Tootfinder

dear fedi, i need some help, i remember reading somewhere that #JIT #vulns are dominating the attacks on #browsers, but i cannot find where i read it. if anyone has pointers to

RE: https://mastodon.social/@imemeit_bot/117100891070617067
10 points to anyone who knows which company that owns one of those other browsers gives Mozilla half a billion dollars a year and is the reason Mozilla still exists.

DuckDuckGo-Browser blockiert jetzt YouTube-Werbung
Nervige Unterbrechungen sind mit der neuen Version des Browsers Geschichte, verspricht DuckDuckGo. Das Feature nutzt bekannte Komponenten.
https://www.

DuckDuckGo-Browser blockiert jetzt YouTube-Werbung
Nervige Unterbrechungen sind mit der neuen Version des Browsers Geschichte, verspricht DuckDuckGo. Das Feature nutzt bekannte Komponenten.

I still don't understand why you'd want an AI web browser. https://thenextweb.com/news/bioshocking-ai-browser-credential-leak-layerx

Yeah, good luck with that for Safari users...
These are the top and bottom parts of 2 loads of that page a few seconds apart. Not private windows, no browser restart or other trickery. It can’t even settle on a CPU or screen size in the same load. It is apparently using 2 different sources for CPU type and for screen dimensions. I have not told Safari to claim that it is on Intel, that appears to be an Apple choice.

Cloudflare partners with Google, Microsoft, and Mozilla on PACT, a protocol to distinguish legitimate human or bot traffic from undesirable network requests (Thomas Claburn/The Register)
https://www.theregister.com/software…

Cloudflare teams up with big browsers to help websites tell welcome from unwelcome visitors
Makers of Chrome, Edge, Firefox back bot-fraud defense called Private Access Control Tokens

➡️ rip.so :: the digital graveyard
#bookmarks

The more I think about it, and the more I compare the new #Commodore phone to the available alternatives, the more I like the majority of the choices they have made. It’s just a shame that the blacklisting of browsers is an absolute and utter dealbreaker. Doing a web search and messaging are two non-negotiable features for my phone.

@… @… All the major Chromium browsers had issued an update before this toot. 152.0.7977.76 is old (not particularly old I will grant you but also not the latest).
Chrome 152.0.7977.82/83 released with a fix for this on t…

That time of the week again!
Four updates this week (the browsers and fresh-editor) and one announcement:
Per the 1st of September I'll stop making the Vivaldi package. There's an excellent SlackBuild for that available, made by Ruarí Ødegaard, one of the actual maintainers of Vivaldi.
No better than that, and I prefer laziness over double efforts 😆
While it's still available as a slackosundry get it over here:

«Ladybird-Browser stoppt öffentliche Code-Beiträge:
Wegen KI-generierter Beiträge schließt das Open-Source-Projekt Ladybird seine öffentlichen Pull-Requests, um die Sicherheit des Browsers zu garantieren.»
Da sehen wir wie KI das Gegenteil von sicherer Produktion ist, wenn es blind als unstrukturiertes Pull-Request eingesetzt wird.
🌐

Ladybird-Browser stoppt öffentliche Code-Beiträge
Wegen KI-generierter Beiträge schließt das Open-Source-Projekt Ladybird seine öffentlichen Pull-Requests, um die Sicherheit des Browsers zu garantieren.

It‘s been already a month since support for Web Serial came to Firefox and other browsers based on it.
https://hacks.mozilla.org/2026/05/web-serial-support-in-firefox/
It‘s one of these things where you first don’t know when you‘ll need it, but then you‘re g…

Announcing Web Serial Support in Firefox – Mozilla Hacks - the Web developer blog
Support for Web Serial in Firefox 151 for Desktop Firefox can now connect directly to microcontrollers, development boards, 3D printers, power meters, and other serial-connected hardware from the web. Starting ...

🤖 #BrowserAct is an open-source browser automation CLI built for #AIagents — real browsers, anti-bot bypass and human handoff when the agent gets stuck #opensource

Hmm totally not aware that FLAC has computed Baseline status since September 2019 😮 #WebDev #FLAC

TIL¹: UTF-8 basically came from² Plan 9.
__
¹https://mastodon.well.com/@rk/117190782591698760
²https://…

RE: https://infosec.exchange/@briankrebs/117237947557448688
You should have to click a popup window warning for any web page that wants to allocate more than like 600MB of memory. Browsers should be protecting (and notifying!) users of shitty bloated w…

Aus Gründen gerade mal wegen aktuellen Headles Browsers geguckt. Dabei den Eindruck bekommen, dass es beinah der aufschlussreichere Suchbegriff für Botprobleme ist, als eben "bot irgendwas". Tausend Tipps und Tricks, wie das Scrapen doch klappt.
#Momentaufnahme

RE: https://mastodon.social/@firefoxwebdevs/116992048337520434
I appreciate this both acknowledges the error and credits the resources. Something I’d like to see more of from browsers (looks askance at Chrome).
Key takeaways:
• `aria-labe…

"You have to ask us permission to use an app" is a fucking wild selling point.
The only way I'd consider buying one of these "Commodore" phones is if there's a nanny unlock available. It's my fucking phone. The last person I'm gonna ask for permission is some random Internet jackass.

