Fetching from the wire…
01
02
03
04
05
06
07
08
Policy2026-09-03 · source-backed
Marius Quabeck retested Firefox 155.0 with Wireshark on a clean Ubuntu install, decrypting TLS via SSLKEYLOGFILE across two fresh profiles running identical cold-start, setup, 120-second idle and fixed-browsing scenarios. With AI blocked, Firefox contacted the same nine TLS hosts at idle and sent identical telemetry POSTs carrying the same client IDs and usage UUIDs as the default profile, and kept DNS-prefetching the affiliate tracker temuaffiliateprogram.pxf.io. The switch now covers eleven preferences, up from nine, but AI infrastructure requests fire on first launch before a user can reach it.
Each link below shares sources, entities, or timing with this story.
Announced September 1, blocking third-party ads and trackers before they load, implemented in the browser because iOS doesn't support extensions the way desktop does (Mozilla). Runs on Apple's WebKit Content Blocker API against EasyList. It doesn't block first-party ads, searc...
As of August 14, domains using Vercel DNS get ECH, encrypting the Server Name Indication in the TLS handshake, the last plaintext field revealing which host a client connects to. Connections route through the shared vercel-ech.com hostname. Vercel It activates with no configur...
Anthropic and Mozilla ran a coordinated two-week security research project in February 2026 where Claude Opus 4.6 scanned roughly 6,000 Firefox C++ files, submitted 112 reports, and identified 22 CVEs. Fourteen were classified high-severity, representing nearly one-fifth of al...
Firefox 148 releases today with a global "Block AI enhancements" toggle and per-feature controls for chatbots, link previews, tab grouping, translations, and alt-text. Mozilla commits to NOT re-enabling AI features once disabled. Also ships WebGPU service worker support and Tr...
689 points and 527 comments, the largest thread of the cycle, ending the MV2 wind-down by delisting rather than deprecating (Hacker News). The thread splits on safety versus revenue protection, with the strongest practitioner argument being that ad blocking is now itself a sec...
Fable 5 and Mythos 5 went dark this week. Not a soft sunset with a six-month migration window. A US export directive, and within hours the models were unavailable to any foreign national anywhere on earth. Enterprise teams outside the US woke up to API calls failing against a...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.