Observe online tracking with Lightbeam
CC Attribution 2.0 Belgium:
You are free to use, adapt and copy, distribute and transmit the work or content in adapted or unchanged form for any legal purpose as long as the work is attributed to the author in the manner specified by the author or licensor.
Duparay, Antoine
Using the new Lightbeam add-on for Firefox, we will monitor web-tracking and discover solutions to protect ourselves
 So, now welcome to Antoine or Flaburgan. So Flaburgan is a Mozilla reps from France. He is especially interested by online privacy and projects like Collusion. He is making presentations to inform people and explain them how they can set Firefox and other Mozilla tools to protect their online life. Antoine is also a Moufflé. So he is belonging to the new generation of the French community and this is the nickname I've given them with love. So Moufflé is a small fry in English and they even are now planning some Moufflé meetups in the French community. So please welcome my beloved Moufflé, Antoine. Thank you. Can you hear me? Yeah? Okay, that's nice. For those who want the presentation, it's already online on Github so you can follow the slide on your computer. This URL. Oh, sorry. Okay, here we go. This presentation will be with a lot of speed because I usually talk about that during house and I got only 25 minutes, so here we go. So I'm a French barrier. I think I don't need to talk more about that. I contribute to just around Mozilla projects because I care about privacy on the Internet. The first thing that I wanted to talk to you today is that the Internet is powerful. The web is powerful. We are doing things today with a web that nobody imagined when the web was built at the first time. So we are building an operating system for mobile phone. We are doing a lot of stuff. I recently saw a fridge with Twitter on it. So the web is not only about a browser on the computer, but also about a lot of devices. It's everywhere. And unfortunately, only a few people are able to understand how the web is working. And one of the downside of this is that many people just don't care about their data and what the web can be wrong with them. So just a number, 300 millions of pictures of images upload on Facebook every day. So most of them are very personal or maybe professional data, but that's an amazing amount of data which are transferring using the web every day. And unfortunately, the people who deal with those data are doing that to have more money. The goal of the corporation is to have money every day. I think you know that if you're in the first day today, that the difference between non-profit and corporation. So my point today is in the web, it's pretty different because you say, okay, I'm dealing with companies almost every day. Like I'm going to my bank. I'm going to the bakery. But those companies are just right next to you. If you have a problem with Google, with Facebook, with a big company on the web, you will not be able to easily contact them. You will see just after I will give an example of a story which is really sad about someone who tried to contact Google. So they are far away from you. You cannot do anything. You cannot go there and talk with them. And most of them are already big. Like if today you say, okay, what Facebook is doing with my data is wrong. I don't want to use Facebook anymore. I will use something else. It will be really, really hard for you to find an equivalent in the services. There is no equivalent to Facebook. There is no equivalent to Google. It's something too big to compete with. So this kind of company, owning all data, is a problem. The States, owning all data, is a problem too. I think you probably know this slide. They come from the prisoner story in the NSA. That's not revealed to everyone in last June. One of the reasons I'm doing this speech once again, because I already did it last for them, but I think it's important because of this change. I don't know if you can read easily, but that's all the corporations, the NSA have an agreement with them to directly take data inside this database. So if you're using a software or services of one of those companies, so you've got Microsoft, Yahoo, Google, Facebook, YouTube, Skype, Apple, everybody, so you'll probably have your data somewhere. I mean, I try to have none of that on all these companies, and it's really hard to do. So here is the situation. Know the point. The NSA know that I'm sharing kitten's picture on the Internet. Who cares? Well, there is many problems about that. The first one is the dependency you have to these services. For example, the story I was talking about was an artist who was working using almost every Google services, so he got Gmail to talk with all the contacts he had. He used Picasa to share his work. He used an Android phone, and one day, like every morning, he just switched on his computer, and so, okay, you do not have to access Gmail anymore because your account was closed. You do not respect anymore the terms of use. So it was like, okay. No explanation, no thing. So say, okay, so I cannot write you an email because you just closed my email. I will try to call you. So he picked his phone, and the Android was mocking, okay, you cannot use this phone anymore because you do not respect the terms of use. So no phone, no email. And he tried to do a lot of research during one week to know why his account was closed. And it spent one week before he succeeded to talk to a human, someone from Google able to say, oh, it's because one of the robots detects that on one of your pictures, one of the work you're doing, there is a naked chill, so it was considering as pedophilia, but you know, this kind of art you can find in many churches, well, nothing problematic, so