peri-cl
4 hours ago
This is an excellent use case for completely local, small model inference, yet for inexplicable reasons Mozilla wants to normalize uploading your entire private browsing history to a cloud.
These (Mistral's and Mozilla's) marketing pages aren't candid enough to clearly explain the difference between local and cloud inference, and that they're asking you to consent to enabling the latter. I'd call that the bare minimum of ethics. If you're in a position of authority over your less technical users, you are ethically obligated to give them the full picture of what are you doing and why they should consent.
(Aside to any Mozilla people who might be reading HN, your page here[0] has an oversight, it advertises this model as "Mistral Small 4" but the hyperlink is to OpenAI's model card for gpt-oss-120b).
[0] https://support.mozilla.org/en-US/kb/smart-window-models
walrus01
2 hours ago
I am not trying to defend Mozilla doing this, and I don't support sending data to cloud based services like this in a way that users won't understand.
But I also think that the state of the art in small LLM and user device capabilities aren't there yet to put a "good enough to be actually useful" local-only LLM as a prepackaged thing in a mass market distributed browser.
You don't want a browser that takes 10GB of extra RAM (on top of the memory hog that is having just 3 or 4 complex tabs open on its own already) and pegs your CPU at 99% usage for minutes at a time. And not in an era when mass market consumer laptops are still commonly 8GB or 16GB of total system RAM. Many of those with integrated-into-CPU onboard graphics (eg: not a gaming laptop with a discrete GPU on the PCI-E bus).
It'll be a catastrophe for laptop battery life, among other resource use problems. And an LLM that fits in under 8 to 10GB of RAM for CPU-only inference is not going to be nearly as capable as an off-device inference system.
I wish they had just done this with a very clear up front opt in (not enabled by default) thing that explains what Mistral is, that it's not some big American cloud company but a relatively small startup in France, and that your prompts/LLM interactions will go to their servers. And some documentation on how it will be handled/stored in a supposedly trustworthy manner.
paimapi
17 minutes ago
>But I also think that the state of the art in small LLM and user device capabilities aren't there yet to put a "good enough to be actually useful" local-only LLM
so then don't add it in as highly advertised feature until it is. doing things right and living up to your core values is a lot to expect from businesses these days but, at minimum, a non-profit foundation should be able to live up to these goals, yes?
jimmydoe
20 minutes ago
Agree, advocating for Firefox developing features only for rich hobbyists(people who can afford large RAM and GPU) is absurd.
Barbing
4 minutes ago
>advocating for Firefox developing features only for rich hobbyists
?:
>marketing pages aren't candid enough to clearly explain
julenx
3 hours ago
The privacy policy for Smart Window[1] indicates that prompts are not only sent to an LLM provider (Mistral in this case), but also to Mozilla servers first.
> The assistant sends the full prompt (including your query, any relevant Memories, and any additional relevant browsing context) to a Mozilla server.
>
> Upon receipt, Mozilla forwards the request to a third-party large language model (LLM) on your behalf. The LLM receives the request from Mozilla, not directly from you, and sees a Mozilla IP address rather than your own. The request includes only the information needed to generate a response or perform the requested action.
Where they do use an on-device model is for the initial query classification: > When you submit a query in the Smart Bar, the assistant uses a local (on-device) intent classification model to determine whether the query is best addressed by a chat or a search.
[1] https://www.mozilla.org/en-US/privacy/smart-window/mossTechnician
an hour ago
This sentence is eye-opening:
> Smart Window infers information about you based on your interactions with the assistant and your Firefox browsing activity, including websites you have visited. This may include activity outside of Smart Window (such as in classic windows)...
Privacy-minded users who want to try this feature would need to create a totally separate browser profile to avoid data leaks.wky
22 minutes ago
You can control this in the settings:
- Learn from chats in Smart Window
- Learn from browsing in Classic and Smart WindowsIolaum
2 hours ago
Some years ago Firefox was the go to browser if you wanted to have "some" privacy in your browsing (together with uBlock origin). With news like this I m really wondering if my views are outdated and I need to to some good researching on maintaining some privacy in what I m browsing.
walrus01
an hour ago
Mozilla has been in a bit of a recursive feedback loop death spiral for years now of: Browser loses market share -> try some weird thing -> very few people like or use it -> browser loses market share -> management says "oh shit we're losing market share we better try some weird thing"
I say this as a person that uses firefox with ublock origin 99.5% of the time. It's better in my opinion than Chrome. I can at least easily turn off the enabled by default crap features. Like the advertising and sponsored news links on the default new tab page.
HappyPanacea
an hour ago
very few people like or use it -> browser loses market share
I very much doubt trying weird things meaningfully changed their market share (aside from UI redesigns)
walrus01
11 minutes ago
I think it didn't help. Constantly adding or changing features makes it less consistent and predictable. For example several family members were confused by what is "pocket".
