6 ms·
Mozilla Announces Experimental Partnership with ProtonVPN
- berbec 8y agoMozilla's blog, so not a dupe of the other one, which is ProtonVPN's.
- Fnoord 8y agoHere is ProtonVPNs blog announcement [1]. I haven't completely read it but I did spot one difference: "These subscriptions will be billed directly by Mozilla and the majority of the revenue from these subscriptions will go to Mozilla, directly supporting Mozilla’s mission." Mozilla was less clear about how it'd be distributed. [1] https://protonvpn.com/blog/mozilla-partnership/ https://protonvpn.com/blog/mozilla-partnership/
- preinheimer 8y ago(disclaimer I guess I own a company that offers VPN services, it's like ~1% of revenue though). I think this seems like a bit much. I'd love Firefox to double down on building a great browser, rather than getting into Pocket, VPN, a Phone, IOT, etc. Sure, a VPN can be really helpful when you're on sketchy open wifi, or other adversarial network conditions. But you're still trusting someone to handle your connections reliably and fairly. Several ISPs have proven themselves to be sketchy: injecting ads, adding tracking headers, etc. But do we really expect VPN providers to not crunch the same numbers and come to the same conclusions? Note that despite my thinking, it does fit in well with their agenda: > Mozilla has identified five key issues that are critical to build the open Internet we want: Privacy and Security Open Innovation Decentralization Web Literacy Digital Inclusion
- deleted 8y ago[deleted]
- intopieces 8y ago>But do we really expect VPN providers to not crunch the same numbers and come to the same conclusions? Yes, because those numbers are different -- there's actual competition among the providers, which is not so for ISPs. I agree it's still a gamble, and still requires trust, but if/when that trust is broken, there's someone else ready to fill that void.
- tapoxi 8y agoMake no mistake, Mozilla Corporation is a for-profit entity. They're owned by a nonprofit shell, but I imagine that nonprofit could easily sell them off. This puts them in the same boat as say, IKEA.
- preinheimer 8y agoLike when they slipped a Mr. Robot plugin into the download without telling people? https://www.theverge.com/2017/12/16/16784628/mozilla-mr-robot-arg-plugin-firefox-looking-glass https://www.theverge.com/2017/12/16/16784628/mozilla-mr-robo...
- BoysenberryPi 8y agoI must be the only one who thought this was a non-issue. A molehill turned into a mountain.
- tehduder9 8y agoI bet you'd be screaming hell if chrome would have done it.
- bigiain 8y agoSure - it was a dumb move on Mozilla's part. But keep in mind that while it was pushed out into people's browsers in a stupidly-lacking-in-foresight fashion, it still required use activation before it'd do anything... I'm at least four nines sure Google have got worse privacy-eroding code in Chrome that does way worse things that flip some text upside down after you specifically activate an add-on...
- bigiain 8y ago> But you're still trusting someone to handle your connections reliably and fairly. Some of us live in tinpot totalitarian reigemes[x] where ISPs are required by the government to retain "meta data" records of all customer connections and traffic. It's a privacy win for me just to move the endpoint where my unencrypted traffic (and dns lookups) out of my local jurisdiction, since at least that way I'm not using a service that's required by law to snitch me out to any curious local cop... (Hopefully my chosen VPN provider really isn't keeping logs or snooping y traffic, but even if they are - moving that out of my local legal jurisdiction is an improvement for me...) [x] That's a little intentionally overhyperboled - but fuck me our Australian politicians are making some insane laws around internet use by the whole population...
- badrabbit 8y agoLook,you're missing two very important points here. 1) yes,vpn providers crunch the numbers and come at a different conclusion. This is because they sell privacy before anything else. You don't gamble on the heart of your business model unless you intended to sell out your users from the begining. And there are well vetted providers run by well known individuals with a lot to lose if they sell out users. 2) It is in the interest of Mozilla's users for mozilla to diversify it's revenue source. So long at they don't forget to make features optional,I don't see the problem. This partnership is great because both Mozilla and ProtonVPN have similar business models. Heck,it would even make a lot of sense for Mozilla to operate protonmail. Except unlike with Google and Gmail,they would charge you money and that's it. Give us what we want,to be your customers not your product!
- nyxtom 8y agoI would actually love it if Mozilla ends up operating protonmail and brings over firefox mail of sorts.
