Tootfinder

OpenAI launches its ChatGPT Atlas web browser, available initially for macOS (Ina Fried/Axios)
https://www.axios.com/2025/10/21/openai-atlas-new-ai-web-browser-release-date

OpenAI is launching a web browser called Atlas
The moves come as traffic from bots is expected to surpass that from humans.

»PrivateBin is a minimalist, open source online pastebin where the server has zero knowledge of stored data. Data is encrypted and decrypted in the browser using 256bit AES in Galois Counter mode«
The AES-GCM 256 encryption is a component of any popular web browser, so this tool is also easy to use safely.
🔏 https://privatebin.info

First impressions of ChatGPT Atlas, as browser agents remain confusing, with insurmountable security and privacy risks including prompt injection attacks (Simon Willison/Simon Willison's Weblog)
https://simonwillison.net/2025/Oct/21/introducing-chatgpt-atlas/

Introducing ChatGPT Atlas
Last year OpenAI hired Chrome engineer Darin Fisher, which sparked speculation they might have their own browser in the pipeline. Today it arrived. ChatGPT Atlas is a Mac-only web browser …

Tip: When you use DuckDuckGo's web browser you can generate a free email address that forwards to an email address of your choice but also removes trackers along the way. Handy for subscriptions and "giveaways".

For each email you get a report on what trackers were removed.

https://duckduckgo.com/email

@… You certainly can run Signal and Proton Mail, web browsing, and VPN on Linux. Don't know about PlexAmp, Prologue, and Libby (I am skeptical about Libby, unless it can be done thru a browser). I have Linux Mint on an old Surface Pro, which can function as a tablet.

Google Home erhält erweiterte Web-App und aufgebohrte Automationen
Google hat die Web-App für die Smart-Home-Steuerung aufgebohrt. Erste Nutzer können diverse Funktionen im Browser steuern. Auch gibt es neue Automationen.

The main reasons for me to use Safari on macOS despite being behind on web standards is integration with its iOS siblings and performance.
However: bookmark sync is unreliable and relatedly reading list is so janky too that I switched to GoodLinks. And somehow the UI gets increasingly sluggish until I restart it like an old Windows system.
I guess it's time for an experiment.

New project post: AnotterKiosk
AnotterKiosk is another full-page web-browser OS for Pi's and other PCs, displays a webpage in full screen 24/7.
It has support for multi-touch input, a watchdog/heartbeat feature, local webserver, fully read-only root FS (won't kill SD cards, ever!), manual EDID overrides, configurable caching, reverse SSH tunnel support...
Can be used for signs, conference info screens, dashboards, home automation, etc.

Welp. Upgraded to firefox 140 (esr) and am now experiencing the dreaded cpu usage. Fucking web browser tripping over themselves with AI..

Coming soon (likely this afternoon, I’m writing tests and docs and updating examples as we speak)…
This is the sort of thing you’ll be able to do with Markdown pages. Just pop any arbitrary JavaScript you want in the new script block in the front matter and then import and use components as well as plain old JavaScript tagged template variable interpolation (not shown in this example) inside your Markdown.
The screen has all the code (sans the end of the last line of CSS and the…

OpenAI says ChatGPT Atlas' opt-in browser memories feature can remember key details from users' web browsing to improve chat responses and offer suggestions (OpenAI)
https://openai.com/index/introducing-chatgpt-atlas

People actually use Chrome??
https://geeknews.chat/@theregister/115227265814572838

Interaction-Driven Browsing: A Human-in-the-Loop Conceptual Framework Informed by Human Web Browsing for Browser-Using Agents
Hyeonggeun Yun, Jinkyu Jang
https://arxiv.org/abs/2509.12049

Interaction-Driven Browsing: A Human-in-the-Loop Conceptual Framework Informed by Human Web Browsing for Browser-Using Agents
Although browser-using agents (BUAs) show promise for web tasks and automation, most BUAs terminate after executing a single instruction, failing to support users' complex, nonlinear browsing with ambiguous goals, iterative decision-making, and changing contexts. We present a human-in-the-loop (HITL) conceptual framework informed by theories of human web browsing behavior. The framework centers on an iterative loop in which the BUA proactively proposes next actions and the user steers the brows…

Playing around with progressive JPEGs and their behavior in a web page. You can use ImageMagick to determine if a JPEG is interlaced. Most photo editing apps will export images as interlaced now, but you can see the behavior below.
Non-interlaced: Chunky render
Interlaced: Loads in from low quality to high quality.

