Following video of thelinuxexperiment and all the news against mozilla.
I finally switched to librewolf completely.
I exported and imported all kind of data too.

But I want to use ffsync only to keep my mobile (android) in sync with my pc (want to sync history also so flocuss etc will not work)
So I want to enable ffsync in librewolf

I have seen faq but as mozilla recently introduced their terms of usage (and all the hate against it)
Is it still private enough to use ffsync? what can be downsides?

  • Kimusan@feddit.dk
    3·
    1 day ago

    I just set up my own sync server. It is dead simple with docker compose and pretty well described on their git page.

    Getting my own auth server up and running was a bit more difficult, but it is absolutely doable. There a a few ppl who have made scripts to ease the task. You can find them on github.

  • LittleBobbyTables@lemmy.sdf.orgEnglish
    17·
    2 days ago

    You say you’ve already read Librewolf’s FAQ, so I can skip over what they’ve provided in their response.

    The only possible downside I could see would be that your encrypted data is stored on Mozilla servers. Which isn’t a very major downside–it’s properly end-to-end-encrypted. This is mentioned both by Mozilla themselves, as well as in the Librewolf docs. This is the only downside I can see right now, but for the paranoid, it might be worth looking toward the future; who knows, maybe some day, Firefox will randomly decide to disable E2EE for Firefox sync. That could be a potential downside down the road. But I find that to be pretty unrealistic… I honestly can’t see a lot of ways for Mozilla to screw this up.

    If the prospect of relying on Mozilla servers still makes you uncomfortable, then you can self-host a sync server, but it’s not exactly a quick setup. They do provide a Docker method of installation, at least. The sync server code is found here, along with installation instructions for self-hosting and how to connect it to Firefox/Librewolf/other derivatives: https://github.com/mozilla-services/syncstorage-rs

    • checksout@piefed.socialOPEnglish
      11·
      2 days ago

      So I should use ffsync for now i guess. Is there any info regarding what unencrypted metadata they can link to me i use ff account?

      • smiletolerantly@awful.systems
        51·
        2 days ago

        No idea - this is my firefox sync NixOS config, in its entirety:

          age.secrets.ffsync.rekeyFile = secrets.ffsync;
  services.firefox-syncserver = {
    enable = true;
    secrets = config.age.secrets.ffsync.path;
    settings.hostname = "localhost";

    singleNode = {
      enable = true;
      hostname = "0.0.0.0";
      capacity = 2;
    };
  };
        • tiz@lemmy.ml
          1·
          1 day ago

          I wonder if it still needs account management on Mozilla server or on your own. May I?

          • smiletolerantly@awful.systems
            1·
            1 day ago

            Yeaaaaaaahh the auth thing is really, really complicated to selfhost. There’s a docker project out there that apparently makes it possible, but… No idea. FOr the time being I still use FF’s auth - that’s still an improvement though: Mozilla knows that I am logging in / from what kind of device, but not the content or amount of what I sync.

      • smiletolerantly@awful.systems
        1·
        2 days ago

        Probably… I mean, I’d at least start it in a systemd service, but sure, you don’t need a domain.

        But of course your mobile won’t be able to access that domain outside your network

  • Libb@jlai.luEnglish
    93·
    2 days ago

    what can be downsides?

    The same that pushed you to stop using FF the browser to begin with?

    I mean, if you worry about FF/Mozilla doing naughty things with your browsing data, should you not worry as much if not more about the data you ask them to sync for you and save on their very own servers?

    For the time being, it’s not a definitive decision as I’m waiting to see what they will do next, I’ve quit using FF (using Waterfox instead) and for me not using FF obviously also meant to stop using their sync feature.

      • poVoq@slrpnk.net
        31·
        2 days ago

        You still need to log into their servers and thus provide them a lot of meta-data, like IP addresses, when and approximatly where you are using your browser, on how many devices etc.

        • checksout@piefed.socialOPEnglish
          1·
          2 days ago

          Hmm,
          Will self hosting sync solve the problem??

          Btw this metadat collection will happen anyway if you use addons (though not linked to your account)?

          • poVoq@slrpnk.net
            21·
            2 days ago

            Yes, in theory, but in praxis no because self-hosting the sync server alone still depends on the centralized auth server from Mozilla, and self-hosting that as well is possible but complicated. It’s sadly a mess, and you might be better off not using Firefox sync at all.

            As for your other question, depends on the specific addon, but usually no.

      • Zerush@lemmy.ml
        12·
        2 days ago

        Firefox, same as any other Browser, has a local folder with all the settings, bookmarks and passwords, this is the folder which you have to sync with your other devices. Firefox sync don’t do other thing, but with Mozilla and not with Filen.

          • Zerush@lemmy.ml
            11·
            1 day ago

            In this case the only alternative is to use Vivaldi instead of FF forks, it has an own EE2E no knowledge sync in all devices.