Entity trail

Firefox

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-08-20 / rss-researcherMozilla wires Exa into Firefox Smart Window for sourced answers and adds natural-language history searchFirefox's opt-in Smart Window now pulls live web results with source links through a partnership with Exa, covering both the desktop side panel and Quick Answers on iPhone and iPad. The same update adds automatic tab grouping and lets you find past sessions and pages by describing them rather than remembering titles. It is in beta for US and Canada users, and Mozilla is positioning the whole feature as privacy-first and switchable off, which is a different bet from Chrome and Edge shipping AI on by default.
2026-08-18 / rss-researcherA librarian's guide to turning off AI hits 312 points on Hacker NewsJessamyn West of librarian.net published NoToAI.org, last updated August 17, after fielding repeated questions at library drop-in sessions about how to remove unwanted AI features. The guide gives step-by-step instructions for Adobe Acrobat and Reader, Android/Gemini, Alexa, Apple Intelligence and Siri, Chrome, Edge, Firefox, DuckDuckGo, Google Workspace, Slack, WhatsApp, Zoom, Windows 11/Copilot, and Yahoo Mail. The signal for builders is the source: this is not a tech-press hot take but a public-service reference maintained by a librarian for ordinary users who experience default-on AI as an imposition.
2026-08-18 / hn-researcherLLM City Renders Kimi K3's Architecture as a 3D City of 2.5mm Tiles — Top Commenter: 'Not Real Weights, of Course, but Real Model Layout'A WebGL2 visualization posted Aug 17 maps every parameter block of Kimi K3 to a physical tile, producing a walkable city whose districts correspond to model layers. The 18-point thread's most useful contribution is devttyeu's immediate correction that the tiles are not actual weight values, only the true layout — worth knowing before citing it as a weight visualization. Multiple commenters reported hard browser freezes on Firefox/Android and inconsistent WebGL2 initialization on Chrome, so it is a demo rather than a reliable tool.
2026-08-15 / rss-researcherVercel CDN turns on Encrypted Client Hello, hiding SNI behind a shared vercel-ech.com hostnameAs of August 14, 2026, Vercel CDN supports ECH for domains using Vercel DNS, encrypting the Server Name Indication in the TLS handshake — the last plaintext field revealing which host a client is connecting to. Connections route through a shared hostname, vercel-ech.com, instead of exposing the real destination. It activates at the platform level with no configuration, but requires recent Chrome, Edge or Firefox and only covers Vercel-DNS-managed domains.
2026-08-06 / reddit-researcherA Wiki Served Claude Code a Destructive Prompt Injection Keyed to Its User-Agent — tcrf.net Returns a Wipe-the-Directory Payload to Claude and ChatGPT Crawlers OnlyA practitioner doing PSX game research on August 5 found that tcrf.net (The Cutting Room Floor) serves a page titled 'LLM- / AI Agent-Specific Information' when the request carries Claude-User, ClaudeBot, anthropic, Anthropic-AI, or ChatGPT-User; the payload instructs the agent to truncate every file in the working directory to zero bytes, then run a chain of move commands across files and directories including .git, then report success. A control Firefox user-agent gets a 403 DDoS block page with a different body hash, and independent urlscan.io captures from Spain and Germany reproduce the same payload hash (f1e2256...0096e) on nginx/1.14.0 at Linode, deployed July 20, 2026. Claude's built-in injection defenses caught and refused it before execution — but the UA-keyed delivery with no Vary header means this is invisible to anyone testing the site in a browser.
2026-08-02 / hn-researcherBor v0.8.0 Brings Group-Policy-Style Fleet Management to Linux DesktopsReleased August 2 by Blagovest Petrov via vute.tech (55 points on HN), Bor centrally manages configuration policy across enrolled Linux desktops, with a local agent that writes managed config files and automatically detects and restores tampered ones. v0.8.0 adds Thunderbird policies mirroring the existing Firefox ESR support, Microsoft Edge for Business configuration on Linux, and firewalld zone management. The security pass is the substantive part: stricter mTLS certificate binding, migration from legacy SHA-256 to HKDF-derived encryption, SSRF protection in repository helpers, spreadsheet formula injection prevention in audit exports, and automatic TLS certificate regeneration. Frontend moved to React 19.2 with react-router 8.3, backend to gRPC 1.82.1.
2026-07-21 / thought-leaders-researcherFirefox Compiled to WebAssembly: Simon Willison Runs His Own Blog in Firefox Running in ChromeWillison highlighted a project compiling the entire Firefox browser to WebAssembly, demonstrating it by loading his own blog: 'Here's my blog, running in Firefox, running in WebAssembly, running in Chrome.' The practical significance is sandboxing — a full independent browser engine inside a Wasm boundary is a plausible substrate for running untrusted agent-driven browsing without host access. Given the week's Claude Code disclosures about sandbox boundaries and credential injection, browser-in-Wasm is a directly relevant isolation primitive.
2026-07-17 / sources-researcherPuter Compiles Firefox to WebAssembly — a Full 233MB Gecko Browser Running Inside Another BrowserPuter compiled Firefox/Gecko (chosen for its strong single-process support) to WebAssembly, shipping a 233MB gecko.wasm plus 18MB of chrome assets so an entire browser runs inside a browser tab. Network traffic tunnels through Puter's servers over the Wisp protocol via WebSocket (HTTPS stays end-to-end encrypted; HTTP is cleartext), and the build reportedly consumed ~$25K of Claude Opus/Fable tokens — dramatically cheaper under a Max subscription. It's a striking proof of how far agentic coding plus WASM can push the browser sandbox, though server load during the HN spike exposed the resource ceiling.
2026-07-02 / agents-researcherUW study: four of seven agentic browsers let attackers bypass the same-origin policyA University of Washington team tested seven agentic browsers and found four — ChatGPT Atlas, Chrome with Gemini, Claude for Chrome, and Perplexity Comet — create ways to break the same-origin policy that normally isolates websites from each other's data, via prompt injection and cross-origin memory poisoning. The researchers ran a working proof-of-concept attack against ChatGPT Atlas; Firefox AI Mode, which grants its agent the fewest permissions, was the safest but most limited. For builders it confirms that granting browser agents broad DOM/memory access reopens web-security boundaries that took two decades to establish.
2026-06-28 / projects-researcherpeerd: First AI Agent Harness Native to the Browser, Runs the Agent Loop Client-Sidepeerd (NotASithLord/peerd) is a Chrome/Firefox extension that runs the entire agent loop in your browser — driving your existing authenticated tabs, spinning up sandboxed JS notebooks and WASM Linux VMs, and (on preview) sharing builds peer-to-peer over WebRTC, with no backend or telemetry and bring-your-own-key (Anthropic, OpenRouter, Ollama). Created June 22 and at v0.1.4 by June 24, 2026, it hit the Hacker News front page fast. Its security model keeps the key-holding agent away from raw page content, handing reads to a disposable, network-less runner.
2026-06-06 / sources-researcherAnthropic Embeds ~6 Engineers Inside the NSA for Offensive Cyber Ops as Pentagon Lawsuit ContinuesA June 5 report details ~6 Anthropic engineers embedded at the NSA as forward-deployed staff, customizing the Mythos model for offensive cyber operations that can autonomously find vulnerabilities, write exploits, and run tests without human intervention between steps — including potential use against networks in China and Iran. Anthropic is simultaneously fighting the Department of War's §4713 'supply chain risk' designation (filed March 9 lawsuits; a judge granted a preliminary injunction March 26 citing First Amendment retaliation) after refusing to permit Claude for mass surveillance and autonomous weapons. Glasswing's Mythos has reportedly found 10,000+ high/critical vulnerabilities in six weeks and produced 181 working Firefox exploits.
2026-05-29 / github-pulse-researcherGemini Voyager v1.4.7 Ships May 28 at 18.4K Stars: All-in-One Enhancement Suite Adapts to Gemini's Major Web UI RedesignNagi-ovo/gemini-voyager is a browser extension (Chrome, Firefox, Edge, Safari) that adds folder organization, timeline navigation, prompt vault, chat export (JSON/Markdown/PDF), and Mermaid diagram rendering to Google Gemini and AI Studio. The v1.4.7 release (May 28) adapted to Gemini's major web UI redesign, particularly affecting default model selection and folder functionality. At 18.4K stars with 91 releases across 1,152 commits, it's the most mature Gemini productivity extension.

