https://www.w3.org/2020/06/machine-learning-workshop/talks/privacy_focused_machine_translation_in_firefox.html

#Mozilla #Firefox #translation #machine #privacy

Firefox Nightly for Android to get full add-ons support

The Nightly version of the new Firefox web browser for Google's Android operating system will soon get full add-ons support according to a post by Mozilla's Add-ons Community Manager Caitlin Neiman on the official Mozilla Add-ons blog.

Mozilla launched a completely redesigned version of Firefox for Android in July 2020. The browser replaced the underlying engine with a Mozilla's new mobile browser engine GeckoView to improve web compatibility and performance of the browser.

Firefox users were migrated to the new version automatically, provided that the automatic update function was not disabled. One of the main issues that some users experienced after the upgrade was that add-ons support was limited.

The new Firefox supported nine extensions, and not the thousands of extensions that were supported by the previous versions. While these were the most popular based on user installs, it meant that Firefox users noticed that all other extensions were disabled and could not be used anymore.

Mozilla did promise to bring full add-ons support to Firefox, and it appears that a first step is being made soon in that regard.

https://www.ghacks.net/2020/09/03/firefox-nightly-for-android-to-get-full-add-ons-support/

#Mozilla #Firefox #Nightly #addons

Exploitation of LAN vulnerability found in Firefox for Android (PoC)

I tested this PoC exploit on 3 devices on same wifi, it worked pretty well.

I was able to open custom URL on every smartphone using vulnerable Firefox (68.11.0 and below)

👀 👉🏼 https://twitter.com/LukasStefanko/status/1307013106615418883

👀 👉🏼 Firefox for Android LAN-Based Intent Triggering:
https://gitlab.com/gitlab-com/gl-security/security-operations/gl-redteam/red-team-tech-notes/-/tree/master/firefox-android-2020

#android #security #exploit #firefox #LAN #vulnerability #poc
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag

Firefox usage is down 85% despite Mozilla's top exec pay going up 400%

Mozilla is in an absolute state: high overheads, falling usage of Firefox, questionable sources of revenue and now making big cuts to engineering as their income falls.

Mozilla recently announced that they would be dismissing 250 people. That's a quarter of their workforce so there are some deep cuts to their work too. The victims include: the MDN docs (those are the web standards docs everyone likes better than w3schools), the Rust compiler and even some cuts to Firefox development. Like most people I want to see Mozilla do well but those three projects comprise pretty much what I think of as the whole point of Mozilla, so this news is a a big let down.

The stated reason for the cuts is falling income. Mozilla largely relies on "royalties" for funding. In return for payment, Mozilla allows big technology companies to choose the default search engine in Firefox - the technology companies are ultimately paying to increase the number of searches Firefox users make with them. Mozilla haven't been particularly transparent about why these royalties are being reduced, except to blame the corona-virus.

I'm sure the coronavirus is not a great help but I suspect the bigger problem is that Firefox's market share is now a tiny fraction of its previous size and so the royalties will be smaller too - fewer users, so fewer searches and therefore less money for Mozilla.

👀 👉🏼 http://calpaterson.com/mozilla.html

#mozilla #firefox #browser #numbers #thinkabout
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag

Welcome a new Fennec F-Droid

https://forum.f-droid.org/t/welcome-a-new-fennec-f-droid/11113
By relan F-Droid Contributor
10 days ago

I have just submitted 300 a Fennec update to 81.1.1. Should be available soon™. This version brings a lot of changes, like a new UI and modular codebase. The bad news:

Mozilla now tracks you even more actively using proprietary 3rd party services. I removed all tracking I found. (Firebase, Adjust and Leanplum libraries were replaced with stubs, so some analyzers can erroneously report their presence in the APK.)

The new UI may break your habits and disappoint you. (IMHO it’s not that bad as one can conclude from reading r/Firefox.)

Android 5.0 or later is now required. Mozilla decided so.

x86 devices are not supported anymore. I stumbled upon linkage errors and gave up. Help is welcome.

The good news is that Fennec F-Droid is alive and continues to be truly free software.