Evaluating End-User Device Energy Models in Sustainability Reporting of Browser-Based Web Services
Maja H. Kirkeby, Timmie Lagermann
https://arxiv.org/abs/2510.12566 https://

Evaluating End-User Device Energy Models in Sustainability Reporting of Browser-Based Web Services
Sustainability reporting in web-based services increasingly relies on simplified energy and carbon models such as the Danish Agency of Digital Government's Digst framework and the United Kingdom-based DIMPACT model. Although these models are widely adopted, their accuracy and precision remain underexplored. This paper presents an empirical study evaluating how well such models reflect actual energy consumption during realistic user interactions with common website categories. Energy use was mea…

SPARE: Securing Progressive Web Applications Against Unauthorized Replications
Sajib Talukder, Nur Imtiazul Haque, Khandakar Ashrafi Akbar
https://arxiv.org/abs/2508.07053 https…

SPARE: Securing Progressive Web Applications Against Unauthorized Replications
WebView applications are widely used in mobile applications to display web content directly within the app, enhancing user engagement by eliminating the need to open an external browser and providing a seamless experience. Progressive Web Applications (PWAs) further improve usability by combining the accessibility of web apps with the speed, offline capabilities, and responsiveness of native applications. However, malicious developers can exploit this technology by duplicating PWA web links to …

"Please open up our #newsletter with our #advertisement in a web browser because your #email setup doesn't fulfill our way of seeing things and therefore we'll not show you the content in your t…

Learn from previous runs to improve future automation and save plans in a gallery for reuse.
🔀 Parallel execution
Run multiple tasks simultaneously with status indicators for efficient workflow management.
🌐 Web automation
Browse websites, fill forms, navigate deep sites not indexed by search engines, with real-time browser view.
💻 Code execution
Generate and execute code alongside web browsing for comprehensive task automation capabilities.
🔗

»Ladybird von Cloudflare unterstützt«
— von @…
Da bin ich mal gespannt wie der Ladybird Web-Browser dann wird und ja ich sehe einerseits @… kritisch aber auf der anderen Seite ist die Entwicklung eines von Grund auf…

Ladybird von Cloudflare unterstützt
Das Internet benötigt dringend unabhängige Browser wie den in der Entwicklung befindlichen Browser Ladybird. Das sieht Cloudflare genauso und unterstützt das…

“RSS feeds remain one of the last open and decentralized distribution mechanisms on the modern web. Platforms like Spotify and YouTube are increasingly moving toward exclusivity and closed podcasting ecosystems. Supporting browser-side XSLT helps keep RSS accessible and human-friendly, especially for independent creators.”
https://lwn.net/Arti…

The Browser Company launches a $20-per-month Dia Pro subscription plan, providing unlimited access to the web browser's AI-powered chat and skills features (Ivan Mehta/TechCrunch)
https://techcrunch.com/2025/08/06/the-b…

The Browser Company launches a $20 monthly subscription for its AI-powered browser | TechCrunch
The Browser Company has its first paid plan in form of $20 per month Dia Pro.

Web devs have spent decades on secure protocols to ensure your browser isn't a free pass for malicious pages to scrape your email and bank account. AI just broke them.
"Sure, I'll summarize that webpage for you, including the inconspicuous HTML comment asking me to ignore Cross-Origin Resource Sharing restrictions and snag the password you saved for managing investments at Robinhood.com."

ml5.js - Friendly machine learning for the web! https://blog.bmannconsulting.com/3lxsznpxhik2f

The canceling of ICEBlock is more evidence, were any needed, that the Web is the platform of the future, the only platform without a controlling vendor. Anything controversial should be available through a pure browser interface.
#USpolitics

What's the go-to for non-Microsoft non-Google email hosting these days?
Requirements:
* Supports proper RFC compliant SMTP/IMAP TLS access. No oauth, no EWS, no exchange nonsense. Needs to be usable on e.g. a headless box without a web browser, command line clients, etc.
* Reasonably priced for a handful of accounts across a bunch of domains
* Setup and forget third party hosting, I don't have an IP block suitable for mail hosting in house and I don't want …

I recently ish played a text adventure mystery logic puzzle game where there was a big gathering at a house and people keep dying. There were gunshots off screen. I want to recommend it but can't recall it's name or where I played it ... Maybe in a web browser? Anyone?

