will ever discover it.

    The only glaring risk from an online attacker is credential stuffing, and falling victim to that one is a skill issue tied right back to assuming your email address won’t become public.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 5 points 1 month ago* (2 children)

    Email is an unique identifier, so whatever content and metadata goes along it is identified. For example now we know accounts lena and gregor use the same device and most probably belong to the same person.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 1 month ago (1 child)

    I mean, I just sat through annual privacy training and was taught that email addresses are legally PII in many jurisdictions.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 5 points 1 month ago

    Legally, of course it’s PII — but is it sensitive information if you treat it as public and distribute it yourself?

    I’m speaking to the functional cybersecurity angle, not the semantics of PII.

  • source
  • parent
  • [–] 20 points 1 month ago
    [–] 14 points 1 month ago (11 children)

    Considering someone else gave that actual answer, here's something to consider: switching to Waterfox will give you essentially all the benefits of Firefox, but without the bloat, and with some extra privacy features baked in.

  • source
  • hideshow 11 child comments
  • [–] 3 points 1 month ago (9 children)

    Given this is mobile, Waterfox is not an option.

    Fennec and IronFox are

  • source
  • parent
  • hideshow 9 child comments
  • [–] 8 points 1 month ago (5 children)
  • [–] 5 points 1 month ago (3 children)

    Are they only pushing to play store? I've never seen them on FDroid

  • source
  • parent
  • hideshow 3 child comments
  • [–] 5 points 1 month ago (2 children)

    Thought I had loaded it from F-Droid but checked and I installed it with Obtanium from their github @ https://github.com/BrowserWorks/Waterfox-Android

  • source
  • parent
  • hideshow 2 child comments
  • [–] 6 points 1 month ago (3 children)

    A lot of forks of firefox don't have forced shit like this, try one. Personally I like waterfox, no AI bullshit, built in ad blocker, and (luckily for you) the VPN banner does not appear.

  • source
  • hideshow 3 child comments
  • [–] 2 points 1 month ago (4 children)

    I assume any VPN integrated into a browser is useless at best. Anyone know specifically the problems with it?

  • source
  • hideshow 4 child comments
  • [–] 8 points 1 month ago* (3 children)

    It's actually pretty damn good in terms of privacy. It's Mozilla VPN, which is white labelled and resold Mullvad (but at the same price).

    Mullvad is a no logs provider with a good track record.

    Unfortunately,: https://korben.info/en/mullvad-cofounder-funding-far-right.html

    I typically avoid VPN's, becuaee in my opinion DNS over TLS/HTTPs + HTTPS are enough for my privacy/security needs, but I will happily use the free VPN every once in a while to get around a firewall or test if a website is universally down. I find it very useful, and am happy that firefox has added. And although I'm not entirely pleased given recent relevations about Mullvad, I'm happy to see that Mozilla is attempting to make money by offering privacy, rather than taking it away.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 1 month ago (1 child)

    You play gregtech modpack?

  • source
  • hideshow 1 child comment
  • [–] [S] 0 points 1 month ago

    See my instance's sidebar

    The domain name

    This instance is named "gregtech" simply because my name is used to be Gregor, and I didn't check whether there is already something called "gregtech" before registering my domain name. Yes, even EU, which is a thing in the minecraft mod, is simply a coincidence. I guess you can also post about Gregtech, the minecraft mod, here.

  • source
  • parent
  • [–] 1 point 1 month ago (2 children)

    Now that you've gotten some answers,.why would you want to get rid of it? Is there something about VPNs that I don't know?

  • source
  • hideshow 2 child comments
  • [–] 4 points 1 month ago

    it's like how I now have a big Claude button in my Excel toolbar, despite not using Claude or having access to it. and the button takes priority over other toolbar sections that I actually use but are now hidden, so it has a quantifiable effect on my work.

    I don't want it, so I should be able to not see it

  • source
  • parent
  • [–] -2 points 1 month ago (2 children)