It's an unintended side effect that the majority of custom ROM users will appreciate.

Firefox being the first and only browser on Android enforcing Google play integrity verification wasn't on my bingo card

Today, the team at v12 released a video showing a PoC of Universal Account Takeover affecting Firefox Focus of iOS version.

The PoC were released because it is been almost a year the vuln reported, but it is not patched yet.

The video below is demonstration of the vulnerability. We can see that,your X, Google, Reddit, can be taken over only in one click of a link.

Vulnerability explanation and the partly PoC can be seen here:
https://github.com/v12-security/pocs/tree/main/firefox

@firefox

#cybersecurity #infosec #0day #firefox

#firefox @firefox
Desinstalaré Firefox de Xubuntu. Volví a usarlo luego de años y me decepcionó. Pasé horas configurando tres perfiles. Luego, no sé cómo, los escondió. En la "Ayuda" todo en inglés. Usé un Chatbot de IA para ayuda y sólo así entendí (más o menos) algunas cosas porque en la "Ayuda" de Firefox es un desastre.

Bye, bye Firefox.

cross-posted from: https://piefed.social/c/firefox/p/2092438/the-fifa-countdown-is-just-phase-1-mozilla-working-on-full-fledged-sports-widget

Spotted on Mozilla's bug tracker:

[meta] Homepage Sports Widget

Where it turns out the countdown widget was part of a broader plan to add a different permanent widget:

• "Phase 1: Countdown"
• "Phase 2: Follow a team and View Schedule"

Web calls will apparently be providing

• SportsMatch
• SportsTeam
• MatchStatus
• TournamentPhase

You can also expect a popup on the Desktop that advertises World Cup wallpapers.

The Phase 1 wallpapers and widget remind me of 2017 when they rolled out the creepiest experiment possible and then apologized with language that would be at home today:

"Although we always have the best intentions, not everything that we try works as we want," said Jascha Kaykas-Wolff, Mozilla's chief marketing officer... "This was not a paid promotion but rather a collaboration that was intended to be fun."

I switched from Zen back to Firefox because of bugs and forced features like window sync which many users including myself don't want. I really miss having the entire UI on the side, I really don't care about Zen's other features.

Web Serial in Firefox 151 helps makers connect, code and control Adafruit hardware projects directly in the browser.

- I periodically have thoughts about the challenges of sustainably developing #opensource software.

Ever since university days I have been very much aware of the limitations of accountablity in #Trusts such as #Mozilla - They are accountable only to their Trustees and without a democractic process of appointing Trustees its difficult for community members to hold them accountable to their stakeholders. They can go off on their own personal agendas or be captured by those that offer the most funding to the organiation.

For this reason I have though that it might make sense to create a coop out of users of open source software that adheres to some democractic princples that mean that contributors retain the ability to influence open source projects.

A #coop that gives voting rights to members to shape where resources collected are funneled would mean that their wants would be taken into account in where paid development is focused.

To avoid undue influence such a group would need to:

Only allow natural people (rather than legal entities such as companies and other trusts and charities) to join and fund their activities.

Impose some level of minimum and maximum contribution (or limit decision making to a one person, one vote basis)

I wonder whether templates for #coops of this type would encourage more to forum and encourage those who want to contribute to opensource development to do so knowing that their voices and opinions wouldn't be lost as successful projects attract other funding sources.

Take a look at these alternative browsers to Google Chrome & let us know which is your favorite! 🌐 🔐

If you're looking for a new browser find out more 👉 https://tuta.com/blog/best-private-browsers

@firefox @duckduckgo @puffin @Waterfox @ecosia @palemoon @zenbrowser @mullvadnet @torproject @Waterfox @Freenet @librewolf

Using FF 150.0 on Nobara Linux, google maps gives me wildly outdated satellite imagery. Chromium/Chrome seems up to date. Is there a way to force google to display the latest and greatest?

Example: Tyler Perry's insane mansion outside Atlanta.

FF

Chromium

https://www.google.com/maps/@33.7313934,-84.6414247,325m (If you want to have a look around...)

Edit: formatting

Author of this issue from April 2025 says:

Since the repository wasn't updated in about 5 years, I suppose that the extension is no longer open source, correct? But since I still see new releases on the Chrome/Firefox stores, can we just have this GitHub repository [archived] then?

The tracking protection list is regularly updated so it's possible new releases on stores are a result of building the code with the newer list I suppose. Does anyone know for sure? There have been no comments on that issue.

Is anyone elses firefox freezing up since 150?

Seems to be both linux and windows for me, with my windows version being on my work pc with only like 2 addons, lastpass and ublock

A fun pixel cat that roams around your YouTube screen with 10 unique animations idle, walking, running, jumping, attacking, grooming, sleeping, and more!

@firefox

Quick Calculator & Unit Converter — Firefox sidebar extension

Right-click any page → instant calculator and unit converter in your sidebar. No new tab required.

Supports: area, data, energy, length, mass, speed, temperature, time, volume

https://addons.mozilla.org/en-US/firefox/addon/quick-calculator-unit-converte/

@firefox

Looking for a clean Firefox new tab? Weather & Clock Dashboard shows:
→ Live weather + 3-day forecast
→ World clocks for any city
→ Minimal search bar
→ Dark/light mode

No account, no tracking, MIT open source.
https://addons.mozilla.org/en-US/firefox/addon/weather-clock-dashboard/

Mozilla's AI Shake to Summarize is announcing itself via a blue dot in the menu and a pop-up when you visit articles. Neither the popup, the confirmation dialog, nor the new menu item mention AI.

