Hacker News new | past | comments | ask | show | jobs | submit login

> I was really hoping for an explanation of why they felt they could break their promise to users that Studies would only ever be used for, well, studies.

It's literally there:

> Because we had a lot of users who were affected, getting them fixed was a very high priority, which made Studies the best technical choice.

Which makes perfect sense to me. When you have a worldwide critical degradation of service, you fix that as soon as humanly possible, ideological pearl clutching be damned.




"Honoring the promise you depended upon to get users to install the feature in the first place" isn't ideological, or pearl-clutching.

Imagine your point in other contexts:

"If your company is about to go bankrupt unless it gets some serious revenue, then sure, you start selling the user data you promised not to, ideological pearl-clutching be damned."

"If a priest receives the confession of the killer in an unsolved mystery, he should report it to the police, religious pearl-clutching be damned."

And "critical degradation of service" is overstated; users always had the option to use another browser (like Mozilla seems to want these days). When they shut off everyone's unsigned, whitelisted addons in 2016, that wasn't regarded as a critical degradation.


The context is that people's adblockers, noscript/umatrix, and Tor add-ons were not working.


> "If a priest receives the confession of the killer in an unsolved mystery, he should report it to the police, religious pearl-clutching be damned."

Confidentiality in such areas (also med/law) is usually restricted to past actions. If you confess you're going to kill someone, that does indeed have to be reported to the police. I doubt your local laws are different here.

Thus to construct a better analogy we need ongoing harm that was initiated in the past but can only be shortened by taking action. Maybe a confession like "Just had an argument with my kid and imprisoned it in the basement without food and water. Will release it after two days". Now should this have to be reported to CPS? I'm not sure, but think I would favor yes.


I was making a moral (and somewhat practical) argument, not a legal one about a particular jurisdiction.


I mean, really? Mozilla's whole thing is integrity and principals. The Mozilla Manifesto is literally an ideology they probably don't want to be damned.

I'd have very much preferred them wait just 18 more hours and not have violated their privacy policies.

What exactly is Firefox's selling point if their principals can be traded for speed and convenience? That's just another tech company.


> What exactly is Firefox's selling point if their principals can be traded for speed and convenience? That's just another tech company.

If everyone cared as much as you do about this issue, then they'd have likely waited. The fact that they were jumping through hoops tells me that the users don't care, they want their crap fixed _right now_.


> The fact that they were jumping through hoops tells me that the users don't care, they want their crap fixed _right now_.

Surely what that tells you is that Mozilla thinks that users don't care, and want their crap fixed; in which case the policy might as well say "These policies will be applied unless their abrogation is necessary to fix your crap", or some appropriately dignified re-wording.


They didn't remotely enable telemetry/studies though, right? If you were fine with waiting, you could have just not enabled it. I don't see how anything they did violated their privacy policies.


The policies that using Studies in this way violated are listed in my initial post. Those policies were created to prevent Studies from being used as a convenience.

You might think violating them was justified, but that they were in fact violated is inarguable.


> The policies that using Studies in this way violated are listed in my initial post.

You just claimed they had violated their privacy policy, not the shield studies guidelines. Your initial post doesn't say anything about their privacy policy. And as I said, your privacy wasn't affected at all if you didn't enable the studies yourself, so your point about rather waiting doesn't make sense either.

> You might think violating them was justified, but that they were in fact violated is inarguable.

You could argue that testing the fix meets the first two conditions you listed. I don't know if they actually provided that "Product Hypothesis Doc", but at that point you're really just looking for something to complain about.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: