Onerep is a privacy monitoring service/ privacy provider that Mozilla partnered with for their Mozilla Monitor service.

Yesterday, Brian Krebs (a cybersecurity journalist) dug into Onerep and found that the CEO is a shady Belarussian. Dimitri Shelest, CEO, of Onerep owns multiple “people searching” websites. Shelest has also been linked to aggressive spam and affiliate marketing emails.

Onerep’s reputation is shady due to their CEO’s multiple conflicts of interest. At worst, Onerep is sucking your personal information. At best, you’re paying for a service that doesn’t do anything. Either way, I would not trust Mozilla Monitor service .

This is a copy and paste from a post I made to firefox@lemmy.ml. I do not no know how to crosspost and I apologise for my mistake a head of time.

  • suppenloeffel@feddit.de
    link
    fedilink
    arrow-up
    94
    arrow-down
    2
    ·
    edit-2
    8 months ago

    Yikes. This has the potential to seriously damage the reputation of Mozilla. I guess there are 3 possibilities:

    • Onerep isn’t actually shady, but partnering with a company part of a conglomerate with companies directly opposing the stated goal isn’t a good look either way
    • Onerep is shady and Mozilla failed to conduct the necessary research before partnering with them
    • Onerep is shady and Mozilla knew

    In any case: Personally, I’ll never not be grateful towards Mozilla for continuing to support and develop Firefox, which is quite literally the only relevant engine standing against the monopoly of chromium and all the bad that entails. But I trust other companies/initiatives/projects more when it comes to services other than the browser engine.

    • DangerousInternet@lemmy.world
      link
      fedilink
      arrow-up
      3
      arrow-down
      4
      ·
      8 months ago

      I guess they did not knew about it, but only because they just do not give a shit about privacy, only claim they are privacy oriented.

    • Daughter3546@lemmy.worldOP
      link
      fedilink
      arrow-up
      9
      ·
      edit-2
      8 months ago

      Apologies! The links must not have copied over from my post on firefox@lemmy.ml! I’ll update the post with the correct links.

      Edit: I updated the original post with the correct links.

      • Daughter3546@lemmy.worldOP
        link
        fedilink
        arrow-up
        29
        ·
        edit-2
        8 months ago

        Mozilla partnered with Onerep (the company investigated by Brian Krebs) for their privacy monitoring service. The CEO of Onerep is linked to numerous “people lookup” websites.

    • Daughter3546@lemmy.worldOP
      link
      fedilink
      arrow-up
      28
      ·
      edit-2
      8 months ago

      I really love Firefox, but I dislike some of the initiatives the for-profit arm, Mozilla Corporation, is taking. This is another head scratcher moments for me. I want my browser to be just a browser. I don’t want Pocket, Google Search, nor any other nonsense.

      I get that they are subsiding the development costs of Firefox, but surely, there must be other avenues to generate revenue. It is really hypocritical of Mozilla when they market Firefox as a privacy focused alternative to Chrome/Edge/Safari and then bundle ads and sponsored nonsense.

  • utopiah@lemmy.ml
    link
    fedilink
    arrow-up
    22
    ·
    8 months ago

    At least they are very clear about what data is at risk here, namely "OneRep receives your

    • first and last name,
    • email address,
    • phone number,
    • physical address and
    • date of birth

    in order to scan data broker sites to find your personal data and request its removal." cf https://www.mozilla.org/en-US/privacy/subscription-services/

    It’s indeed not a good look anyway to be partnering (without doing much that sharing your brand, and thus trust invested in you) with somebody apparently solving the problem… they themselves help fuel.

  • TheAnonymouseJoker@lemmy.ml
    link
    fedilink
    arrow-up
    29
    arrow-down
    9
    ·
    edit-2
    8 months ago

    Privacy concerns aside, may I ask what does it have to do with the “Belarussian” nationality of CEO of Onerep? Xenophobia is not allowed. Edit that out.

    • youmaynotknow@lemmy.ml
      link
      fedilink
      arrow-up
      10
      arrow-down
      2
      ·
      edit-2
      8 months ago

      While I agree that the comment by the OP may be construed as Xenophobic, can we agree that it could also just be a part of the information with no ill intent? Based on that, would it be too hard to ask the OP to please edit it out instead of just delivering that as an order? I didn’t think about the potential of seeing that comment as xenophobic until you mentioned it, and realize more people could find it distasteful, but there’s no need to deliver the message in the form of a command.

      • TheAnonymouseJoker@lemmy.ml
        link
        fedilink
        arrow-up
        9
        arrow-down
        9
        ·
        edit-2
        8 months ago

        While I agree that the comment by the OP may be construed as Xenophobic, can we agree that it could also just be a part of the information with no ill intent?

        No, there is no possible agreement. If this was an American company or CEO, the nationality would most likely be welcomed in a sorry manner.

        The order I stated was as a moderator. We at Lemmy do not welcome xenophobia and similar elements. OP has not even bothered to reply or comply in almost half a day.

        • youmaynotknow@lemmy.ml
          link
          fedilink
          arrow-up
          7
          arrow-down
          2
          ·
          edit-2
          8 months ago

          I’m not going to downvote your comment, because I strongly believe that we’re all entitled to our own opinion.

          Now, according to the Merriam-Webster dictionary, xenophobia is defined as “fear and hatred of strangers or foreigners or of anything that is strange or foreign”. Nowhere does the OP display fear or hatred of any type of group, race, religion, nationality or anything else. The thread is about a CEO that is known for having a horrible track record with the privacy of the data his companies collect.

