Surveillance is a growing concern in Europe, and Mozilla believes that privacy and security should be treated as fundamental and not optional in the browsing experience. That's why Firefox has introduced new features for tracking protection and private browsing. Do not track is not only a way to navigate the web, it might also become part of a new privacy law in the EU. We will discuss how this has been implemented in the newest version of Firefox, next steps, and why it's important to have transparency and control in our online experiences. https://fosdem.org/2016/schedule/event/mozilla_privacy_tracking_protection_firefox/

1. Privacy & Tracking Protection
in Firefox
Raegan MacDonald
@shmaeganm
François Marier
@fmarier

2. the state of online surveillance
how tracking works in practice
how widespread is it?
what can we do about it?
questions & discussion
overview

3. the state of
online surveillance

4. the public-private
surveillance partnership
Bruce Schneier
Relationship specific to
US context
Role of companies inside the
surveillance eco-system

5. privacyinternational.org/sii
the business of surveillance

6. trading data for “free” services
surveillance as the business
model of the internet

8. data brokers

9. online advertisting industry

10. the public-private
surveillance partnership
 Governments & corporations
have similar goals
 Snowden disclosures:
PRISM, MUSCULAR
 What companies know, governments can & will know
 Any reform must take into account this relationship

12. how does it work
in practice?

16. customerID=112

18. third-party
cookies

21. suckerID=319

26. suckerID=319

28. top 1 million
67% use Google Analytics

31. user agent
timezone
language
screen size
browser plugins
system fonts

32. fingerprinting

33. panopticlick.eff.org

34. how widespread
is it?

45. 209 different third-parties
26 on more than one site

46. what can we
do about it?

47. TRACKERS

48. political means

49. the EU's new privacy law
●
Article 19, General Data Protection Regulation
●
2b. In the context of the use of information
society services, and notwithstanding Directive
2002/58/EC, the data subject may exercise his
or her right to object by automated means
using technical specifications.
●
Could imply Do Not Track specifications

50. technical means

51. block
network
requests

52. can't set any cookies
can't fingerprint you
can't see you in their logs

59. converted and
served by Mozilla
to Firefox users
feeding.cloud.geek.nz/posts/tweaking-cookies-for-privacy-in-firefox

60. 1st
-party
v.
3rd
-party

61. google.com
v.
google-analytics.com

66. avoid having a
hard dependency
on Google Analytics
developer.mozilla.org/Firefox/Privacy/Tracking_Protection

67. what about when you're
browsing outside of
private browsing?

69. about:config
privacy.trackingprotection.enabled

70. feeding.cloud.geek.nz/posts/tweaking-cookies-for-privacy-in-firefox

72. want to help?
report missing trackers
reach out to broken sites

73. © 2016 Raegan MacDonald <raegan@mozilla.com>
François Marier <francois@mozilla.com>
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 License.
Questions?
@shmaeganm @fmarier

74. photo credits:
bruce schneier:
https://commons.wikimedia.org/wiki/File:Bruce_Schneier_at_CoPS2013-IMG_9174.jpg
say no to strangers: https://www.flickr.com/photos/_chrisuk/6500365853/
cookie on tray: https://secure.flickr.com/photos/jamisonjudd/4810986199/
cookie: https://www.flickr.com/photos/amagill/34754258/
happy cookie: https://www.flickr.com/photos/1080p/3080936724/
squirrel cookie: https://www.flickr.com/photos/tomitapio/3049686879/
copper cable: https://www.flickr.com/photos/theilr/8942861511/