{"id":15233,"date":"2019-05-01T10:10:02","date_gmt":"2019-05-01T18:10:02","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2019\/05\/01\/news-8982\/"},"modified":"2019-05-01T10:10:02","modified_gmt":"2019-05-01T18:10:02","slug":"news-8982","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2019\/05\/01\/news-8982\/","title":{"rendered":"Mozilla urges Apple to make privacy a team sport"},"content":{"rendered":"<p><strong>Credit to Author: David Ruiz| Date: Wed, 01 May 2019 17:39:28 +0000<\/strong><\/p>\n<p>We often say cybersecurity is a team sport, but, pending a public advocacy campaign from one major tech developer to another, the same might be true for online privacy. <\/p>\n<p>Mozilla is currently getting people around the world to lend their voices toward Apple, asking that the company place some extra barriers between iPhone users and online advertisers. Though cybersecurity researchers disagree about the technology behind the request, the campaign has proved popular. In little over a week, more than 11,000 individuals put their names to the cause. <\/p>\n<p>Public advocacy campaigns, common amongst digital rights groups, are a tried-and-true practice for Mozilla, which racked up a couple wins in the past year-and-a-half. And, while such campaigns often target privacy abusers, Mozilla\u2019s petition to Apple is different\u2014it puts the pressure on another privacy champion. <\/p>\n<p>So, why spend the time to push Apple to raise the bar? Because, according to Mozilla, it could work, which could then lead to an outsized benefit for users everywhere. &nbsp;<\/p>\n<p>\u201cApple&#8217;s track record of protecting user privacy was actually a motivation, and not a deterrent, for launching this campaign,\u201d said a spokesperson from Mozilla&#8217;s advocacy team. \u201cIt&#8217;s an issue they clearly care about, so we&#8217;re encouraging them to do better.\u201d<\/p>\n<p>Apple has not yet responded to the petition, and it did not respond to a request for comment, but if Mozilla succeeds, it will have made an important point: When the technology industry pushes itself to better respect user privacy, we all win. <\/p>\n<h3><strong>The petition and the tech<\/strong><\/h3>\n<p>In mid-April, Firefox developer Mozilla <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/foundation.mozilla.org\/en\/campaigns\/privacy-thats-iphone-but-is-it\/\" target=\"_blank\">launched a public petition at Apple<\/a>. The browser-making nonprofit asked Internet users around the world to push the world\u2019s richest company into making one small change to its iPhones\u2014regularly rotate an internal ID that lets advertisers track users\u2019 online behavior.  <\/p>\n<p>\u201cThere is a unique ID living on your iPhone right now that allows advertisers to track the ads you click on, the videos you play, and the apps you install,\u201d Mozilla wrote about the iPhone ID code, which is called an \u201cID for Advertisers,\u201d or IDFA. Though the ID cannot reveal an iPhone user\u2019s identity\u2014and users can actually turn the identifying feature off\u2014Mozilla argued that it still poses a roadblock to privacy. <\/p>\n<p>\u201cIt\u2019s like a salesperson following you from store to store while you shop and recording each thing you look at,\u201d wrote Mozilla Vice President of Advocacy Ashley Boyd in a <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/blog.mozilla.org\/blog\/2019\/04\/15\/the-bug-in-apples-latest-marketing-campaign\/\" target=\"_blank\">related blog<\/a>. \u00a0Pushing back against Apple\u2019s recent advertising campaign that bills the iPhone as the near-definition of privacy, Boyd wrote: \u201cNot very private at all.\u201d <\/p>\n<p>Cybersecurity researchers are split on the idea. Some experts\u2014including Thomas Reed, director of Mac and mobile at Malwarebytes\u2014actually called for even tougher privacy controls. <\/p>\n<p>\u201cI think that Apple should disable ad tracking and location-based ads by default, rather than the user having to opt out,\u201d Reed said, referring to users&#8217; ability to turn off the IDFA capabilities. \u201cThat would provide way more benefit than what Mozilla proposes.\u201d<\/p>\n<p>Forrester Research senior analyst John Zelonis, <a href=\"https:\/\/threatpost.com\/privacy-iphone-apples-targeted-ad-tracking\/144025\/\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\"in speaking to ThreatPost (opens in a new tab)\">in speaking to ThreatPost<\/a>, shared Reed\u2019s sentiment, explaining that monthly IDFA changes\u2014as Mozilla proposed\u2014would not meaningfully impede on advertisers\u2019 ability to track users online. <\/p>\n<p>\u201cRolling the IDFA on a monthly basis would only be an effective anonymizer if the app owners weren\u2019t able to track a user across those newly-generated IDFAs using login sessions or other methods of associating a user to an IDFA,\u201d Zelonis told the outlet. \u201cThe impact of making this change would likely only increase the value of the data collected by apps that are finding ways to track across IDFA, not necessarily solve the problem at hand.\u201d<\/p>\n<p>However, a separate researcher also told ThreatPost that Apple should not have to change a thing. <\/p>\n<p>&#8220;Apple\u2019s current way of handling the IDFA is the correct one,\u201d the researcher said.