Hacker News Reader

I think the key is the "about you" part, not the "selling data" part. Based on the rest of the statement, your personal information (name, age, location, personal files (uploads/downloads), that kind of data) isn't shared, which is what most people would think of when they hear "your data". It sounds like the information they do share may be associated with you, but isn't about you in the colloquial sense - even if it is about you in the legal sense.

>I think the key is the "about you" part, not the "selling data" part

They're certainly attempting to articulate that as a conceptual distinction, but I don't think that division is as real as would be implied by trying to separate the one thing into two different words. Aggregated data is "about you" too, in many of the senses that matter in the context of privacy, and I would reject attempts at conceptualizing this into two things to imply otherwise.

I agree that this is a huge breath of fresh air because you are (1) actually reading what Mozilla said and (2) making sober nuanced distinctions absent from most criticisms.

But that said, these reassurances run into a "who ordered that" problem. No advocate for privacy was ever advocating on behalf of anonymized data any more than personally identifying data. Anonymous averaging over interests of groups still involves privacy compromises; and metrics, fingerprints and learning algorithms can mix and match that in ways that still cross the line. Abstracted profiling still works, and digs deeper than you might suspect (I recall the netflix data that could predict interests across different categories, like people watching House of Cards also liking It's Always Sunny in Philadelphia). Preferences can hang together in a measurable way, which is exactly why ad companies want them.

It's also just part of the long slow, death by one thousand cuts transformation into a company that doesn't have categorical commitments to privacy.

> How is sharing data with partners in order to make Firefox commercially viable (i.e. getting money in exchange) not "selling data"? Anonymized or aggregated data is still data, and it's quite disingenuous of them to try to weasel it in by changing the definition.

This situation isn't perfect, but I disagree that this is particularly weasely or disingenuous. It's not black & white and there are meaningful differences here.

I think the assumption of 'selling data' and primary concern from most users is the sale of their identifiable personal data - i.e. telling advertisers "this user is interested in X", using their privileged position as a browser to track and collect that information. This is absolutely what Facebook is doing when they sell your data, for example.

The description here is suggesting that Firefox are still committed to never doing that or anything similar. That is the main thing I'd want to know, so that's great.

However, it sounds like they may be selling generic anonymous data in some way - for example telling Pocket what percentage of people use the Pocket extension, or telling Google what percentage of people change their search engine away from Google. Both of those are cases where you can imagine they might receive significant extra income from partners given that data, and they feel this is reasonable but means they can technically no longer say the 'never sell your data'.

You could consider that level of data sharing problematic of course. That said, there is spectrum of problems here, and personally (and I think for most people) I am much more concerned about the tracking & distribution of actual personal identifiable data than I am about generic metrics like those, if that is what's happening (unfortunately, they haven't explained much further so this is still somewhat speculation - I fully agree more precise language would be very helpful).

>The description here is suggesting that Firefox are still committed to never doing that or anything similar.

This runs into what I'm calling the "who ordered that" problem, because this represents a retreat from a stronger commitment to privacy, and is not a conception of privacy that anyone was asking for, or that satisfies anyone who is concerned about privacy.

I don't want my interest in sci-fi to be made to conflict with my preference from buying locally, and influence campaigns urging me buy books through Preferred LArge Retailer and pushing me toward that clash are a problem whether the data powering them is personal or fed into an abstracted anonymized group.

And depersonalized profiling that "knows" I can be sorted into a specific "type of guy" bucket may involve learning things about me that I don't want to be inputs into marketing. They can still, for instance, make inroads into judgements about things like self esteem (e.g. colognes and beauty products), financial precarity, and can work to socialize groups into consumerist self-conceptions. They probably can be used to make inroads into classic forms of privacy violations like "looking to buy a home" or "trying to get pregnant" or other such aspects of identity that I don't want marketing to touch.

The problem is that ‘anonymized data’ is quite a big spectrum, and may be able to be deanonymized quite easily.

See this submission from earlier this month: Everyone knows your location: tracking myself down through in-app ads (26 days ago, 1957 points) – https://news.ycombinator.com/item?id=42909921

Mozilla owns Pocket.