          Mentioning a nationality alone is not xenophobia.

          Additionally, whether you are a moderator or just a regular user, it does not justify talking to anyone in the way you do.

          It is highly likely that the OP has not complied or replied precisely because of the way you chose to word your comment. If it was me, I would have probably removed the nationality from the post, and would not have replied to you, but we’re all different.

          A moderator moderates. To moderate is to lessen the intensity or extremeness of.

          While I respect the tasks moderators do, because they take the time to maintain toxicity away as much as humanly possible, which is not an easy task, being a moderator does not give anyone the right to treat others with disrespect, regardless of the situation.

          Now, I have no idea of the extent of a moderator’s power in Lemmy instances, but if you kick me out, ban me, or whatever, know that I dont really mind. My reason for being here is wanting to interact with others on productive and respectful conversations, but by no means would that affect me in any significant way. I’m not challenging you, but this is one of the reasons I removed Reddit from my life. Too many moderators with low to no tolerance towards anything they thought was against their rules and acting like dictators.

          • beefbot@lemmy.blahaj.zone
            link
            fedilink
            arrow-up
            5
            ·
            8 months ago

            Sorry to pile on but since we’re already splitting hairs: it’s the phrasing that pushes it over into xenophobia. A better way might be for example “the CEO is shady. A Belorussian, [name] is…”. But combined in the same noun phrase - “a shady X” - puts it past whatever fine line we’re debating

            • youmaynotknow@lemmy.ml
              link
              fedilink
              arrow-up
              2
              arrow-down
              2
              ·
              edit-2
              8 months ago

              Oh, I fully agree that the OP could have certainly phrase that better. As I mentioned in my first comment, the way it was phrased can give way to understanding it as a xenophobic comment. My issue is not with the interpretation of the OPs post, but with the way this mod chose to address it. He apparently expects EVERYONE else to be careful how they word their ideas, but that rules applies to everyone but himself. The moment he mentioned “xenophobic”, I realized that this was easily interpreted as such, and the way you suggest it could have been phrased does allow to disregard that possibility. Another way the OP could have said it is: “Dimitri Shelest, a Belorussian with a shady record” or any other way to avoid a potential misinterpretation of his/her comment, and like the moderator, I also believe that everyone would be better served if the OP just modifies it. I still think that, when voicing thoughts and opinions, more than the content itself, it’s all in the delivery.

          • TheAnonymouseJoker@lemmy.ml
            link
            fedilink
            arrow-up
            1
            ·
            8 months ago

            While I respect the tasks moderators do, because they take the time to maintain toxicity away as much as humanly possible, which is not an easy task, being a moderator does not give anyone the right to treat others with disrespect, regardless of the situation.

            OP is disrespecting Belarussians as a whole. I am not.

            • youmaynotknow@lemmy.ml
              link
              fedilink
              arrow-up
              1
              arrow-down
              2
              ·
              8 months ago

              Wao, OK bro. I can appreciate when a conversation is not going to move forward. Have a nice weekend.

  • lemmyreader@lemmy.ml
    link
    fedilink
    English
    arrow-up
    11
    ·
    8 months ago

    The krebsonsecurity.com page had an update where Mozilla is quoted :

    Update, March 15, 11:35 a.m. ET: Many readers have pointed out something that was somehow overlooked amid all this research: The Mozilla Foundation, the company that runs the Firefox Web browser, has launched a data removal service called Mozilla Monitor service that bundles OneRep. That notice says Mozilla Monitor is offered as a free or paid subscription service.

    “The free data breach notification service is a partnership with Have I Been Pwned (“HIBP”),” the Mozilla Foundation explains. “The automated data deletion service is a partnership with OneRep to remove personal information published on publicly available online directories and other aggregators of information about individuals (“Data Broker Sites”).”

    In a statement shared with KrebsOnSecurity.com, Mozilla said they did assess OneRep’s data removal service to confirm it acts according to privacy principles advocated at Mozilla.

    “We were aware of the past affiliations with the entities named in the article and were assured they had ended prior to our work together,” the statement reads. “We’re now looking into this further. We will always put the privacy and security of our customers first and will provide updates as needed.”

  • rdyoung@lemmy.world
    link
    fedilink
    arrow-up
    11
    arrow-down
    1
    ·
    8 months ago

    If anyone reading this has an account with discover, they offer a similar service for free. If you don’t have a discover account, create one.

  • Tangent5280@lemmy.world
    link
    fedilink
    arrow-up
    10
    arrow-down
    1
    ·
    8 months ago

    It’s like a twisted mustache twirling disney villanesque version of data leak conspiracies. Only way I can think of for this to be funnier is if it turns out the dude also had a prominent position in some secret police state agency.

    • Daughter3546@lemmy.worldOP
      link
      fedilink
      arrow-up
      10
      ·
      edit-2
      8 months ago

      It does sound like a conspiracy and I am advocating to wait until Mozilla addresses the concern. In my opinion, it’s likely an oversight and failure to do their due diligence.

      • sanpo@sopuli.xyz
        link
        fedilink
        arrow-up
        11
        ·
        8 months ago

        That’s a pretty damn big “oversight” for a company claiming to have privacy as one of their main selling points…

        • Tangent5280@lemmy.world
          link
          fedilink
          arrow-up
          7
          ·
          8 months ago

          Maybe they’re so good at erasing online data that when they got to choosing a CEO, they couldn’t find any info on this dude being shady online.