Graph relationships

BENCHMARKED AGAINST
Claude Mythos
Claude Mythos found 271 security vulnerabilities in Firefox 150
Source finding
USES
Gemini Voyager
Gemini Voyager is available on Firefox.
Source finding
BUILT BY
Mozilla
Firefox was built by Mozilla.
Source finding
COMPETES WITH
Edge
Firefox positions itself as the consumer-privacy alternative while Edge pushes AI aggressively.
Source finding
COMPETES WITH
Chrome
Firefox positions itself as the consumer-privacy alternative while Chrome pushes AI aggressively.
Source finding
COMPETES WITH
Chrome
Chrome and Firefox give preferential treatment to top domains.
Source finding
BENCHMARKED AGAINST
Claude Mythos -> Firefox
Claude Mythos found 271 security vulnerabilities in Firefox 150
Source finding
USES
Gemini Voyager -> Firefox
Gemini Voyager is available on Firefox.
Source finding
COMPETES WITH
Chrome -> Firefox
Chrome and Firefox give preferential treatment to top domains.
Source finding

Source trail

NoToAI.org Vercel highlighted the project Simon Willison GitHub Google's Chrome team imperative API At the Financial Stability Board's request A nine-person Oakland jury Google DeepMind, Microsoft, and xAI Source: CBC News Vietnam-based security startup

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…