Each Firefox download has a unique identifier

silversurfer

Level 85
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Malware Hunter
Well-known
Aug 17, 2014
10,057
Internet users who download the Firefox web browser from the official Mozilla website get a unique identifier attached to the installer that is submitted to Mozilla on install and first run.

firefox installer hash
The identifier, called dltoken by Mozilla internally, is used to link downloads to installations and first runs of the Firefox browser. The identifier is unique to each Firefox installer, which means that it is submitted to Mozilla whenever it is used.

While it is possible to download new installers each time a new Firefox version is released, it is also possible to use the downloaded installer again for that purpose.

A bug report on Mozilla's official bug tracking website confirms the use of the download token. The linked document is not public, but the listing itself confirms the use and provides an explanation on why it has been implemented:
This data will allow us to correlate telemetry IDs with download tokens and Google Analytics IDs. This will allow us to track which installs result from which downloads to determine the answers to questions like, "Why do we see so many installs per day, but not that many downloads per day?"

According to Mozilla's description, the identifier is used to analyze downloading and installation trends among other things.

The feature is powered by Telemetry in Firefox and it applies to all Firefox channels.
 

blackice

Level 38
Verified
Top Poster
Well-known
Apr 1, 2019
2,731
Analytics aren’t inherently evil and can be quite useful for developers. Everyone thinks these massive corporations have an interest in their personal comings and goings. Big data is useful on the macro level, not the micro level.
 

n8chavez

Level 16
Well-known
Feb 26, 2021
785
Any sort of analytics is bad, especially if google is involved. And that's the path Mozilla seems to be going down, because google is their primary source of income. Now analytics equates to a lessening of privacy, which is exactly what Mozilla used to be against.
 

plat

Level 29
Top Poster
Sep 13, 2018
1,793
Analytics aren’t inherently evil and can be quite useful for developers. Everyone thinks these massive corporations have an interest in their personal comings and goings. Big data is useful on the macro level, not the micro level.
I'm speculating, but it's not so much the data gathering but that it's done surreptitiously and without user consent. I don't think anyone be-grudges Mozilla from making a buck or two but venturing into "consorting with the enemy" (Google) territory and well, I don't need to go on.
 

blackice

Level 38
Verified
Top Poster
Well-known
Apr 1, 2019
2,731
Any sort of analytics is bad, especially if google is involved. And that's the path Mozilla seems to be going down, because google is their primary source of income. Now analytics equates to a lessening of privacy, which is exactly what Mozilla used to be against.
Although I agree lines have been crossed by advertising consortiums, most of this is privacy panic. Knowing how people use your website for the purpose of improving the experience is hardly a privacy violation. So, I would disagree with the notion that all analytics are bad. The internet is a public place, and wasn’t developed to be private.
 

blackice

Level 38
Verified
Top Poster
Well-known
Apr 1, 2019
2,731
I'm speculating, but it's not so much the data gathering but that it's done surreptitiously and without user consent. I don't think anyone be-grudges Mozilla from making a buck or two but venturing into "consorting with the enemy" (Google) territory and well, I don't need to go on.
This is a fair point.
 

n8chavez

Level 16
Well-known
Feb 26, 2021
785
Although I agree lines have been crossed by advertising consortiums, most of this is privacy panic. Knowing how people use your website for the purpose of improving the experience is hardly a privacy violation. So, I would disagree with the notion that all analytics are bad. The internet is a public place, and wasn’t developed to be private.

If we wait until after Google has gained control to panic it'll be too late. There is nothing wrong with saying the path Mozilla is on is bad. Mozilla has deviated from it's initial purpose. That is wrong. Privacy and security has to matter somewhere.
 

blackice

Level 38
Verified
Top Poster
Well-known
Apr 1, 2019
2,731
If we wait until after Google has gained control to panic it'll be too late. There is nothing wrong with saying the path Mozilla is on is bad. Mozilla has deviated from it's initial purpose. That is wrong.
If google decides to be malicious with data it’s already too late to panic. It is not in their best interest monetarily.
 

blackice

Level 38
Verified
Top Poster
Well-known
Apr 1, 2019
2,731
They already are. We are google's product.
That’s not malicious, that’s capitalism and another conversation entirely outside of the scope of this forum in terms of good/bad and morality, which I don’t disagree with.
 
  • Like
Reactions: Venustus

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top