Firefox

OpenAI says prompt injections will always be a risk for AI browsers with agentic capabilities, like Atlas. But the firm is beefing up its cybersecurity with an "LLM-based automated attacker."

The lack of self awareness in the title is astonishing.

Did not read the article. But saw the headline in my rss reader and laughed out loud. This had to be done on purpose.

TL;DR: The big tech AI company LLMs have gobbled up all of our data, but the damage they have done to open source and free culture communities are particularly insidious. By taking advantage of those who share freely, they destroy the bargain that made free software spread like wildfire.

cross-posted from: https://lemmy.cafe/post/28583067

LibreWolf is one of the best browsers for people who don't like generative AI.

Here is the statement posted on Mastodon:

As there seems to have been recent confusion about this, just a quick "official" toot to then pin: we haven't and won't support "generative AI" related stuff in LibreWolf. If you see some features like that (like Perplexity search recently, or the link preview feature now) it is solely because it "slipped through". As soon as we become aware of something like this / it gets reported to us, we will remove/disable it ASAP.

That was complete bullshit, of course. Yes, I absolutely branded Mozilla.org that way for the subtext of "these free software people are all a bunch of commies." I was trolling.

Once upon a time, Mozilla was three commies in a trenchcoat.

From Mozilla:

Monitor Plus, Mozilla’s premium data broker scan and removal service, officially shut down on December 17.

Mozilla had partnered with OneRep, a data removal company with ties to data collection services, and had been told about the firm's behavior in early 2024.

Up until this point, Mozilla was dragging its feet:

• 2024-03-14 - Kreb's story undercovers OneRep founder background - https://krebsonsecurity.com/2024/03/ceo-of-data-privacy-company-onerep-com-founded-dozens-of-people-search-firms/
• 2024-03-22 - 8 days later - Mozilla statement to drop OneRep - https://krebsonsecurity.com/2024/03/mozilla-drops-onerep-after-ceo-admits-to-running-people-search-networks/
• 2024-10-22 - 7 months later - Mozilla FAQ update about still searching for provider to replace OneRep - https://support.mozilla.org/en-US/kb/securing-new-partner-monitor-plus
• 2025-02-10 - today - almost 11 months later

Ten more months, and Mozilla is no longer looking for a partner, choosing to shutter the program.

There weren't any straightforward guides when I looked this up, and I even had to ask myself. But I just needed to put so and so together, get some feedback here, and voila! Hopefully this can work for you too, and could edit userchrome.css in your favorite editor, and see the changes in Firefox immediately. I tested that it works with @import url("folder/file.css");, and nested imports too (if folder/file.css contained @import url("Another folder/file.css");.

1. Install fx-autoconfig (I haven't tested it with other Firefox JS loaders), following the whole install section: https://github.com/MrOtherGuy/fx-autoconfig?tab=readme-ov-file#install
2. In the chrome/JS/ folder, create <any file name>.uc.mjs (I named mine refresh.uc.mjs) and paste the script below (it's slightly modified from this snippet):
   • The part containing @onlyonce is needed so fx-autoconfig loads it just once, rather than spawn a new instance of the script every time a new firefox window is opened.
3. Clear startup cache: https://github.com/MrOtherGuy/fx-autoconfig?tab=readme-ov-file#deleting-startup-cache
4. You may need to toggle the script. You can go to Menu Bar > Tools > userScripts.

Script

// ==UserScript==
// @onlyonce
// ==/UserScript==

// Script from here:  https://gist.github.com/jscher2000/ad268422c3187dbcbc0d15216a3a8060?permalink_comment_id=3259657#gistcomment-3259657
setInterval(() => {
    /*
       Code to paste and run in the Browser Console
       Requires devtools.chrome.enabled => true in about:config
       Tested in Firefox 68.0.1 on Windows
    */

    // Create references to APIs we'll use
    var ss = Cc["@mozilla.org/content/style-sheet-service;1"].getService(Ci.nsIStyleSheetService);
    var io = Cc["@mozilla.org/network/io-service;1"].getService(Ci.nsIIOService);
    var ds = Cc["@mozilla.org/file/directory_service;1"].getService(Ci.nsIProperties);
      
    // Get the chrome directory in the current profile
    var chromepath = ds.get("UChrm", Ci.nsIFile);

    // Specific file: userChrome.css or userContent.css
    chromepath.append("userChrome.css");

    // Morph to a file URI
    var chromefile = io.newFileURI(chromepath);

    // Unregister the sheet
    if(ss.sheetRegistered(chromefile, ss.USER_SHEET)){
      ss.unregisterSheet(chromefile, ss.USER_SHEET);
    }

    // Reload the sheet
    ss.loadAndRegisterSheet(chromefile, ss.USER_SHEET);
}, 1000)

It's disabled by default, but I had no idea this was added.