- svrtknst 8y agoSame here. I like Mozilla, and if they can bring me a qualitative email service and VPN on top of a great browser and the MDN, I'm psyched. Here's to hoping that they also develop an e-mail product to replace Googles Inbox...
- Leace 8y agoWow, I never thought about this but strangely it makes sense. It seems ProtonMail frontend is open-source: https://github.com/ProtonMail/WebClient https://github.com/ProtonMail/WebClient
- qbaqbaqba 8y agoI don't want another all in one behemoth corporation. I want a browser that's not connected to any services but sports open protocols. I hope protonmail remains independent.
- benatkin 8y agoAgreed. I switched back from Chrome to Firefox partly because Firefox had a constant reminder of a thing I don't use, Pocket, in the address bar. I don't have anything extra in Chrome that permanently shows up, just a temporary window that pops up asking me if I want to sync when I save passwords, which I'm used to dismissing.
- blueish 8y agoYou can remove Pocket from the address bar. All you do is right click it and the only option shows up as "Remove from address bar", so you don't have to stare at the reminder if you don't want to!
- jopsen 8y agoI trust Mozilla would throw ProtonVPN under the bus at the first hint of trouble. Can you actually check if a VPN provider logs data? No, but Mozilla certainly has more sway than I do.
- mrweasel 8y agoWhat I don't understand is why everyone needs VPNs all of the sudden. There must be a ton of money in selling VPNs, every YouTuber seems to be sponsored by a VPN provider, and now Mozilla is getting in on the action? As others have pointed out, Mozilla is a for-profit, and I doubt that they would be able to keep up with the development of Chrome if they where not. That being said I wish I'd keep their focus on the browser part it self, and avoid going in the direction of Chrome, which have basically become an OS without a kernel. While it is a little hypocritical, I would wish that they'd add Chromecast support to Firefox. That's really the only feature I'm missing.
- paulryanrogers 8y agoFor me it was seeing messages from my ISP creeping into traffic from other sites. That's not OK
- mido22 8y agoi would not have minded if mozilla had offered their own vpn service, trusting some third party sounds like a bad idea.
- jvehent 8y agowould you have purchased it?
- sakisv 8y agoI think many people, myself included. For better or worse, Mozilla managed to brand itself as the equivalent of the open internet and an organisation that would put the users first. This is quite important in today's world that's full of Googles, Facebooks, Microsofts etc. That doesn't mean that Mozilla has done nothing wrong. I'm just saying that I would feel much better having a VPN service run by Mozilla as opposed to a VPN being run by Facebook.
- Spivak 8y agoMozilla vouching for a 3rd party is surely just as good, right? Assuming you trust Mozilla of course.
- IngoBlechschmid 8y agoHonest question: Why not bundle Tor, instead of relying on a proprietary VPN service? It seems that Tor satisfies the advertised use case ("insecure public WiFi") just as well.
- jvehent 8y agoBecause bundling Tor in Firefox would generate so much traffic it would take down the network. Tor needs to grow significantly before that integration is possible.
- IngoBlechschmid 8y agoI guess this nudges me to host a middle node!
- intopieces 8y agoIs Tor still super slow?
- IngoBlechschmid 8y agoIt isn't for me. Nowadays I never not surf using Tor. Even video platforms work without any bothersome delay.
- anigbrowl 8y agoNo, it's pretty decent now
- megous 8y agoSlower, but not super slow. Latency is significantly higher, if you're used to ~10ms ping from your home to your data center. Grabbing a page from my website over tor and over normal network: curl http://mywebsite curl https://mywebsite curl --proxy socks://127.0.0.1:9050 http://mywebsite curl --proxy socks://127.0.0.1:9050 https://mywebsite Results in these times (tor times depend on selected circuit): 0.028s / http 0.063s / https 0.394s / tor http 1.079s / tor https If I killall -HUP tor (force changes circuit): 0.302s / tor http 0.598s / tor https
- buzzy_hacker 8y agoWhy is the price $10/month when you can buy the same service directly from ProtonVPN for $8/month?
- jvehent 8y ago$8/month is the yearly price. Monthly is also $10/month.
- buzzy_hacker 8y agoAh, I see. That explains it, thanks
- Fnoord 8y agoLast Black Friday they had some good deals up.