Konform Browser is a web browser with the goal of promoting user freedom and access to the rights of security, privacy and anonymity. It is intended as a general-purpose browser fit both for daily online browsing as well as targeted deployments in secure or untrusted environments. Has stronger security with hardened defaults, better privacy and fingerprint protection while keeping user in control.

About^1^

Source

Release notes^1^

AI/LLM policies: 1 2

^1^: See here for answer to "Differences to Librewolf?"

cross-posted from: https://lemmy.world/post/46357880

cross-posted from: https://lemmy.world/post/46357879

I’ve been working on revamping FirefoxCSS-Store, and I’d like to share with you the new website where you can link to your themes and discover new ones more easily.

If you have any suggestions or spot any bugs, please don’t hesitate to open an issue https://firefoxcss-store.github.io/

#TorVPN
"Built on #Arti: #Tor #VPN uses Tor's next-generation Rust implementation. That means safer memory handling, #modern #code architecture, and a stronger security foundation than legacy C-Tor tools." https://f-droid.org/en/packages/org.torproject.vpn/ (onion available)
http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/

No need to figure out how to bind a client (app) to http-connect (not socks) port 9150. Just look for the Full Device VPN key symbol (Google's thing they can toggle remotely at airports)! Except for Firefox, you are relying on the Full-Device vpn lock. There is no option like that on mobile as on Linux. Few #Android applications allow variable changes like the #firefox mobile config.

[Even though http-connect is not socks, in actual practice the bind works with the config below which will remain true even if Full Device VPN and Block Connections without are toggled remotely

*** tricky part here, no solution ***
network.proxy.socks
127.0.0.1
network.proxy.socks_port
9150
uri/trr --> cloudflare-dns.com
fallback https to false for .onion]

http://eweiibe6tdjsdprb4px6rqrzzcsi22m4koia44kc5pcjr7nec2rlxyad.onion/tpo/core/arti/-/work/_items/2409
https://spec.torproject.org/http-connect.html
@firefox
@torproject

Nice large team photo at "about"
https://donate.torproject.org/

#RustOnMobile #rustlang #notStalePKG #rust #donate #LinuxOnMobile #smartphone #Mobile #phone #telephony #refactoring #tech #technews #news
@linmob @rustaceans

I didn't keep the .XPI file, unfortunately. Is it possible from a phone's file structure to export or even build this from(/out of?) a currently installed add-on that can no longer be (easily) downloaded?

Disclaimer: I don't know if this has any meaningful security effects. Read the replies below to check what people are saying/recommending before doing this if you're unsure. I haven't personally had any issues [that I know of] since doing this last year.

You might have noticed that when you browse Mozilla sites (e.g. the Firefox add-ons site) your installed add-ons don't seem to work. This is annoying as hell, especially if you have accessibility needs that are met by an add-on. But there's a way to prevent this from happening:

1. Type about:config into your browser address bar (might have to accept a warning message if it's your first time)
2. In the search bar of the about:config page, type/paste privacy.resistFingerprinting.block_mozAddonManager and set it to True
3. Type/paste extensions.webextensions.restrictedDomains into the search bar this time, and edit the entry to remove any websites on which you would like to have your add-ons work (I just removed 'em all)

To test drive this I needed to apply some configuration tweaks, but the built-in ad blocker seems to just work. I tried it out on YouTube and a few other sites, and I haven't seen so much as a hitch.

Here's a look at the configuration screen, which currently resides at the top of Settings > Privacy:

Ads from the default search provider are enabled (per their request), but disabling them is pretty straightforward. Other functionality, like toggling the default filter lists (12 are enabled by default) or adding your own are accessible via buttons.

Lists enabled by default:

• Default
  • EasyList
  • EasyPrivacy
  • uBO Filters
  • uBO quick-fixes
  • uBO unbreak
• Privacy
  • AdGuard Tracking Protection
  • Peter Lowe's Ad and Tracking Server List
  • uBO Badware
  • uBO Privacy
  • uBO Resource Abuse
• Annoyances
  • EasyCookie
  • uBO annoyances-cookies

Other available lists:

• Fanboy's Annoyances
• Fanboy's Anti-Chat
• Fanboy's Anti-Newsletter
• Fanboy's Mobile Notifications
• Fanboy's Social
• 34 more Regional lists

I'm thinking of doing a thing, and was hoping for some feedback (and maybe it'll change my mind):

1. How do you define bloat in a browser?
2. What are some examples of it, and what browsers have it?

So far I'm thinking bloat includes...

• Extra software that typically is standalone, like an email client or RSS reader
• Things that are not widely wanted in a browser, and could be extensions, like an AI toolbar or a cryptocurrency wallet
• Advertisements built directly into the browser

Are PDF readers bloat?
How about LibreWolf's uBlock Origin?
And why/why not?
I've got some of my own reasoning in the list above, but I'm interested in others' thoughts.

cross-posted from: https://sopuli.xyz/post/44678605

Not sure if this is a GOS or Firefox issue.

Go to qwant.com, type something, backspace doesn't work. Same result with duckduckgo.

Using GrapheneOS, built-in keyboard, Firefox 150. Tried with and without ublock origin.

I think it has been a week or so since it started.

Anyone else got this issue?

Sorry if it's the wrong place to ask.

And thanks to the GOS devs, you have saved me from so many frustrations.

Edit: so far two people in comments seem to have similar problems so it's not just me.