As we were touring potential new office locations earlier today, a coworker mentioned to a potential landlord that our office had a kitchen before Google existed.
So I felt obliged to share that my recollection was that when Google was small, they wrote us and said that they had noticed that we had a chef and wondered how that was working out for us. We said we loved it!
(They knew us because our web browser @…

Ehrmagerd, BOM now has HTTPS!!
HT @… & @…

Tor browser's great - but for more complete privacy protection, you need to add this
When you use the @… Browser, the only network traffic that's being masked is via the web browser. If you want more traffic anonymized and encrypted, you need to take a different approach.
🧅

Tor browser's great - but for more complete privacy protection, you need to add this
When you use the Tor Browser, the only network traffic that's being masked is via the web browser. If you want more traffic anonymized and encrypted, you need to take a different approach.

Protected Grounds and the System of Non-Discrimination Law in the Context of Algorithmic Decision-Making and Artificial Intelligence
Janneke Gerards, Frederik Zuiderveen Borgesius
https://arxiv.org/abs/2509.08837

Protected Grounds and the System of Non-Discrimination Law in the Context of Algorithmic Decision-Making and Artificial Intelligence
Algorithmic decision-making and similar types of artificial intelligence (AI) may lead to improvements in all sectors of society, but can also have discriminatory effects. While current non-discrimination law offers people some protection, algorithmic decision-making presents the law with several challenges. For instance, algorithms can generate new categories of people based on seemingly innocuous characteristics, such as web browser preference or apartment number, or more complicated categori…

Glorbit: A Modular, Web-Based Platform for AI Based Periorbital Measurement in Low-Resource Settings
George R. Nahass, Jacob van der Ende, Sasha Hubschman, Benjamin Beltran, Bhavana Kolli, Caitlin Berek, James D. Edmonds, R. V. Paul Chan, Pete Setabutr, James W. Larrick, Darvin Yi, Ann Q. Tran
https://arxiv.org/abs/2509.09693

Glorbit: A Modular, Web-Based Platform for AI Based Periorbital Measurement in Low-Resource Settings
Periorbital measurements such as margin reflex distances (MRD1/2), palpebral fissure height, and scleral show are essential in diagnosing and managing conditions like ptosis and eyelid disorders. We developed Glorbit, a lightweight, browser-based application for automated periorbital distance measurement using artificial intelligence, designed for use in low-resource clinical settings. The app integrates a DeepLabV3 segmentation model into a modular pipeline with secure, site-specific Google Cl…

Never thought that they would eventually put the Copilot button here 🤦‍♂️
#EdgeBrowser

With the upcoming changes in the next beta of #iTerm2 ("now a web browser as well", "Anthropic is now available as an AI provider") I don't feel like it's the right terminal emulator for me anymore.
Fortunately, there are alternatives: I'm on #WezTerm now. It was easi…

Web sites I'm unable to visit today:
* Center for Democracy & Technology
* CircleID
* Lawfare (partial, e.g., /topics, /podcasts)
* NANOG (!@!? - this one is personal)
Presumably a #Cloudflare update with human verification code that doesn't work on my browser or a reclassification of my IP address(es) used only by an un-automated me to undesirable. Th…

from my link log —
Web browser tiny monospace fonts workaround.
https://neugierig.org/software/chromium/notes/2009/09/monospace-fonts-workaround.html
saved 2025-07-23

Not gonna lie, my blood ran cold when I read this part: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1099130#62

Passwords and FIDO2 Are Meant To Be Secret: A Practical Secure Authentication Channel for Web Browsers
Anuj Gautam, Tarun Yadav, Garrett Smith, Kent Seamons, Scott Ruoti
https://arxiv.org/abs/2509.02289

Passwords and FIDO2 Are Meant To Be Secret: A Practical Secure Authentication Channel for Web Browsers
Password managers provide significant security benefits to users. However, malicious client-side scripts and browser extensions can steal passwords after the manager has autofilled them into the web page. In this paper, we extend prior work by Stock and Johns, showing how password autofill can be hardened to prevent these local attacks. We implement our design in the Firefox browser and conduct experiments demonstrating that our defense successfully protects passwords from XSS attacks and malic…

ChatGPT's new agent mode is amazing. It can drive a web browser to find some data in a website, export it, and analyze it. It shows little chat bubbles with what it thinks its doing while it works.