<\/p>\n<p>Despite the researchers\u2019 disagreements, there\u2019s a separate story here. It\u2019s about privacy champions pushing one another to do better. <\/p>\n<h3><strong>Privacy vs. privacy <\/strong><\/h3>\n<p>For years, Mozilla has not only advocated for privacy, it has also developed it into online tools. <\/p>\n<p>In 2017, Mozilla released its privacy-focused Android web browser, Firefox Focus, earning more than one million downloads in the first month. In 2018, Mozilla developed a browser add-on to <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/blog.mozilla.org\/blog\/2018\/03\/27\/facebook-container-add-on\/\" target=\"_blank\">give users a more private experience when using Facebook<\/a>, making it harder for the social media giant to collect information away from the platform itself. In the past two months, Mozilla has also released a <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/blog.mozilla.org\/blog\/2019\/03\/12\/introducing-firefox-send-providing-free-file-transfers-while-keeping-your-personal-information-private\/\" target=\"_blank\">secure file transfer service<\/a> and a <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/blog.mozilla.org\/blog\/2019\/03\/26\/firefox-lockbox-now-on-android-keeping-your-passwords-safe\/\" target=\"_blank\">password manager<\/a>. <\/p>\n<p>The nonprofit then pivoted, using its earned reputation in privacy to push others to do better. <\/p>\n<p>In 2018, before the release of Amazon\u2019s \u201cEcho Dot Kids Edition\u201d\u2014which includes a version of the smart assistant <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/www.cnet.com\/news\/amazon-rolls-out-alexa-for-kids-dad-jokes-reach-a-new-level\/\" target=\"_blank\">Alexa that tells children \u201cwake-wakey, eggs and bakey\u201d<\/a>\u2014Mozilla asked the retail giant to <a href=\"https:\/\/www.cnet.com\/news\/mozilla-to-amazon-show-us-how-youre-protecting-kids-data-privacy\/\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">open up about how it would collect children\u2019s data<\/a>. <\/p>\n<p>Months later, Mozilla launched a public campaign about the payment processing app Venmo, gathering 25,000 signatures to steer the company into <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/blog.mozilla.org\/blog\/2018\/09\/27\/25000-americans-urge-venmo-to-update-their-privacy-settings\/\" target=\"_blank\">making users&#8217; payment transactions private by default<\/a>. <\/p>\n<p>\u201cIt&#8217;s a tactic we use often,\u201d said the Mozilla spokesperson. \u201cWe&#8217;ve learned that when companies hear from consumers, they act.\u201d<\/p>\n<p>As an example, the spokesperson pointed to Mozilla\u2019s success in getting Target and Walmart to <a href=\"https:\/\/mic.com\/articles\/189673\/target-and-walmart-stop-selling-the-superhackable-kids-toy-cloudpets-after-pressure-from-mozilla#.4lH5Oy5rk\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">stop selling a hackable children\u2019s toy<\/a> last summer. <\/p>\n<p>Despite Mozilla\u2019s familiarity with this turf, the target is new: Apple has a far better track record than Amazon or Venmo in defending user privacy. <\/p>\n<p>In 2015, Apple began its famous fight against a government request to build a workaround to its secure mobile operating system. The workaround\u2014<a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/www.eff.org\/deeplinks\/2016\/03\/thinking-about-term-backdoor\" target=\"_blank\">which many in the technology community called a \u201cbackdoor\u201d<\/a>\u2014would have let the FBI access encrypted data on a suspected terrorist\u2019s iPhone. But the demand pushed too far, <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/www.apple.com\/customer-letter\/\" target=\"_blank\">said Apple CEO Tim Cook in an open letter<\/a> published the day after his company received the legal order. <\/p>\n<p>\u201cSpecifically, the FBI wants us to make a new version of the iPhone operating system, circumventing several important security features, and install it on an iPhone recovered during the investigation,\u201d Cook wrote. \u201cIn the wrong hands, this software\u2014which does not exist today\u2014would have the potential to unlock&nbsp;any&nbsp;iPhone in someone\u2019s physical possession.\u201d <\/p>\n<p>Apple\u2019s stance won the approval of many privacy rights advocates, including the <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/www.aclu.org\/blog\/privacy-technology\/internet-privacy\/why-were-defending-apple\" target=\"_blank\">American Civil Liberties Union<\/a>, <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/www.eff.org\/deeplinks\/2016\/02\/eff-support-apple-encryption-battle\" target=\"_blank\">Electronic Frontier Foundation<\/a>, and <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/www.nytimes.com\/roomfordebate\/2016\/02\/18\/crimes-iphones-and-encryption\/a-design-defect-that-could-leave-us-open-to-threats\" target=\"_blank\">Center for Democracy and Technology<\/a>. The move also won the approval of Mozilla, conjuring executive-penned op-eds in both <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"http:\/\/time.com\/4263121\/apple-fbi-backdoor\/\" target=\"_blank\">Time<\/a> and <a href=\"https:\/\/www.cnn.com\/2016\/02\/18\/opinions\/apple-encryption-backdoor-fbi-surman\/index.html\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">CNN<\/a>. <\/p>\n<p>It is these two tech developers\u2019 strong privacy records that makes Mozilla\u2019s petition seem more like a friendly reminder than a stern warning. But no matter the tone, if Mozilla gets the iPhone maker to move, the impact could go beyond Apple\u2019s ecosystem. <\/p>\n<p>As Mozilla\u2019s Boyd wrote: <\/p>\n<p>&#8220;If Apple makes this change, it won\u2019t just improve the privacy of iPhones\u2014it will send Silicon Valley the message that users want companies to safeguard their privacy by default.