- dstaley 8y agoThis seems like another attempt to acquire a new revenue stream for Mozilla. I'm glad it's through something like providing a user-focused VPN as opposed to increased ads and tracking, but I still feel a bit bummed that Mozilla feels the need to do this. The other day I came to the realization that Firefox is the only portal to the web that's not affiliated with a tech giant. Microsoft has Edge, Google has Chrome, and Apple has Safari. It's so strange that the web is such a huge, important part of our lives, and we only have four ways[1] to access it, three of which are driven by profit-seeking organizations. [1] I'm not counting forks since those are largely still the same as the original code base, and none of them have gained a significant amount of traction. I'm also not counting experimental browsers since I'm not aware of any that are both largely-compatible with current web platform features and not based on a fork of one of the primary browser engines.
- Skunkleton 8y agoJust to be a pain in the ass, I fired up elinks to type this response.
- Fnoord 8y agoJust to be a pain in the ass, ELinks has known vulnerabilities. The last stable release was from 2009, and the last pre-release from 2012 [1]. At the very, very least it has vulnerabilities in SpiderMonkey. If you need a console browser with picture, JS, color, and table support, consider Browsh [2] instead: "Browsh is a fully-modern text-based browser. It renders anything that a modern browser can; HTML5, CSS3, JS, video and even WebGL." [1] http://www.elinks.cz/ http://www.elinks.cz/ [2] https://www.brow.sh/ https://www.brow.sh/
- Skunkleton 8y agoYou are a pain in the ass! Thanks. I will look at updating my text-based browsing habits :) Edit: I've been snookered! This is just a text rendering front end for firefox. This invalidates the point I was trying to make. I am sad now.
- vvilliam0 8y agoProtonVPN is the same company as ProtonMail. The company has had a good rep, reminds me of Lavabit.
- bigiain 8y agoIsn't there at least some controversy about that (perhaps it's only a disgruntled competitor who jumps on every second post I see mentioning them, but I'm 99% sure I've seen a few questions/accusations levelled at them...) Having said that - seeing them vouched for by the Mozilla Foundation seems to be a significantly better indicator of their trustworthiness than this post from a day or two ago: https://news.ycombinator.com/item?id=18260920 https://news.ycombinator.com/item?id=18260920 - I _mostly_ trust Mozilla to not be guided just by whoever offers them money, and hopefully to have learnt from their dumb Mr Robot fuckup...
- jorvi 8y agoI take it you mean https://news.ycombinator.com/item?id=17258203 https://news.ycombinator.com/item?id=17258203? I fully agree that ProtonVPN seems like a poor choice, considering all the controversy around them, especially when its backed up by that much evidence. Mullvad, Private Internet Access, TorGuard etc. would have been a better choice, but perhaps Mozilla didn't want to look like it was picking sides among 'established' VPNs..
- protonmail 8y agoThese are actually false allegations which were originally spread by none other than Private Internet Access as part of a smear campaign. We have previously responded here: https://www.reddit.com/r/ProtonVPN/comments/8ww4h2/protonvpn_and_tesonet/ https://www.reddit.com/r/ProtonVPN/comments/8ww4h2/protonvpn... As mentioned in Mozilla's blogpost, they did their homework and thoroughly checked ProtonVPN, including visiting us in Geneva at our main office, which also refutes these allegations.
- mackrevinack 8y agoStay away from PIA. One of their employees was caught red handed spreading false information about other VPNs a few months back. The guy's google profile picture was in one of the screenshots. It was half covered by another window but it was enough to figure out who he was
- clusmore 8y agoThis is a little vague on the technicals, but it sounds like you would be downloading and installing the full VPN service as if you had obtained it directly from ProtonVPN? i.e. this isn't a browser plugin? It'd be interesting if there were some tie-ins with the browser, like perhaps separate VPN connections per container (not sure this is possible, I'm no expert).
- Fnoord 8y agoI'd prefer it if it used some kind of way to proxy traffic through WireGuard instead (which ProtonVPN does not yet support while they should if not just for performance reasons alone [1]) [1] https://www.wireguard.com/performance/ https://www.wireguard.com/performance/
- bartbutler 8y agoIt is something we'd like to do, but it's still a little experimental and it hasn't gotten to the top of our priority list yet.