Microsoft Edge adds Copilot Mode, an experimental feature that tries to make browsing an agentic AI experience, even anticipating links to click, free for now (Zac Bowden/Windows Central)
https://www.windowscentral.com/microsoft/micros…

Microsoft revolutionizes Edge as an AI-powered web browser with new experimental 'Copilot Mode' — but it won't be free forever
Copilot Mode in Microsoft Edge is a new experimental feature that transforms the browser into an agentic AI experience, but it's only free for a limited time.

Iris RESTful Server and IrisTileSource: An Iris implementation for existing OpenSeaDragon viewers
Ryan Erik Landvater, Navin Kathawa, Mustafa Yousif MD, Ulysses Balis MD
https://arxiv.org/abs/2508.06615

Iris RESTful Server and IrisTileSource: An Iris implementation for existing OpenSeaDragon viewers
The Iris File Extension (IFE) is a low overhead performance-oriented whole slide image (WSI) file format designed to improve the image rendering experience for pathologists and simplify image management for system administrators. However, static hypertext transfer protocol (HTTP) file servers cannot natively stream subregions of high-resolution image files, such as the IFE. The majority of contemporary WSI viewer systems are designed as browser-based web applications and leverage OpenSeaDragon …

"I feel like this is a sign that Chrome is completely losing its way — AI-generated slop from the browser layered atop AI-generated slop in the underlying web pages."
via @…

NetGent: Agent-Based Automation of Network Application Workflows
Jaber Daneshamooz, Eugene Vuong, Laasya Koduru, Sanjay Chandrasekaran, Arpit Gupta
https://arxiv.org/abs/2509.00625

NetGent: Agent-Based Automation of Network Application Workflows
We present NetGent, an AI-agent framework for automating complex application workflows to generate realistic network traffic datasets. Developing generalizable ML models for networking requires data collection from network environments with traffic that results from a diverse set of real-world web applications. However, using existing browser automation tools that are diverse, repeatable, realistic, and efficient remains fragile and costly. NetGent addresses this challenge by allowing users to …

Update on attempt to emulate a Shockwave Director web page: I have tried the DirPlayer Chrome extension but get this error:
"Could not deserialize 'VWCF' chunk"
I included both <object> and <embed> tags pointing to the same .dcr file. Does anyone have other emulators to recommend?

Explore, Listen, Inspect: Supporting Multimodal Interaction with 3D Surface and Point Data Visualizations
Sanchita S. Kamath, Aziz N. Zeidieh, JooYoung Seo
https://arxiv.org/abs/2508.08554

Explore, Listen, Inspect: Supporting Multimodal Interaction with 3D Surface and Point Data Visualizations
Blind and low-vision (BLV) users remain largely excluded from three-dimensional (3D) surface and point data visualizations due to the reliance on visual interaction. Existing approaches inadequately support non-visual access, especially in browser-based environments. This study introduces DIXTRAL, a hosted web-native system, co-designed with BLV researchers to address these gaps through multimodal interaction. Conducted with two blind and one sighted researcher, this study took place over susta…

a bit physically relieved that we managed to avoid what would have been an extinction-level event for the web (the Mozilla search deal is also deemed fine now) https://www.cnn.com/2025/09/02/tech/google-antitrust-ruling-chrome-android

Google will not be forced to sell off Chrome or Android, judge rules in landmark antitrust ruling
A court will not force Google to sell off its Chrome browser or Android, a federal judge said in a court filing on Tuesday. The decision serves as a significant win for the tech company, which has avoided the most extreme possible outcome from a landmark antitrust case that determined the company was operating an illegal online search monopoly.

Today I created a new Pull Request on GitHub, copied the URL out of the address bar, and pasted into our dev chat.
The URL I pasted is not the URL I intended to copy, but it was instead a URL I’d viewed earlier this morning. I don’t know which part failed here.
Was it the new GitHub-only-cares-about-AI terrible User Interface trying to be clever about address rewrites in their garbage JavaScript-pretending-to-be-a-web-page?
Or maybe it was Orion, a browser I wish I didn’t t…

I don't care if he's fuckin' Pol Pot as long as I get a browser out of the deal that isn't Chrome in a trenchcoat. We're rapidly losing Firefox. The entire world being beholden to Google for access to all web data is more important to stop than one developer's wrongthink.