Google just say, okay, excuse us, we are sorry about that. Your account is here again, every data here, but during one week, no phone, no email, no work, nothing. I think you can imagine that it's really problematic to be as dependent as a service like that. The other point is targeted advertisement. You can say the same. I don't care if someone knows that I'm looking for a camera on the Internet. The point is today with the different tools the advertisers use, they are able to know which side you are visiting, so they can say to you, okay, you were to Amazon, you didn't find the camera, so you go to eBay. And this kind of information is really, really, really, really important for every person who do some sales online. If you're able to say, imagine in real life in the street, you go on a shop and you don't find the shoes you were looking for, you go back and you go to another shop, and if the seller in that shop can know that you didn't find something in a concurrent of him, it can sell you exactly what you want, it can order it, it can, yeah, maximize every sales he will do. So online this is possible and this is dangerous for us because we will just, yeah, sell all that and we will just buy tons of stuff we don't really need. So this is also a problem when you start thinking about profiling. For example, if you say, okay, I just like some kittens on Facebook, I don't see the problem about that, but you don't know why. Maybe someone somewhere will see that statistically, people loving kittens are more probable, there is more probability to have a car accident if you love kittens. Nothing can say that in real life, but maybe statistically you will see that. Okay, so what is the consequences of that? The insurance will directly say, oh, you will have probably a car accident, so you will pay your insurance more just because of that. Profiling is really, really dangerous too because it's unpacked directly your money, unpacked directly yourself outside of the web in the real world. And of course that could be bad for your job too, and for the state. I think that we saw what happened in Syria, what is happening in a lot of countries in the world over there. We don't want the OVA formation to be as easy as it is right now. It's too easy for people to access OVA information, especially you can say, okay, I'm in Europe, maybe in Germany or in France, so the government there are not bad, they are here for us at the beginning, the idea was that. But nobody can say what will be legal or illegal in 10 years. If today, Loving Kittens is a good idea, maybe in 10 years it will be completely forbidden, and then you can go in jail because your data from 10 years ago was already accessible. So we have to do something about that. The first thing we have to do is to choose the services and the software we are using. So the question to ask ourselves about that is, first of all, what do you want to hide? If I try to, I don't know, if I'm in China and I want to post something very controversial on the Internet, I will need something really, really secure. It's not the same as if I just don't want Google to know that I'm looking for shoes. So who is providing the service? If it's someone who is doing that to have more money or if it's someone, non-profit like Mozilla can be. And especially how much time and money and how much knowledge I have, how much can I invest myself in this project? If I know nothing, I don't want to spend any money because I don't care about my data, and I don't have time to, well, I will use the first email provider I will find, like Gmail, Hotmail, stuff like that, and that's all. And the last point is, where is it located? What's the low in the country where my data are? Is it in the USA? Is it in Europe? Where is it? So when you put that, this question, you see that you can go from top to bottom. The top will be something which you will have to spend a lot of time on it, a lot of money, and you will need knowledge to be able to do that. And at the bottom, it's just, okay, I don't care, I choose one company, and that's all. The first thing which is important now is to use free software, because if you need to encrypt completely your data, like you say, okay, I will use Tor to protect myself, but if you do that on Windows, for example, you're just wrong because the information you are entering on your keyboard are already recorded before going to Tor, so it just uses. Okay, so now I will talk about Lightbeam. Lightbeam is the new version of Collusion, so it's a project from one year ago, one or two years, and it allows us to monitor online web tracking. So I will show a short video to you because I don't have Wi-Fi, so I did that this afternoon, seeing that this morning was out. So here is Lightbeam, so as you can see, we just discovered that Ubuntu.com was already found on the first page on Ubuntu. This is an empty profile in Firefox, so on the right you can see the localization of the server. So it's in Unity Kingdom. And now I'm going to just go to different websites to see what happens. So here we go, Electronic Funchier Foundation. Okay, there is only one node. So here will be a graph, and each node of this graph will be the website I visited, directly or undirectly. So at the moment, it's only directly. I went to Ubuntu.com, I went to the Electronic Funchier Foundation. Now I will go to the New York Times website, and there you will see that it's very different. So the website is load, and here you go. You have the New York Times website, so when the shape is a circle, I directly visit it. And hold the website around the New York Times. I'm aware that I went to the New York Times website, but I didn't want to say that to them. So let's take the example I said just before going to eBay