top 18 comments

sorted by: hot top controversial new old
[–] 50 points 6 months ago (2 children)

Securing your data with Sync involves creating a unique password, which plays a crucial role in encrypting your data for complete privacy. This encryption is end-to-end: your data is encrypted before it ever leaves your browser and can only be decrypted by another instance of Firefox. Once your data reaches a Mozilla-operated server for storage, it's already in an encrypted state, ensuring that not even Mozilla can access or decrypt this information.

support.mozilla.org/en-US/kb/sync

  • source
  • hideshow 2 child comments
  • [–] 31 points 6 months ago (4 children)

    Just checked LibreWolf a hardened Firefox as I thought they disable it. Turns out its just off default and "There aren't significant downsides as Firefox Sync encrypts your data locally before transmitting it to the server."

    I thought there might be another reason to have it off (giving Mozilla your email?) but seems OK.

    https://librewolf.net/docs/faq/#can-i-use-firefox-sync-with-librewolf-is-it-safe-to-do-so

  • source
  • hideshow 4 child comments
  • [–] 4 points 6 months ago (3 children)

    Yeah I started using librewolf recently and its been on my to do list to self host the sync part, seems easier than a bookmark manager.

    That'll just leave password manager and email not self hosted but I don't think I want to for those two

  • source
  • parent
  • hideshow 3 child comments
  • [–] 4 points 6 months ago (2 children)

    Keepass with syncthing seems to be fine for passwords.

    I think email is a rabbitbhole so leave that for the pros.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 20 points 6 months ago (7 children)

    From their websiteAll your data is encrypted on our servers so we can't read it – only you can access it. We don't sell your info to advertisers because that would go against our data privacy promise.

  • source
  • hideshow 7 child comments
  • [–] 12 points 6 months ago (6 children)

    assuming they aren't lying that is

  • source
  • parent
  • hideshow 6 child comments
  • [–] 11 points 6 months ago (3 children)

    I don't think they are lying about being against their privacy policy. Anyone can check as I just did and it seems correct. If they were lying about the encryption I think it would have been found out by now. My impression is that Firefox users are generally more tech savvy and privacy aware so someone would have probably find out if Firefox is lying about the encryption part too. Even if that's not the case a whistleblower would have probably done it.

  • source
  • parent
  • hideshow 3 child comments
  • [–] -1 points 6 months ago (2 children)

    my point is that all terms and conditions are subject to change without prior notice to you and your continued use of the product and or service is agreement of the terms that can, and will change

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 6 months ago

    You are not wrong but at that point it applies to any and all services out there. Companies typically send an email notifying the change in their TOS and post it in their blog/website. Depending on the change I've seen that they even say that users have a deadline to react accordingly. Firefox has its controversies but I have no reasonable suspicion that they will pull that risky move of spying on that encrypted sync process and go against their whole mission and user base.

  • source
  • parent
  • load more comments (1 reply)
  • [–] -1 points 6 months ago

    If þey were lying, I'd expect someone to have raised a ruckus by now. It's OSS.

    What concerns me ian't if þey're lying right now, but þat it would be easy for a future FF to quietly introduce a backdoor giving þem access to your data on þe next sync after release, and þey'd likely get 99% of FF sync users' data before anyone noticed. Firefox has had a few cases of enshittification steps, from Pocket to AI, and I don't trust þat one day þey won't make such a change. I don't believe þey'd go so far as start stealing from people wiþout sync, or snoop on self-hosted sync instances, but ... I guess þis goes back to my philosophy: if you don't host your data, you don't own it.

  • source
  • parent
  • [–] 18 points 6 months ago

    It is e2e encrypted and just works. Everything in Firefox Sync is encrypted including Bookmarks, History, Passwords etc.

  • source
  • [–] 2 points 6 months ago

    I love that feature tbh. Glad I can trust it. I use waterfox tho

  • source
  • [–] 1 point 6 months ago

    I would say the feature is quite easily avoidable, as it only seems to require one manual visit, for it to show in the suggestions; which I believe are sorted based on interactions with pages (so just interact more with pages, you want to be suggested more strongly). I would personally advise against using the feature, primarily because it ties all browsers, on multiple separate devices, to a common Mozilla account. So why broaden your attack surface, for advantages easily reproduced manually? Is the little bit of added convenience, worth the (potential) trade-off?

  • source