It's not Easy: Applying Supervised Machine Learning to Detect Malicious Extensions in the Chrome Web Store
Ben Rosenzweig, Valentino Dalla Valle, Giovanni Apruzzese, Aurore Fass
https://arxiv.org/abs/2509.21590

It's not Easy: Applying Supervised Machine Learning to Detect Malicious Extensions in the Chrome Web Store
Google Chrome is the most popular Web browser. Users can customize it with extensions that enhance their browsing experience. The most well-known marketplace of such extensions is the Chrome Web Store (CWS). Developers can upload their extensions on the CWS, but such extensions are made available to users only after a vetting process carried out by Google itself. Unfortunately, some malicious extensions bypass such checks, putting the security and privacy of downstream browser extension users a…

Enabling Content Management Systems as an Information Source in Model-driven Projects
Joan Giner-Miguelez, Abel G\'omez, Jordi Cabot
https://arxiv.org/abs/2508.19797 https:/…

Enabling Content Management Systems as an Information Source in Model-driven Projects
Content Management Systems (CMSs) are the most popular tool when it comes to create and publish content across the web. Recently, CMSs have evolved, becoming \emph{headless}. Content served by a \emph{headless CMS} aims to be consumed by other applications and services through REST APIs rather than by human users through a web browser. This evolution has enabled CMSs to become a notorious source of content to be used in a variety of contexts beyond pure web navigation. As such, CMS have become …

Google will be allowed to keep Chrome but can no longer pay for exclusive search contracts. In busting Google's search monopoly, the court has cemented their web browser monopoly. I don't see how Mozilla survives this.
https://www.cnbc.com/2025/09/02/google-antitrust-search-…

Google stock jumps 8% after search giant avoids worst-case penalties in antitrust case
The ruling comes nearly a year after a U.S. judge ruled that Google holds an illegal monopoly in its core market of internet search.

Brave says it has surpassed 100M monthly active users across desktop and mobile worldwide, with 42M DAUs, and Brave Search handles 1.6B queries each month (Paul Thurrott/Thurrott)
https://www.thurrott.com/cloud/web-browsers/327735/brave-now-has-over-…

Brave Now Has Over 100 Million Users
Brave announced today that it now has over 100 million active users across desktop and mobile worldwide.

🤦‍♂️ https://brave.com/blog/comet-prompt-injection/

Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet | Brave
The attack we developed shows that traditional Web security assumptions don't hold for agentic AI, and that we need new security and privacy architectures for agentic browsing.

Progressive Web Application for Storytelling Therapy Support
Javier Jimenez-Honrado, Javier Gomez Garcia, Felipe Costa-Tebar, Felix A. Marco, Jose A. Gallud, Gabriel Sebastian Rivera
https://arxiv.org/abs/2507.22839

Progressive Web Application for Storytelling Therapy Support
In spite of all advances promoted by information technologies, there are still activities where this technology is not applied for reasons such as being carried out in non-profit organizations or because they have not adapted to this modernization. Until recently, the way to work with mobile devices was either by connecting through a web page with the device's browser, or by downloading an application from the corresponding platform. But lately, technologies are being developed that aim to brea…

from my link log —
CRLite: fast, private, and comprehensive certificate revocation checking in Firefox.
https://hacks.mozilla.org/2025/08/crlite-fast-private-and-comprehensive-certificate-revocation-checking…

CRLite: Fast, private, and comprehensive certificate revocation checking in Firefox – Mozilla Hacks - the Web developer blog
Firefox is now the first and the only browser to deploy fast and comprehensive certificate revocation checking that does not reveal your browsing activity to anyone (not even to Mozilla). ...

Researchers detail an indirect prompt injection flaw in Perplexity's Comet AI browser, letting attackers manipulate it into performing unauthorized actions (Brave)
https://brave.com/blog/comet-prompt-injection/

Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet | Brave
The attack we developed shows that traditional Web security assumptions don't hold for agentic AI, and that we need new security and privacy architectures for agentic browsing.

Geeky question: is anyone thinking or working on adapting #accessibility and #i18n #web standards to the impending avalanche of bad #AI translations that we'll have to deal with as users?
I'll be more specific, one example: I can prefer Spanish texts over English ones... as long as they are written by a human being and are not a terrible automated translation made by an AI, in which case I'd prefer to read the original English text. But... as of today, I have no way to specify that through my browser settings.