and looking for a camera. So the eBay website, I've also third-party sites inside it. So just looking at, as you can see, the answer, you probably can't see it well, but the interesting point is that some of the third-party websites are connected to the two websites I visited. So at the middle is DoubleClick.net, it's a famous advertisement company. They are able to say, okay, this person went from New York Times website to eBay. Why did they do that? This kind of information is interesting. Here is another website, it's Price Minister. So as you can see, there is tons of content included from other sites. And so now, yeah, I'm looking to the camera too. Yeah, the point is like DoubleClick, for example, is able to say all my navigation on the web are directly tracked by this website. So, unfortunately, I will not have time to really explain that. You can see that there is tons of third-party websites. So you can see that Labim allow you to filter, yeah. Labim allow us to filter different, to display only the website I really visited, or only the third-party website. It allows us to show our connection between these websites. And even allow us to block websites and to watch some websites, especially to keep the focus on them. So DoubleClick, you can see, is in the USA. Another interesting view is the list of all the websites you visited. You can, from this list, block a domain. You can also see the clock view. This view is loud. So this was an empty profile. So it's only today. But when you keep browsing during, for example, one week, it's really time consuming. So you have a big, big graph. If you want to only see what's interesting inside, you need to use the clock view. And the last thing I want to show you is the front view contribute data. This allows Mozilla to try to make a graph or advertiser spying on you. So if you want to contribute, that could be nice. Okay. So I don't really have time to explain you how is that working technically, but we can talk about that outside. The thing you have to know is, like, it's not only about cookies and everything like that today. But the new fashion, if I can say it like that, is just to try to see if your browser is unique. For example, the electronic function foundation creates a new project which will look only to your browser if it's unique looking at the user agent, looking at the plug available, looking at the times on your phones, almost everything. And just by looking at that, they are able to almost identify you, the main unique, yeah. You will be pretty almost each time they will be able to say, okay, it's you. Even if they do not use cookies or stuff like that. So other user, what can I do? So in Firefox, blog third party cookies and do not track. And you have some automatic solution items like Guthrie, which is not free software, unfortunately. This connect me, it's almost the same and free software is not as good as Guthrie at the moment, but if you contribute, it will become better. No script and request policy, for example, to block everything from our website, but you have to be more technical to do that. And you have to, yeah, you have nothing without Godwheel anyway, so be careful. So if I show you the difference now, I will, yeah. So here is the preference to set inside Firefox. So the do not track is just a flag to say, I don't want to be tracked. The website, nothing obliged the website to listen to you, but at least you say it legally. It's important. Clear the history. And as you can see, I know I have Guthrie in the extension. So let's see the difference in LightBeam. All the tab I had was the web page I visited just before without anything activated. So I just refreshed it. So New York time. eBay.com. And you will see at the right, there is a purple bubble, which is all the external content that Guthrie blocked to protect you. If you click on Guthrie, you can find inside it the exact element which was blocked. And you have some links to have more information about why and from where. And now, if we go to the graph, there we are. So I think the result is way better. I think we can just say that this graph is really, really, really nicer than the previous one. And especially, there is no common node between the sites I visited. So no navigation history. Okay, and just to finish, what you can do as a user, because I know we are in the first day. Usually I do not do that here, but you're able to change your services. So there is a full list on prismrack.org of services you can replace. For example, host your own services instead of using Google for your agenda, or to do lists or stuff like that, include on Cosy Cloud. Our new project about that, and they are really great. You should try them. And you should try to use Oasis, which are free software. I think you already know that. And spread the world. And especially the last slide, what you can do as a web developer, is avoid inclusion of external content if you can. It's not that hard. If you want to unbuild a social button like the like button from Facebook, for example, you can put an image with just the button. You will host the image yourself, not on Facebook. And if someone click on the image, you will just put a little bit of JavaScript to replace it with the real iframe provided by Facebook. At least if someone doesn't click on the button, it will not be tracked by Facebook.com. So think about it when you include the same for YouTube videos. It's easy to put just the first image of the video, and then when the user clicks on it, to replace it by the iframe with auto play on it. It's easy to do, and it saves a lot of privacy for your visitor. You can use P-week instead of Google Analytics. Google Analytics is everywhere. It's more than 90% of the website of the world, which