Tootfinder

For a brief moment in maybe 2007 we had exactly the right amount of complexity and balance between frameworks and browsers when developing web apps

Check out today's Metacurity to stay up-to-date on the critical infosec developments you should know, including
--The interim head of CISA uploaded sensitive documents to ChatGPT,
--Koreans to be notified of possible data breaches,
--Operations at Russian security systems outfit were disrupted by a cyberattack,
--EU-India security deal omits hackers-for-hire,
--Threat actors exploit a high-severity vulnerability in WinRAR,
--Mustang Panda can steal logi…

The interim head of CISA uploaded sensitive documents to ChatGPT
Koreans to be notified of possible data breaches, Operations at Russian security systems outfit were disrupted by a cyberattack, EU-India security deal omits hackers-for-hire, Threat actors exploit a high-severity vulnerability in WinRAR, Mustang Panda can steal login data from browsers, much more

~The Claude Desktop App installs its browser extension into 7 different browsers without consent automatically. This is very much not cool.~
Edit: I misread the article, and this is not what is happening. Instead, these files that are installed allow for easier installing of the actual browser extensions, which is much less evil. No browser extensions are automatically installed. Thanks to @…

Anthropic secretly installs spyware when you install Claude Desktop — That Privacy Guy!
Anthropic's Claude Desktop silently installs a Native Messaging bridge into seven Chromium browsers, including browsers Anthropic's own documentation says it does not support, and browsers the user has not even installed.

Can confirm this for Arc, Brave, Edge, Chromium, and Vivaldi on my machine:
#Anthropic secretly installs spyware when you install Claude Desktop
https://www.thatprivacyguy.com/blog/anthro

Anthropic secretly installs spyware when you install Claude Desktop — That Privacy Guy!
Anthropic's Claude Desktop silently installs a Native Messaging bridge into seven Chromium browsers, including browsers Anthropic's own documentation says it does not support, and browsers the user has not even installed.

Ik heb een extensie voor de browsers Chrome en Firefox gemaakt waarmee je op een computer met 1 klik een nieuwsartikel zonder paywall kunt lezen via archive.vn.
Voor Chrome kun je hem downloaden en zelf installeren, voor Firefox kun je hem selecteren uit de beschikbare extensies.
#archiveThisLink #ArchiveVN

Google verkürzt Versionszyklus des Chrome-Browsers von vier auf zwei Wochen
Ab September wird Googles Webbrowser zweiwöchentlich neue Versionen erhalten. Chrome soll damit schneller Leistungsverbesserungen und neue Funktionen bekommen.

Using the Browser’s <canvas> for Data Compression
When building static websites and Single-Page Applications (SPAs), we sometimes need functionality in JavaScript front ends—such as compression—that is usually handled on the back end instead. […]
🔄 https://jstrieb.github.io/posts/canvas

oh… well, Claude’s desktop app preemptively configures any current and future local browsers to allowlist these extensions just in case you might use them some day: https://www.thatprivacyguy.com/blog/anthropic-spyware/

RE: https://infosec.exchange/@hacks4pancakes/116117950930554437
No app that I use personally has inflicted any LLM on me.
iTerm added an optional plugin. Whatever.
Half of the dozen-ish browsers I have installed have some LLM garbage ,…

I believe this is even more true for accessibility, especially given accessibility is explicitly about humans (no matter how much shitty LLM-first browsers misrepresent it):
“The importance of people who care”
https://rachelandrew.co.uk/archives/2026/04…

„Irreführende Praxis“: Google bestraft „Back-Button-Hijacking“ als Spam
Google geht künftig gegen Webseiten vor, die den Zurück-Button des Browsers manipulieren. Ab Mitte Juni drohen Betreibern manuelle Spam-Maßnahmen.

The `aria-description` attribute still won’t auto-translate in browsers (except Firefox in some cases):
https://adrianroselli.com/2025/01/aria-description-does-not-translate.html#Update02
The bugs I filed with Chrome, Safari, and Firefox ha…

Baking in overrides on certain flatpak apps in bog so I can get past the frequent need to manually check permissions for Chromium browsers so they can generate PWAs without hassle of using the terminal, fun thing is this does require me to basically make the same file with like 6 different names lol

The year is 2032, and web browsers no longer have scroll bars because they literally no longer tell you long the content is because 50% of the scroll distance is… related content and chum boxes.

Hmm… what are the latest versions of various desktop browsers? 🤔
Let me check the way I always do
$ finger browserversion@happynetbox.com

Introducing Just the Browser https://blog.corbin.io/post/805641962529177600/introducing-just-the-browser

Introducing Just the Browser
Modern web browsers are increasingly focused on features beyond the core browsing experience, many of which just end up as distractions. Chrome gives you coupon codes while shopping. Microsoft Edge...

LinkedIn secretly scans for 6,000 Chrome extensions, collects data.
https://www.bleepingcomputer.com/news/security/linkedin-secretly-scans-for-6-000-plus-chrome-extensions-collects-data/

LinkedIn secretly scans for 6,000+ Chrome extensions, collects data
A new report dubbed "BrowserGate" warns that Microsoft's LinkedIn is using hidden JavaScript scripts on its website to scan visitors' browsers for installed extensions and collect device data.