#fennec #ff #firefox #fdroid

Google Safebrowsing can no longer be disabled on mobile Firefox

I am reposting this because I was shadowbanned from Reddit with no reason given by their Anti-Evil Operations Team for several days which means nobody saw this even after it was restored:

[No way to disable Phishing and Malware Protection for users who are suspicious of Google and leaking browsing history to Google.](https://github.com/mozilla-mobile/fenix/issues/14163)

Relevant content on the failure of anonymization:

[How safebrowsing fails to protect privacy](https://blog.trailofbits.com/2019/10/30/how-safe-browsing-fails-to-protect-user-privacy/)

[A Privacy Analysis of Google and Yandex Safe Browsing](https://hal.inria.fr/hal-01120186v4/document)

> Our experimental analysis estimates the rate of such collisions and shows that hashing and truncation fails to prevent re-identification when a user visits small-sized domains or certain URLs of larger domains. We further materialize this in the form of an algorithm that Google and Yandex could potentially employ to track users. We conclude this work by providing an analysis of the databases of Google and Yandex (Section 7). By crawling their databases, we detect a number of “suspicious” prefixes that we call orphans. Orphans trigger communication with the servers, but no full digest corresponds to them. We also observe several URLs which have multiples prefixes included in the blacklists. These provide concrete examples of URLs and domains that can be easily tracked by Google and Yandex.

https://github.com/mozilla-mobile/fenix/issues/14163#issuecomment-680291892

> Does it have the potential of sending full URL-s to Google? Yes, it does. From the page given by you:
"Otherwise, send the binary file's metadata to the remote application reputation server (browser.safebrowsing.downloads.remote.url) and block the download if the server indicates that the file isn't safe."
with the link on "metadata" leading to parts of code where there is setting in request properties of origin URL. If I read code correctly - https://dxr.mozilla.org/mozilla-central/source/toolkit/components/reputationservice/ApplicationReputation.cpp#1306 - it is stripped from query params, but full hostname + path ARE included in this case.

https://forum.f-droid.org/t/google-safebrowsing-can-no-longer-be-disabled-on-mobile-firefox/11224

https://redd.it/j5i8h1
@r_privacy

#ff #firefox #Google

Choose your browser carefully

Privacy on the Internet is important because privacy risks range from the gathering of statistics on users to more malicious acts such as the spreading of spyware and the exploitation of various forms of bugs (software faults). Many companies, such as Google, track which websites people visit and then use the information, for instance by sending advertising based on one's web browsing history. Sometimes prices on products are changed on the same website, depending on tracking information, and two people may view the exact same product on the exact same website yet be presented with very different prices.

Information 2020-10-20: This article was originally called "Mozilla is becoming evil - be careful with Firefox" and it was mainly about Firefox, but since this issue is so important and is also very relevant to other browsers, such as Google Chrome, Google Chromium (the Open Source version of Chrome) and Brave, I have changed the name of the article and rewritten the article with relevant information about other browsers as well.

💡 Table of contents: 💡

Mozilla Firefox
Google Chrome and Chromium
Brave
Palemoon
Waterfox
Real privacy respecting browsers
Conclusions
Appendix
Controlling Firefox
Blocking DoH via a firewall

👀 👉🏼 https://unixsheikh.com/articles/choose-your-browser-carefully.html

#firefox #chrome #palemoon #waterfox #browser #privacy #thinkabout
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag

Firefox: The Jewel^WEmbarassment of Open Source

https://drewdevault.com/2020/10/22/Firefox-the-embarassment-of-FOSS.html

Comments
https://news.ycombinator.com/item?id=24862825

#ff #firefox #Embarassment

Mull

This is a privacy oriented and deblobbed web browser based on Firefox. It enables many features upstreamed by the Tor uplift project using preferences from the arkenfox-user.js project. It is compiled from source and proprietary blobs are removed using scripts by Relan.

Source code : https://gitlab.com/divested-mobile/mull-fenix

Project website: https://divestos.org

F-Droid repo:
https://divestos.org/fdroid/official/?fingerprint=E4BE8D6ABFA4D9D4FEEF03CDDA7FF62A73FD64B75566F6DD4E5E577550BE8467


📡 @NoGoolag 📡 @Libreware
#mull #web #browser #ff #firefox #fennec

Firefox for Android makes it even easier to add new browser extensions

Although Chrome dominates the mobile browser space on Android, Mozilla’s Firefox is a decent alternative with added — but limited — support for third-party extensions that make it a potential candidate for your browsing needs.

Adding new extensions has been a bit of a pain though for a while, so Mozilla has now decided to streamline the process and make it even easier to add or find browser extensions to the Android build of Firefox. Firefox 85 is set to begin rolling out from January 25, 2021, and will include the ability for Android owners to add or install extensions to their mobile browser directly from adding.mozilla.org.

While this is great news, you will still be limited to adding “official” extensions to the Android version of Firefox. The old method of adding extensions using the Add-ons Manager is likely to be removed, as Mozilla confirmed that user confusion meant this new method is being implemented.