our Google Analytics include in it. So Google is aware of almost everything which is happening on the Internet, and that's bad. And you can use Persona to, you had a presentation of it just today, which allow you to connect using your Google Accomps, but without saying it to Google as directly as if you increased it in a website or Facebook Connect to. And you can avoid hosters like Amazon or Windows Azure, because of course all the visitor IP will be tracked by this. Okay, it was really quick. Do you have any questions? I give two questions. So first and then. Is LightBeam compatible with CMonkey, and if not, why not? Is LightBeam compatible with CMonkey? That's the question. Well, honestly, I didn't try. I don't know. I just make the promotion of LightBeam, but I didn't write the code of the add-on, so I don't know. In order for it to be compatible, it needs the proper paragraph in the InstallerDF file. Well, the code isn't GitHub, so if you have any suggestions, you can just append an issue or file a bug with that. Not quite a question. There's actually a jQuery plugin by a German IT publication, which enables two click, so first activate, then register for Facebook, Google+, Twitter and stuff. It's called Social Share Privacy. Oh, nice. Fully localized in English, and I think they have five or six languages now. That's cool. But don't include jQuery from Google. But yeah. I had another question. Okay. Another one? Yeah? Isn't it somewhere in your interest to fund Google because Google funds Firefox? So isn't it in your interest to allow all these websites to track you? Well, no, because we care about our user first, surely. The user first. If you want to continue to speak about that, I can go outside and we will. Thank you so much. Maybe after us in the building because I want to see this interview.
 So, now welcome to Antoine or Flaburgan.  So Flaburgan is a Mozilla reps from France.  He is especially interested by online privacy and projects like Collusion.  He is making presentations to inform people and explain them how they can set Firefox  and other Mozilla tools to protect their online life.  Antoine is also a Moufflé.  So he is belonging to the new generation of the French community  and this is the nickname I've given them with love.  So Moufflé is a small fry in English  and they even are now planning some Moufflé meetups in the French community.  So please welcome my beloved Moufflé, Antoine.  Thank you.  Can you hear me?  Yeah? Okay, that's nice.  For those who want the presentation, it's already online on Github  so you can follow the slide on your computer.  This URL.  Oh, sorry.  Okay, here we go.  This presentation will be with a lot of speed  because I usually talk about that during house  and I got only 25 minutes, so here we go.  So I'm a French barrier.  I think I don't need to talk more about that.  I contribute to just around Mozilla projects  because I care about privacy on the Internet.  The first thing that I wanted to talk to you today  is that the Internet is powerful.  The web is powerful.  We are doing things today with a web that nobody imagined  when the web was built at the first time.  So we are building an operating system for mobile phone.  We are doing a lot of stuff.  I recently saw a fridge with Twitter on it.  So the web is not only about a browser on the computer,  but also about a lot of devices.  It's everywhere.  And unfortunately, only a few people are able to understand  how the web is working.  And one of the downside of this is that many people just don't care  about their data and what the web can be wrong with them.  So just a number, 300 millions of pictures of images  upload on Facebook every day.  So most of them are very personal or maybe professional data,  but that's an amazing amount of data which are transferring  using the web every day.  And unfortunately, the people who deal with those data  are doing that to have more money.  The goal of the corporation is to have money every day.  I think you know that if you're in the first day today,  that the difference between non-profit and corporation.  So my point today is in the web, it's pretty different  because you say, okay, I'm dealing with companies almost every day.  Like I'm going to my bank. I'm going to the bakery.  But those companies are just right next to you.  If you have a problem with Google, with Facebook,  with a big company on the web,  you will not be able to easily contact them.  You will see just after I will give an example of a story  which is really sad about someone who tried to contact Google.  So they are far away from you.  You cannot do anything. You cannot go there and talk with them.  And most of them are already big.  Like if today you say, okay, what Facebook is doing with my data is wrong.  I don't want to use Facebook anymore. I will use something else.  It will be really, really hard for you to find an equivalent in the services.  There is no equivalent to Facebook. There is no equivalent to Google.  It's something too big to compete with.  So this kind of company, owning all data, is a problem.  The States, owning all data, is a problem too.  I think you probably know this slide.  They come from the prisoner story in the NSA.  That's not revealed to everyone in last June.  One of the reasons I'm doing this speech once again,  because I already did it last for them,  but I think it's important because of this change.  I don't know if you can read easily, but that's all the corporations,  the NSA have an agreement with them to directly take data inside this database.  So if you're using a software or services of one of those companies,  so you've got Microsoft, Yahoo, Google, Facebook, YouTube, Skype, Apple, everybody,  so you'll probably have your data somewhere.  