Firefox mobile users started noticing something peculiar this week when sharing links to WhatsApp. After hitting that share button, their messages were getting an unexpected tagline: “Sent from Firefox 🦊” with a direct link to the Mozilla app store listing.

The feature appeared quietly, with no fanfare or announcement from Mozilla.

https://piunikaweb.com/2025/11/26/sent-from-firefox-whatsapp-share-signature/

Petite mise à jour de ma liste de logiciels avec l'ajout de @LibreWolf (désolé @firefox) #gafamonsGAFAM
https://www.kadavrhusky.net/doku.php/informatique/logiciels/_libres #logiciel #foss #linux #windows

When I started working on AI at Mozilla two years ago, I was a Python developer with a background in web services and three months of machine learning experience from working on the Nuclia DB project. I was not someone who had trained models from scratch or built production ML infrastructure. Today, Firefox ships multiple AI features that run entirely on-device, and I helped build the infrastructure that makes that possible. This is a retrospective on what we accomplished and what I learned along the way.

TL;DR: Mozilla’s translation bot on Support Mozilla (that is currently overwriting user contributions is based on the closed source, copyright infringing LLM, Google Gemini. This is in spite of Mozilla claiming that they are at the forefront of open source AI, and belies their exhortations to choose to build open source AI and data sets. Although Mozilla has experience in attracting open contributions for data sets in projects like Common Voice, Mozilla is using a closed data set to overwrite open contributions. Since (paid) Gemini queries do not train the model, Mozillians can expect to correct errors every time the bot automatically updates an article.

https://www.xuldev.org/misc/ucjs.php

Heute zu #Nikolaus stellen wir LanguageTool vor. Das ist ein Onlinetool zur Komma-, Grammatik- und Rechtschreibprüfung. Das Besondere ist, dass es zusätzlich in verschiedene Anwendungen wie @thunderbird Thunderbird, @LibreOfficeDE LibreOffice, @firefox Firefox und @obsidian Obsidian eingebunden und direkt genutzt werden kann. Darüber ist ein gemeinsames Wörterbuch für alle Anwendungen möglich. Mit der kostenpflichtigen Version kann es um KI-Funktionen ergänzt werden.

https://go.laaw.nrw/4o

The New York Times filed a copyright lawsuit against Perplexity, joining other publishers using legal action as leverage to force AI companies into licensing deals that compensate content creators.

Basically, whenever I edit firefox-profile-path/chrome/userChrome.css, I want firefox to automatically apply the file again. The only posts I found on this are old and not straightforward. I'm wondering what currently works.

TL;DR: Mozilla is killing localization on Support Mozilla, overwriting articles written by humans with machine generated translations. Although Mozilla knows that their AI doesn’t localize or adhere to style guides, Mozilla is going live with it anyway. I thank locale leaders and localizers for their tireless efforts. Locale leaders seem to be obviated by AI, and Mozilla has nothing to say about it.

TL;DR: On the November 2025 Mozilla Support Community call, Mozilla provided updates on the recent controversy from the Japanese Support Mozilla community quitting over AI. During the call, Mozilla doubled down on AI, confirming that volunteers would be unable to disable AI translations across the entire Mozilla knowledge-base, with the American English version of articles serving as the blessed, canonical version. Locale specific contributions will be overwritten (by design) by AI.

By default now Firefox for Android shares an extra link with TRACKING for advertising itself. This is the features that everyone loves.

Ok, buried in the menu there's an option to disable this shit. But it's infuriating that a "please spam my friends and track the opening rate of my links" option is enabled by default

Nothing to discuss in particular, just spreading some kindness 😊