"Previously, extensions for mobile devices could only be installed from the Add-ons Manager, which caused some confusion for people accustomed to the desktop installation flow. We hope this update provides a smoother installation experience for mobile users."

https://9to5google.com/2021/01/21/firefox-for-android-makes-it-even-easier-to-add-new-browser-extensions/

#firefox #ff #android #browser #extensions
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag

Firefox 86 introduces 'Total Cookie Protection'

https://blog.mozilla.org/security/2021/02/23/total-cookie-protection

#ff #Firefox #cookies

Firefox and Chromium - Madaidans-Insecurities (Last edited: April 26, 2021)

Chromium is vastly more secure than Firefox. Firefox's sandboxing and exploit mitigations are much weaker than Chromium's. This article is not blindly hating on Firefox but is a factual analysis of its weaknesses.

https://madaidans-insecurities.github.io/firefox-chromium.html

#madaidan #insecurities #firefox #chromium
📡 @nogoolag 📡 @blackbox_archiv

Introducing Site Isolation in Firefox

When two major vulnerabilities known as Meltdown and Spectre were disclosed by security researchers in early 2018, Firefox promptly added security mitigations to keep you safe. Going forward, however, it was clear that with the evolving techniques of malicious actors on the web, we needed to redesign Firefox to mitigate future variations of such vulnerabilities and to keep you safe when browsing the web!

We are excited to announce that Firefox’ new Site Isolation architecture is coming together. This fundamental redesign of Firefox’ Security architecture extends current security mechanisms by creating operating system process-level boundaries for all sites loaded in Firefox for Desktop. Isolating each site into a separate operating system process makes it even harder for malicious sites to read another site’s secret or private data.

We are currently finalizing Firefox’s Site Isolation feature by allowing a subset of users to benefit from this new security architecture on our Nightly and Beta channels and plan a roll out to more of our users later this year. If you are as excited about it as we are and would like to try it out, follow these steps:

💡 To enable Site Isolation on Firefox Nightly:

1.) Navigate to about:preferences#experimental

2.) Check the “Fission (Site Isolation)” checkbox to enable.

3.) Restart Firefox.

💡 To enable Site Isolation on Firefox Beta or Release:

1.) Navigate to about:config.

2.) Set fission.autostart pref to true.

3.) Restart Firefox.

With this monumental change of secure browser design, users of Firefox Desktop benefit from protections against future variants of Spectre, resulting in an even safer browsing experience. If you aren’t a Firefox user yet, you can download the latest version here and if you want to know all the technical details about Firefox’ new security architecture, you can read it here.

https://blog.mozilla.org/security/2021/05/18/introducing-site-isolation-in-firefox/

#ff #firefox #site #isolation

postmarketOS@fosstodon.org - Grab your headphones, it's time for not just one, but TWO new #postmarketOSpodcast episodes!

Part 1:
* #AlpineConf lookback
* #MMS​
* #Lomiri​
* #PureMaps​
* #postmarketOS-tweaks

Part 2:
* @AsteroidOS​
* #PinePhone Battery/DRAM Freq
* #RetroArch
* mobile-config-#firefox​

https://cast.postmarketos.org/episode/06.1-AlpineConf-MMS-Lomiri-PureMaps-pmOStweaks/​

https://cast.postmarketos.org/episode/06.2-AsteroidOS-PinePhone-Battery-RAM-RetroArch-Firefox/​

Against Modern Browsers – https://againstmodernbrowsers.neocities.org/

Web browsers were originally designed with one purpose: reading HTML documents. The web was simple and was not owned by large corporations (most notably Google). Overtime the web has evolved and became bloated and complex. All modern browsers are either forked from #Chromium or funded by Google, giving #Google complete control over the web. An independent browser developed by a small community cannot compete with #Chrome or #Firefox.

This website covers everything wrong with the modern web, everything wrong with modern web browsers, and what should have been done to prevent this..

#Browsers #Webpages #navigateur #web

What is a Browser Security Sandbox? (Learn to Hack Firefox)

https://www.youtube.com/watch?v=StQ_6juJlZY

#sandbox #ff #firefox

Firefox shills the current thing

#ff #firefox #censorship #cancel

https://www.ghacks.net/2022/03/17/each-firefox-download-has-a-unique-identifier/

- no opt-in, only opt-out
- opt-out only after installation, when tracking already happend
- Telemetry of Firefox is worse than chrome because in Chrome it's an opt-in, while in Firefox it's an opt-out; average users won't opt-out anyway

Great work Mozilla, thats how you violate the GDPR 😁

@no_firefox

#liarfox #firefox #mozilla #telemetry

#Firefox extends its anti-tracking #cookies protection to #Android

https://archive.is/cBiHj

#Mozilla #Firefox blocks anti-Censorship and pro-Privacy extensions in Russia

https://lunduke.locals.com/post/5738970/mozilla-firefox-blocks-anti-censorship-and-pro-privacy-extensions-in-russia