I mean, I try to have none of that on all these companies, and it's really hard to do.  So here is the situation. Know the point.  The NSA know that I'm sharing kitten's picture on the Internet. Who cares?  Well, there is many problems about that.  The first one is the dependency you have to these services.  For example, the story I was talking about was an artist who was working  using almost every Google services, so he got Gmail to talk with all the contacts he had.  He used Picasa to share his work.  He used an Android phone, and one day, like every morning,  he just switched on his computer, and so, okay, you do not have to access Gmail anymore  because your account was closed.  You do not respect anymore the terms of use.  So it was like, okay.  No explanation, no thing.  So say, okay, so I cannot write you an email because you just closed my email.  I will try to call you.  So he picked his phone, and the Android was mocking, okay,  you cannot use this phone anymore because you do not respect the terms of use.  So no phone, no email.  And he tried to do a lot of research during one week to know why his account was closed.  And it spent one week before he succeeded to talk to a human,  someone from Google able to say, oh, it's because one of the robots  detects that on one of your pictures, one of the work you're doing,  there is a naked chill, so it was considering as pedophilia,  but you know, this kind of art you can find in many churches,  well, nothing problematic, so Google just say, okay, excuse us,  we are sorry about that.  Your account is here again, every data here,  but during one week, no phone, no email, no work, nothing.  I think you can imagine that it's really problematic to be as dependent as a service like that.  The other point is targeted advertisement.  You can say the same.  I don't care if someone knows that I'm looking for a camera on the Internet.  The point is today with the different tools the advertisers use,  they are able to know which side you are visiting,  so they can say to you, okay, you were to Amazon,  you didn't find the camera, so you go to eBay.  And this kind of information is really, really, really, really important  for every person who do some sales online.  If you're able to say, imagine in real life in the street,  you go on a shop and you don't find the shoes you were looking for,  you go back and you go to another shop,  and if the seller in that shop can know that you didn't find something in a concurrent of him,  it can sell you exactly what you want, it can order it,  it can, yeah, maximize every sales he will do.  So online this is possible and this is dangerous for us  because we will just, yeah, sell all that and we will just buy tons of stuff we don't really need.  So this is also a problem when you start thinking about profiling.  For example, if you say, okay, I just like some kittens on Facebook,  I don't see the problem about that, but you don't know why.  Maybe someone somewhere will see that statistically,  people loving kittens are more probable,  there is more probability to have a car accident if you love kittens.  Nothing can say that in real life, but maybe statistically you will see that.  Okay, so what is the consequences of that?  The insurance will directly say, oh, you will have probably a car accident,  so you will pay your insurance more just because of that.  Profiling is really, really dangerous too because it's unpacked directly your money,  unpacked directly yourself outside of the web in the real world.  And of course that could be bad for your job too, and for the state.  I think that we saw what happened in Syria, what is happening in a lot of countries in the world over there.  We don't want the OVA formation to be as easy as it is right now.  It's too easy for people to access OVA information,  especially you can say, okay, I'm in Europe, maybe in Germany or in France,  so the government there are not bad, they are here for us at the beginning, the idea was that.  But nobody can say what will be legal or illegal in 10 years.  If today, Loving Kittens is a good idea, maybe in 10 years it will be completely forbidden,  and then you can go in jail because your data from 10 years ago was already accessible.  So we have to do something about that.  The first thing we have to do is to choose the services and the software we are using.  So the question to ask ourselves about that is, first of all, what do you want to hide?  If I try to, I don't know, if I'm in China and I want to post something very controversial on the Internet,  I will need something really, really secure.  It's not the same as if I just don't want Google to know that I'm looking for shoes.  So who is providing the service?  If it's someone who is doing that to have more money or if it's someone,  non-profit like Mozilla can be.  And especially how much time and money and how much knowledge I have,  how much can I invest myself in this project?  If I know nothing, I don't want to spend any money because I don't care about my data,  and I don't have time to, well, I will use the first email provider I will find,  like Gmail, Hotmail, stuff like that, and that's all.  And the last point is, where is it located?  What's the low in the country where my data are?  Is it in the USA? Is it in Europe? Where is it?  So when you put that, this question,  you see that you can go from top to bottom.  The top will be something which you will have to spend a lot of time on it,  a lot of money, and you will need knowledge to be able to do that.  And at the bottom, it's just, okay, I don't care, I choose one company, and that's all.  