Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[bug]: Firefox ESR makes requests to mozilla services and advertisers, leaking environment information like dns config, ip info, user-agent, OS #2409

Open
1 task done
gStart9 opened this issue Sep 6, 2023 · 1 comment
Assignees
Labels
Bug Something isn't working Needs Triage Needs to be assigned a priority

Comments

@gStart9
Copy link
Member

gStart9 commented Sep 6, 2023

Prerequisites

Server Hardware

DIY x86_64 proxmox VM

StartOS Version

0344

Client OS

Linux

Client OS Version

0344

Browser

Other

Browser Version

Firefox ESR

Current Behavior

A DIY-StartOS-on-proxmox user who uses pi-hole for DNS reported that StartOS is making requests to these sites:

detectportal.firefox.com
ipv4only.arpa
partnerprogramm.otto.de
www.amazon.de
contile.services.mozilla.com
community-registry.start9.com
registry.start9.com
autopush.prod.mozaws.net
push.services.mozilla.com

Proxmox by default is configured to connect a display, which explains why firefox is running. The user shut down all services, and it continued. It only stopped when he disconnected the virtual display in proxmox (so firefox didn't start).

Expected Behavior

All programs and services on StartOS are expected to not call home and unnecessarily leak information about users and their servers.

Steps to Reproduce

Connect a display to StartOS and boot it.
Intercept and log its DNS queries.

Anything else?

At this point it may be prudent to ditch firefox entirely and use Librewolf. The defaults are 1000% better for privacy, though we still need to make sure it doesn't call home to mozilla services like firefox does. Worst case scenario, Librewolf calls mozilla services but not Advertisers who pay mozilla like amazon.

@gStart9 gStart9 added Bug Something isn't working Needs Triage Needs to be assigned a priority labels Sep 6, 2023
@kn0wmad
Copy link
Contributor

kn0wmad commented Sep 6, 2023

Linking #2069

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bug Something isn't working Needs Triage Needs to be assigned a priority
Projects
None yet
Development

No branches or pull requests

3 participants