- Fnoord 8y agoIf you need a beta tester, let me know. I already am a paid subscriber, but I am considering quitting ProtonVPN because this feature is lacking and more and more competitors are catching up on it.
- Leace 8y agoThere is a uservoice request for WireGuard: https://protonmail.uservoice.com/forums/284483-feedback/suggestions/34116700--support-wireguard-vpn-protocol https://protonmail.uservoice.com/forums/284483-feedback/sugg... (but I don't know if Proton looks at these requests, the last response from administrators was in 2016).
- p1necone 8y agoIs Mozilla very short on cash? Why is the supposed steward of an open internet suddenly partnering with all these proprietary services?
- yarrel 8y agoI get the impression that there's this one guy in marketing who keeps getting taken to lunch...
- fabrice_d 8y agoTo be less reliant for their income source on a behemoth of proprietary services, which also happens to have eaten their cake in the browser space.
- kiriakasis 8y agobecause Mozilla appears to be more focused on user-centric features than political statements.
- p1necone 8y agoOne mans "political statement" is another mans "user-centric feature".
- jacekm 8y agoI have mixed feelings about this move. On one hand I like that Mozilla gets additional source of income to support their mission. Plus people will certainly benefit from using a vpn service. On the other hand though this will redirect people to a particular provider that may not necessarily meet their needs. Proton VPN offers a decent service, but not sure if the best one. I'd be much more comfortable with this if they were suggesting multiple different providers. And let's not forget that this is also a jump into the abyss of in-browser ads that may be difficult to block even with an add-on. From the screenshots it seems that FF analyzes your behavior (connection to an unprotected network) and displays the ad based on that. I fear what's going to happen when Chrome team picks this idea (e.g. "we see that you are logging into a bank X, how about you try bank Y?")
- svrtknst 8y ago> I'd be much more comfortable with this if they were suggesting multiple different providers. I don't see anything saying that they won't. They might only offer ProtonVPN for all of time, but I could also see them adding additional providers down the line. In any case, I'm imagining that the vetting process is relatively costly to perform and keep up, and I'd trust Mozilla more than myself to do it.
- deleted 8y ago[deleted]
- sys_64738 8y agoOpera offer a built in VPN client for free. Just mentioning this.
- kiriakasis 8y agoand also is owned by a Chinese corporation.
- wtmt 8y agoThere doesn't seem to be a way to sign up for this directly. If one wants to support Mozilla through this, it looks like one has to be in the U.S. (or fake being in the U.S. with a free account of ProtonVPN) and hope to be picked up by random for this experiment. Anyone from Mozilla or ProtonVPN reading this and can confirm that this understanding is correct?
- tom4000 8y agoWhy Proton VPN and not something privacy friendly? As ProtonVPN like NordVPN is run by Tesonet is has the same issues. Why does Mozilla trust in Tesonet and why should their users do? http://vpnscam.com/heres-why-you-cant-trust-nordvpn-and-protonvpn-protonmail/ http://vpnscam.com/heres-why-you-cant-trust-nordvpn-and-prot...
- Jobjobbing 8y agoWhen will people stop dragging this bs article over the internet? There aren't any physical facts showing that ProtonVPN or NordVPN shouldn't be trusted! Only these false accusations spread by competitor troll band. Or are u one of them?
- Kaveren 8y agoProtonVPN is simply the best choice for a VPN if your goal includes anonymity / privacy; I place zero stock in this. 1. No other VPN that I'm aware of has any of its own data center infrastructure. 2. Even though ProtonVPN (and essentially all VPNs) works with untrustworthy companies like Leaseweb to provide many of their servers, SecureCore allows you to route traffic through their own data center infrastructure to another exit node server. 3. Public-facing CEO who has a verifiable history. You know his name, his face, he's given a talk. This helps with accountability. I've said it before on HN and I'll say it again, their reply to this situation satisfied me completely, and nobody has said anything against this reply: https://www.reddit.com/r/ProtonVPN/comments/8ww4h2/protonvpn_and_tesonet/e21tfqw/ https://www.reddit.com/r/ProtonVPN/comments/8ww4h2/protonvpn... There is simply not a better option than ProtonVPN. Yes, I sound like a shill, but the facts are still the facts.
- tom4000 8y agoThank you for pointing on the post.