The first thing which is important now is to use free software,  because if you need to encrypt completely your data, like you say,  okay, I will use Tor to protect myself, but if you do that on Windows, for example,  you're just wrong because the information you are entering on your keyboard  are already recorded before going to Tor, so it just uses.  Okay, so now I will talk about Lightbeam.  Lightbeam is the new version of Collusion, so it's a project from one year ago,  one or two years, and it allows us to monitor online web tracking.  So I will show a short video to you because I don't have Wi-Fi,  so I did that this afternoon, seeing that this morning was out.  So here is Lightbeam, so as you can see, we just discovered that Ubuntu.com  was already found on the first page on Ubuntu.  This is an empty profile in Firefox, so on the right you can see the localization of the server.  So it's in Unity Kingdom.  And now I'm going to just go to different websites to see what happens.  So here we go, Electronic Funchier Foundation.  Okay, there is only one node.  So here will be a graph, and each node of this graph will be the website I visited,  directly or undirectly.  So at the moment, it's only directly.  I went to Ubuntu.com, I went to the Electronic Funchier Foundation.  Now I will go to the New York Times website, and there you will see that it's very different.  So the website is load, and here you go.  You have the New York Times website, so when the shape is a circle, I directly visit it.  And hold the website around the New York Times.  I'm aware that I went to the New York Times website, but I didn't want to say that to them.  So let's take the example I said just before going to eBay and looking for a camera.  So the eBay website, I've also third-party sites inside it.  So just looking at, as you can see, the answer, you probably can't see it well,  but the interesting point is that some of the third-party websites are connected to the two websites I visited.  So at the middle is DoubleClick.net, it's a famous advertisement company.  They are able to say, okay, this person went from New York Times website to eBay.  Why did they do that? This kind of information is interesting.  Here is another website, it's Price Minister.  So as you can see, there is tons of content included from other sites.  And so now, yeah, I'm looking to the camera too.  Yeah, the point is like DoubleClick, for example, is able to say all my navigation on the web are directly tracked by this website.  So, unfortunately, I will not have time to really explain that.  You can see that there is tons of third-party websites.  So you can see that Labim allow you to filter, yeah.  Labim allow us to filter different, to display only the website I really visited,  or only the third-party website.  It allows us to show our connection between these websites.  And even allow us to block websites and to watch some websites, especially to keep the focus on them.  So DoubleClick, you can see, is in the USA.  Another interesting view is the list of all the websites you visited.  You can, from this list, block a domain.  You can also see the clock view.  This view is loud.  So this was an empty profile.  So it's only today.  But when you keep browsing during, for example, one week, it's really time consuming.  So you have a big, big graph.  If you want to only see what's interesting inside, you need to use the clock view.  And the last thing I want to show you is the front view contribute data.  This allows Mozilla to try to make a graph or advertiser spying on you.  So if you want to contribute, that could be nice.  Okay.  So I don't really have time to explain you how is that working technically,  but we can talk about that outside.  The thing you have to know is, like, it's not only about cookies and everything like that today.  But the new fashion, if I can say it like that, is just to try to see if your browser is unique.  For example, the electronic function foundation creates a new project which will look only to your browser  if it's unique looking at the user agent, looking at the plug available, looking at the times on your phones,  almost everything.  And just by looking at that, they are able to almost identify you, the main unique, yeah.  You will be pretty almost each time they will be able to say, okay, it's you.  Even if they do not use cookies or stuff like that.  So other user, what can I do?  So in Firefox, blog third party cookies and do not track.  And you have some automatic solution items like Guthrie, which is not free software, unfortunately.  This connect me, it's almost the same and free software is not as good as Guthrie at the moment,  but if you contribute, it will become better.  No script and request policy, for example, to block everything from our website,  but you have to be more technical to do that.  And you have to, yeah, you have nothing without Godwheel anyway, so be careful.  So if I show you the difference now, I will, yeah.  So here is the preference to set inside Firefox.  So the do not track is just a flag to say, I don't want to be tracked.  The website, nothing obliged the website to listen to you, but at least you say it legally.  It's important.  Clear the history.  And as you can see, I know I have Guthrie in the extension.  So let's see the difference in LightBeam.  All the tab I had was the web page I visited just before without anything activated.  So I just refreshed it.  So New York time.  eBay.com.  And you will see at the right, there is a purple bubble,  which is all the external content that Guthrie blocked to protect you.  If you click on Guthrie, you can find inside it the exact element which was blocked.  And you have some links to have more information about why and from where.  And now, if we go to the graph, there we are.  So I think the result is way better.  