Tag
Firefox 的 2026 年第三季度安全与隐私通讯，涵盖更快的发布周期、TLS 配置透明度警告、Mozilla Root Store Policy v3.1、mailto 链接防骚扰以及扩展本地文件访问权限限制等安全与隐私改进。
Epoch AI tests show Z.ai's open-weight GLM 5.3 turned unshipped Firefox security fixes into working exploits across 6 consecutive releases, discovering a novel bug that Mozilla fixed on Oct 27, while similar attempts against Chrome failed despite ~$100K in effort.
Mozilla explains how AI models like GLM 5.3 can accelerate patch-gapping attacks and outlines Firefox's new defenses, including faster weekly releases, holding back regression tests, commit scanning, and a structural defense-in-depth approach.
Epoch AI 研究发现，开源模型 GLM 5.3 能够利用安全补丁发布与用户更新之间的'patch gap'，自主构建针对 Firefox 的零点击文件窃取漏洞利用，成本仅约 1,000 美元/次，表明广泛可用的开源模型已能独立完成此前需要专家级能力的漏洞利用开发。
Mozilla is updating Firefox's AI-powered Smart Window with AI form filling that draws on open tabs, plus a feature that monitors webpages for changes like sales or job listings. Data from source pages is sent to Google's Gemini 3.1 Flash Lite to generate suggestions, and both features are rolling out to the beta in the US and Canada.
Firefox 153 introduces Local Mode in DevTools, letting developers map custom https origins to local folders so they can test web pages and Web APIs—including those restricted to secure contexts—without running an HTTP server. Mappings can be managed via the DevTools options panel or about:config preferences for easy transfer and automation.
Mozilla is requiring that Firefox security tests be kept private as a separate patch until at least a week after a security fix ships, in response to improving AI capabilities that could aid exploit development.
Mozilla responded within hours to the compromise of eight eMudhra intermediate certificate private keys by pushing revocations via OneCRL and releasing emergency Firefox updates (158.0.1, ESR 115.43.1, ESR 153.5.1), plus an NSS 3.131.1 trust store update to remove the affected root certificate.
Mozilla 推出 Firefox Enterprise，为企业和政府机构提供基于独立 Gecko 引擎的浏览器及可自托管的管理控制台，帮助机构加强对浏览器策略、数据流动和 AI 使用的控制，减少对少数技术供应商的依赖。
一篇技术博客介绍如何通过将 Firefox 的 network.http.response.timeout 设为 0，让浏览器在下载大文件时能够断点续传并提升稳定性，同时给出了 wget -c 作为替代方案。
Mozilla 发布 Firefox 157，带来全新刷新设计，书签、扩展和快捷方式保持原位，提供更个性化的使用体验。
Mozilla has rolled out a new design for Firefox with version FX 157, featuring refreshed colors, icons, themes, and the return of Compact Mode while maintaining privacy and customization options.
Mozilla's head of Firefox, Ajit Varma, discusses the browser's redesign aimed at attracting more users from Chrome by enhancing user experience, while addressing market dominance challenges and AI skepticism.
Firefox has received a design overhaul with round tabs, new themes, and the reintroduction of Compact Mode, modernizing its user interface for desktop and mobile users.
Firefox officially confirms the availability of a free built-in VPN service with up to 50GB of data per month.
The article details the rebuild of Firefox.com using modern, native CSS without preprocessors, showcasing the evolution from the CSS Zen Garden concept to practical, production-ready web development.
Hacker News users discuss issues with Google's reCAPTCHA rejecting Firefox users, leading to login problems on sites like Vultr and debates over CAPTCHA effectiveness and user rights.
The author describes their personal method for secure and private web browsing using restricted Firefox with extensions like uBlock Origin and containerization to block ads, trackers, and improve security.
A retest of Firefox 155 reveals that its AI kill switch disables generative features but allows telemetry and advertising tracking to continue, raising privacy concerns.
The article argues that Firefox is critical for maintaining browser engine diversity and competition, urging readers to support it despite criticism to avoid a web dominated by Google Chrome.