&#8221;<\/p>\n<p>We agree. <\/p>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\/security-world\/2019\/05\/mozilla-urges-apple-to-make-privacy-a-team-sport\/\">Mozilla urges Apple to make privacy a team sport<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n<p><a href=\"https:\/\/blog.malwarebytes.com\/security-world\/2019\/05\/mozilla-urges-apple-to-make-privacy-a-team-sport\/\" target=\"bwo\" >https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><strong>Credit to Author: David Ruiz| Date: Wed, 01 May 2019 17:39:28 +0000<\/strong><\/p>\n<table cellpadding='10'>\n<tr>\n<td valign='top' align='center'><a href='https:\/\/blog.malwarebytes.com\/security-world\/2019\/05\/mozilla-urges-apple-to-make-privacy-a-team-sport\/' title='Mozilla urges Apple to make privacy a team sport'><img src='https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2015\/12\/pexels-photo-large.jpg' border='0'  width='300px'  \/><\/a><\/td>\n<\/tr>\n<tr>\n<td valign='top' align='left'>Mozilla is currently pushing Apple into placing extra barriers between iPhone users and online advertisers. Why? Because, according to Mozilla, it could work, which could benefit users everywhere.  <\/p>\n<p>Categories: <\/p>\n<ul class=\"post-categories\">\n<li><a href=\"https:\/\/blog.malwarebytes.com\/category\/security-world\/privacy-security-world\/\" rel=\"category tag\">Privacy<\/a><\/li>\n<li><a href=\"https:\/\/blog.malwarebytes.com\/category\/security-world\/\" rel=\"category tag\">Security world<\/a><\/li>\n<\/ul>\n<p>Tags: <a href=\"https:\/\/blog.malwarebytes.com\/tag\/advertiser\/\" rel=\"tag\">advertiser<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/advocacy\/\" rel=\"tag\">advocacy<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/apple\/\" rel=\"tag\">Apple<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/campaign\/\" rel=\"tag\">campaign<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/digital-rights\/\" rel=\"tag\">digital rights<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/encryption\/\" rel=\"tag\">encryption<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/fbi\/\" rel=\"tag\">fbi<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/firefox\/\" rel=\"tag\">firefox<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/firefox-focus\/\" rel=\"tag\">firefox focus<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/firefox-lockbox\/\" rel=\"tag\">firefox lockbox<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/firefox-send\/\" rel=\"tag\">Firefox Send<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/id-for-advertiser\/\" rel=\"tag\">ID for Advertiser<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/id-for-advertisers\/\" rel=\"tag\">ID for Advertisers<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/idfa\/\" rel=\"tag\">IDFA<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/idfas\/\" rel=\"tag\">IDFAs<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/iphone\/\" rel=\"tag\">iPhone<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/mozilla\/\" rel=\"tag\">mozilla<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/online-privacy\/\" rel=\"tag\">online privacy<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/petition\/\" rel=\"tag\">petition<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/privacy\/\" rel=\"tag\">privacy<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/silicon-valley\/\" rel=\"tag\">Silicon Valley<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/tim-cook\/\" rel=\"tag\">Tim Cook<\/a><\/p>\n<table width='100%'>\n<tr>\n<td align=right>\n<p><b>(<a href='https:\/\/blog.malwarebytes.com\/security-world\/2019\/05\/mozilla-urges-apple-to-make-privacy-a-team-sport\/' title='Mozilla urges Apple to make privacy a team sport'>Read more&#8230;<\/a>)<\/b><\/p>\n<\/td>\n<\/tr>\n<\/table>\n<\/td>\n<\/tr>\n<\/table>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\/security-world\/2019\/05\/mozilla-urges-apple-to-make-privacy-a-team-sport\/\">Mozilla urges Apple to make privacy a team sport<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[21699,21700,2211,11157,21701,10439,6627,11122,21702,21703,21286,21704,21705,21706,21707,8826,13271,10470,21708,5897,10497,13406,14808],"class_list":["post-15233","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-advertiser","tag-advocacy","tag-apple","tag-campaign","tag-digital-rights","tag-encryption","tag-fbi","tag-firefox","tag-firefox-focus","tag-firefox-lockbox","tag-firefox-send","tag-id-for-advertiser","tag-id-for-advertisers","tag-idfa","tag-idfas","tag-iphone","tag-mozilla","tag-online-privacy","tag-petition","tag-privacy","tag-security-world","tag-silicon-valley","tag-tim-cook"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/15233","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=15233"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/15233\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=15233"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=15233"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=15233"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}