I think we can just say that this graph is really, really, really nicer than the previous one.  And especially, there is no common node between the sites I visited.  So no navigation history.  Okay, and just to finish, what you can do as a user,  because I know we are in the first day.  Usually I do not do that here, but you're able to change your services.  So there is a full list on prismrack.org of services you can replace.  For example, host your own services instead of using Google for your agenda,  or to do lists or stuff like that, include on Cosy Cloud.  Our new project about that, and they are really great.  You should try them.  And you should try to use Oasis, which are free software.  I think you already know that.  And spread the world.  And especially the last slide, what you can do as a web developer,  is avoid inclusion of external content if you can.  It's not that hard.  If you want to unbuild a social button like the like button from Facebook, for example,  you can put an image with just the button.  You will host the image yourself, not on Facebook.  And if someone click on the image, you will just put a little bit of JavaScript  to replace it with the real iframe provided by Facebook.  At least if someone doesn't click on the button,  it will not be tracked by Facebook.com.  So think about it when you include the same for YouTube videos.  It's easy to put just the first image of the video,  and then when the user clicks on it, to replace it by the iframe with auto play on it.  It's easy to do, and it saves a lot of privacy for your visitor.  You can use P-week instead of Google Analytics.  Google Analytics is everywhere.  It's more than 90% of the website of the world,  which our Google Analytics include in it.  So Google is aware of almost everything which is happening on the Internet,  and that's bad.  And you can use Persona to, you had a presentation of it just today,  which allow you to connect using your Google Accomps,  but without saying it to Google as directly as if you increased it in a website or Facebook Connect to.  And you can avoid hosters like Amazon or Windows Azure,  because of course all the visitor IP will be tracked by this.  Okay, it was really quick.  Do you have any questions?  I give two questions. So first and then.  Is LightBeam compatible with CMonkey, and if not, why not?  Is LightBeam compatible with CMonkey? That's the question.  Well, honestly, I didn't try. I don't know.  I just make the promotion of LightBeam, but I didn't write the code of the add-on, so I don't know.  In order for it to be compatible, it needs the proper paragraph in the InstallerDF file.  Well, the code isn't GitHub, so if you have any suggestions,  you can just append an issue or file a bug with that.  Not quite a question. There's actually a jQuery plugin by a German IT publication,  which enables two click, so first activate, then register for Facebook, Google+, Twitter and stuff.  It's called Social Share Privacy.  Oh, nice.  Fully localized in English, and I think they have five or six languages now.  That's cool. But don't include jQuery from Google.  But yeah.  I had another question.  Okay. Another one?  Yeah?  Isn't it somewhere in your interest to fund Google because Google funds Firefox?  So isn't it in your interest to allow all these websites to track you?  Well, no, because we care about our user first, surely.  The user first.  If you want to continue to speak about that, I can go outside and we will.  Thank you so much.  Maybe after us in the building because I want to see this interview.
_FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_0_239.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_240_695.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_696_1391.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_1392_1619.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_1620_1919.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_1920_2195.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_2196_2423.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_2424_2471.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_2472_2915.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_2916_3275.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_3276_13583.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_13584_17939.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_17940_20219.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_20220_20267.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_20268_20363.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_20364_21347.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_21348_28235.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_28236_28331.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_28332_28415.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_28416_28463.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_28464_28511.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_28512_28631.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_28632_28679.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_28680_30191.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_30192_30251.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_30252_30299.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_30300_30407.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_30408_30467.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_30468_31919.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_31920_36911.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_36912_37079.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_37080_37127.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_37128_39899.png _FOSDEM_2014__Observe_online_tracking_with_Lightbeam_QyvNx8ef-I0_39900_39944.png