Suggestions please!
I need an app to manage around 8 accounts spread over Masto, Bsky and X.
Is there an open source good one? I don't need scheduling, just the ability to have each account in its own column (or some similar solution) and be able to switch between them without having 6-7 browsers open on the desktop.

Spent the day figuring out how to create macOS "web apps" from the command line (like old-school Fluid site-specific browsers, SSBs - accessed via the "Add to Dock" button in Safari.)
Here, have my shat-out half-AI-written script for this, since I couldn't find anybody else having done this after scouring the internet high and low:

System/Scripts/create-safari-webapp.swift at main · ELLIOTTCABLE/System
dotfiles, handy scripts, and new-system configuration stuff - ELLIOTTCABLE/System

4 browsers getest op:
https://coveryourtracks.eff.org/
De resultaten
1 DuckDuckGo
2 Brave
3 Firefox (uBlock melding)
4 Vivaldi
(Via @… )

Me: I'm having a problem with your website. Here's full debugging information from developer tools in three browsers, a curl request showing all headers and content, and the URLs and error text.
Them: Can you send us a screenshot?

@… FYI
rxappdev/RememberWindowPositions: Remember window positions for apps in KDE Plasma 6 . Especially useful for multi-window applications such as browsers. — <https://

🚫 No analytics, no telemetry, zero web requests on first launch. The browser itself has no ads or trackers — unlike Chrome, Edge or Brave.
⚡ Built on #Chromium for maximum speed & efficiency. Removes all bloat — one of the lightest modern browsers available. Doesn't slow down over time.
🖥️ Split view: open pages side-by-side. Quick link copy ⌘ Shift C. Install any web app…

Guten Morgen,
heute ist Lesetag, denn ich habe Zeit und vor allem Lust, mal wieder alle Lesezeichen meines Browsers zu checken und nachzusehen, wo es neue Infos gibt und welche Lesezeichen ich schrotten darf. Danach gibts eine Sicherung und gut.
Sonst wird glaub ich nichts aufregendes geschehen. ;-)
Schönen Donnerstag :coffeepot: 🙂

The TC39 Temporal proposal is coming along. It’s meant to replace JavaScript’s date API:
https://www.igalia.com/2026/03/13/Temporal-Reaches-Stage-4.html
Jason Williams’ talk about this at State of the Browser is now online:

Temporal Reaches Stage 4 | Igalia
Igalia is an open source consulting firm specialised in the development of innovative projects and solutions. Our engineers have expertise in a wide range of technological areas, including browsers and client-side web technologies, graphics pipeline, compilers and virtual machines. We have the most WPE, WebKit, Chromium/Blink and Firefox expertise found in the consulting business, including many reviewers and committers. Igalia designs, develops, customises and optimises GNU/Linux-based solutio…

RE: https://mastodon.social/@fediversereport/116178002926045553
This made me realise I use nothing but Share to Mastodon with my desktop browsers

Baking in overrides on certain flatpak apps in bog so I can get past the frequent need to manually check permissions for Chromium browsers so they can generate PWAs without hassle of using the terminal, fun thing is this does require me to basically make the same file with like 6 different names lol

Threats Against Routers
"The FBI, NSA, and co-sealing agencies encourage SOHO router users to change default usernames and passwords, disable remote management interfaces from the Internet, update to latest firmware versions, and upgrade end-of-support devices. Users should also carefully consider certificate warnings in web browsers and email clients."

Ok, something other than politics for a minute. Browsers.
I started daily driving Gnome Web around the time the new Mozilla CEO announced the AI-heavy focus for the company going forward. I'm not having any problems with WebKit as a rendering engine, but I think the interface leaves a bit to be desired for my uses. Here's my complaints.
- The interface takes up too much screen real estate on small laptop screens
- Bookmarks are currently not even working for me
…

He visto esta comparativa de navegadores y me parece sublime https://lemmy.sdf.org/post/30262814

Found by Nick Bromley on the A11y Slack:
“In browse mode in web browsers, NVDA no longer treats controls with 0 width or height as invisible. This may make it possible to access previously inaccessible ‘screen reader only’ content on some websites.”
https://www.nvaccess.org/post/in-process-1

One thing which is annoying about Vivaldi and also Firefox and presumably also all the other Android web browsers is the way the "Add To Homescreen" button works on pages like Mastodon which are Progressive Web Apps.
If you add the shortcut to the homescreen then it opens as a WPA which means the browser stuff is all gone and hidden. No back button. No way to bookmark. No way to launch a link in a new browser window etc.
Ought to be two separate buttons for "Add a link to the homepage" vs "Add this app as an app to the homepage" but there isn't.
You can get around this by turning on airplane mode and adding a link to the error page to the homescreeen, which then works as a link to the website in the browser, not a WPA app, when you're online again.
I did this to the links I use with Vivaldi before I realized it's proprietary and so will not do.
Trying to rebuild them as Firefox links again and sadly something is broken now. Won't add the error page. Tells me the pixel launcher is crashing.
So I can't have the old web bookmark links to pages in WPA apps. Boo. 😦