This is why I still use Firefox- especially for YouTube, as the YouTube app is trash. I do all my YouTube browsing in Firefox.
Firefox now the last major browser that still supports uBlock Origin https://www.pcworld.com/article/3212428/fi

Firefox is now the last major browser that still supports uBlock Origin
Firefox says it will keep supporting uBlock Origin even as Microsoft Edge and other Chromium browsers phase it out under Manifest V3.

RE: https://infosec.exchange/@dannyjpalmer/116975079605921576
"Disabling web proxy auto-discovery (WPAD) where not required"
Why is wpad even still supported by browsers?!? A 30-year-old mechanism, expired I-D almost as old, and the u…

RE: https://hachyderm.io/@thomasfuchs/117060584641986816
Anyway, Periodic reminder that Chrome is bad software. It's a personal data collector cosplaying as a web browser.
Use other browsers, my personal recommendations are Safari (if you're on a Mac) and Vivaldi (works anywhere).
If you want something truly open source, there's multiple derivatives of Firefox with bad stuff stripped.
Orion is worth a look too (no Windows version yet), I think it's the only WebKit-based browser that runs on Linux. Also, in the future we might see browsers based on Servo (a newer open source browser rendering engine).
The gist is—there’s plenty of alternatives.
P.S. If you suggest Brave—which is run by a homophobe with Peter Thiel money—I will block you.

For only $299.99 once I will add you to my Google account as a child and restrict your access to social media and browsers. The advantage to this over the Commodore Callback is that you can upgrade your phone whenever you like, and the restrictions will persist. If it helps sway you, I can also make SID noises at you and possibly whisper the word "Commodore" in your ear if you ask nicely.

That's fun. "Secure" dns in browsers (at least, firefox and chrome/chromium) relies on doing an initial dns lookup of mozilla.cloudflare-dns.com or chrome.cloudflare-dns.com (or whichever DoH provider you've chosen).
If I control the router/wifi, I can blacklist the DoH provider domains. Depending on how your browser's configured, it may just fall back to normal dns (at which point the router/wifi sees & answers your dns queries).
Relevant errors give no…

Any weirdos out there who open local images and videos in their web browsers like me? I've always been confused by the idea of image viewer apps being a thing.

RE: https://mastodon.social/@Tutanota/117223765496863185
Interessant overzicht van alternatieve browsers.
Zelf gebruik ik er 2 (mobiel):
DDG als systeem standaard (waar dus alle apps naartoe openen) en Brave voor het dagelijks browsen. (Oa Mastodon enzo)
DDG heeft op mobiel het voordeel dat het trackers kan blokkeren die bij apps actief zijn.
Als zoekmachine heb ik bij beiden ingesteld als alternatieve zoekmachine:
https://noai.duckduckgo.com/search?q=%s

Today's Metacurity, which kicks off with an exclusive report, is probably the most information-packed issue we've ever issued, rounding up the critical infosec developments you should know, including
--US Coast Guard is probing a cyberattack that disrupted North Carolina ports,
--Meta undercuts AI coding rivals on price,
--Meta AI model breaches test containment,
--OpenAI agents built a secret message board,
--Snowflake hacker pleads guilty,
--Researchers crack AI browsers,
--Ransom Cartel mastermind gets 16 years,
--Chinese spyware goes commercial,
--Researcher says DPRK hackers hit 1,600 organizations,
--Chinese routers ship with hidden backdoor,
--China targets Palo Alto Networks,
--Wall Street hit by vishing campaign,
--Water system hacks follow years of warnings,
--Microsoft stops ransomware in 128 seconds,
--Apple privacy feature leaks IP addresses,
--DHS seeks protest Signal chats,
--VPN supply chain attack tied to China,
--CEVA hack ripples across retailers,
--Australian telehealth provider discloses breach,
--Żabka blames contractor account for breach,
--Swiss government hit in SharePoint attack,
--Meta ran AI-generated CSAM ads,
--Bugtraq is back, baby,
--Tim Walz doesn't play,
--Someone stole all the Flock cameras,
--No more pervert glasses.
--TikTok cuts the moderators it needs most
https://www.metacurity.com/us-coast-guard-is-probing-a-cyberattack-that-disrupted-north-carolina-ports/

(SmallTalk legacy cont:) It gave us message passing and late binding, which form the logical backbone of the entire Internet. That idea developed in many places, yes, but SmallTalk was a nexus for it.
The fact the web sites and browsers can be updated independently of each other? that you can visit web sites that didn’t even •exist• when you downloaded your browser? That’s sender-receiver decoupling at work: the Internet is built on messages, and senders and receivers can change independently as long as the message protocol stays intact.
In a far-removed but very real sense, that’s part of SmallTalk’s legacy too!
3/

RE: https://hachyderm.io/@thomasfuchs/117060606550851463
Honestly it's nice to once again have a relatively broad choice of browsers.
At least on Mac and Linux you even get 3 different major browser engines to choose from.