WhyNotHugo
4 hours ago
I can't fathom how they'd consider "Private" something that uploads all the sensitive information in readable form to a third party service.
In fact, If I were asked to explain the opposite of private, I might give this kind of design as an example.
peri-cl
4 hours ago
It's more un-fathomable if you recall Mozilla were the people who *pioneered* local browser ML as a privacy feature. Back in 2022—when Chrome was doing language translation by uploading to Google servers, and Mozilla introduced the (actually innovative!) idea of baking small ML models into the browser,
https://news.ycombinator.com/item?id=33792447 ("Firefox Translations: Translate websites in your browser without using the cloud (addons.mozilla.org)")
And look: they were 100% cognizant, then, of how vital local processing is to privacy:
> "...called Project Bergamot. The ultimate goal of this consortium was to build a set of neural machine translation tools that would enable Mozilla to develop a website translation add-on that operates locally, i.e. the engines, language models and in-page translation algorithms would need to reside and be executed entirely in the user’s computer, so none of the data would be sent to the cloud, making it entirely private."
https://blog.mozilla.org/en/mozilla/local-translation-add-on... ("Mozilla releases local machine translation tools as part of Project Bergamot")
erikwiffin
42 minutes ago
Even more un-fathomable, Mozilla's CTO has been writing a substack with the underlying theme of "if the AI isn't running on your hardware, you don't own it" https://newsletter.ownersnotrenters.com/
They're still 100% cognizant! And yet.
JeremyNT
an hour ago
> This is an excellent use case for completely local, small model inference, yet for inexplicable reasons Mozilla wants to normalize uploading your entire private browsing history to a cloud.
I certainly agree that this option would be nice to have, but running firefox without an ad blocker on the modern web will ALREADY spin up my fans just rendering all the garbage, and I have a decent laptop.
You can't expect the median Firefox-running device to be able to run a capable enough local model effectively.
phrotoma
an hour ago
Just gonna go ahead and adopt the phrase "spin up my fans" to describe pissing me off.
aucisson_masque
2 hours ago
> This is an excellent use case for completely local, small model inference
Is it really ? LLM take lot of ram and drain battery. People run Firefox on low end computer.
walrus01
an hour ago
Indeed. Realistically a 'capable' small local LLM, even one that's definitely not as good as externally hosted ones will require a single 16GB GPU and access to basically all of the RAM on the GPU. That's not something people running Firefox on a $500 laptop with 8 or 16GB of total system RAM and a CPU-integrated basic graphics system have to spare.
forgotaccount3
2 hours ago
> This is an excellent use case for completely local, small model inference,
How small is this 'small model' inference?
Browsers especially are expected to operate on a very wide number of devices. It makes perfect sense to me to start off with a cloud driven approach and later allow people to configure it to run locally if they have the hardware to do so. Anyone with the hardware to do so is already signaling that they'd have the technical interest to make that change while having the default 'works for everyone' mode be one that doesn't require a powerful local device.
I say this as someone using a 6 year old computer and only upgraded to 8GB of ram when the latest WoW expansion was released.
yeoyeo42
25 minutes ago
the average user has nowhere near enough the capability to run a model fast enough to do useful things
nhinck3
24 minutes ago
Anyone else's extensions not work on support.mozilla.org?
AstralSerenity
35 minutes ago
This is ridiculous. Not only does Mozilla support BYOM with Smart Window, but do we seriously expect your average user to be able to locally run it with ease?
Imagine for a moment the complaints that would arise the very next day because their browser is now revving up their laptop fans and hoarding precious RAM.
Local models aren't yet light enough to handle the required processing at the lowest end, so Mozilla chose the most responsible stewards they could find. There is no news here.
padenot
3 hours ago
Thanks for mentioning the mistake on the link, it's been reported internally.
HelloUsername
3 hours ago
The "Gemini 3.1 Flash Lite" also points incorrectly (?) to https://storage.googleapis.com/deepmind-media/Model-Cards/Ge...
lukewarm707
an hour ago
zdr is good, really confidential inference with attestation would be better. the same as a confidential vm TEE which confirms the integrity and privacy.
there are good providers available, i think it should become the standard.
two high quality companies: near.ai tinfoil.sh
busssard
3 hours ago
its up to us to make extensions that are so famous that they can be integrated into the browser functionality i guess
spwa4
3 hours ago
Except ... this is not local. It's a remote service. Here is something that is:
docker run ghcr.io/open-webui/open-webui:v0.11.3
docker run mcr.microsoft.com/playwright/mcp:latest
Configure them. Open-webui needs a model (a local qwen3.8 does amazing), and you need to link them up. Playwright will just do stuff.input_sh
3 hours ago
https://support.mozilla.org/en-US/kb/smart-window-byom
Also supports Lemonade and Ollama, which are.