Tag

Firefox

8 stories

A certificate authority's private keys were so weak that one of them was the number 4 (emudhra.we-have-a-problem.com)

Eight eMudhra intermediate CA certificates, valid since April 2025, had keys that could be computed from the certificates themselves. A commenter pulled out the scalars: 4, 56, 66, 115, 155, 156, 230, 237.

Firefox shipped a fix in hours via OneCRL; a Mozilla engineer in the thread says everything outside the big browsers is still exposed.

🚀Tech ★ 659 · 💬 340 · 7 days ago · #security#web#eMudhra#Firefox#Mozilla+1

Not just a headline — the discussion unpacked

The top HN threads: facts from the discussions, both sides, insider voices. Email, Telegram, or RSS.

uBlock Origin gives Firefox an accidental competitive edge (pcworld.com)

The change is about extension architecture, not a new Firefox feature. For users who depend on uBlock Origin, the browser has become a practical refuge from restrictions rolling through Chrome-derived products.

HN commenters also pointed to Brave and custom extensions, but the broader complaint was simpler: modern advertising has made blocking it feel necessary for ordinary browsing.

Firefox 153 previews 'new' Containers a user traced back to 2017 (blog.mozilla.org)

Firefox 153 folds container tabs (separate cookie jars, colors, and icons for banking, work, and shopping) directly into the browser, ending reliance on Mozilla's own Multi-Account Containers extension for basic isolation.

The pushback was immediate: a reader traced the same interface back to a 2017 Mozilla documentation snapshot and a 2023 support page, arguing the 'preview' label hides that containers have quietly existed for years.

Google Workspace tells a Firefox admin to install Chrome or lose account access (tales.fromprod.com)

Open admin.google.com in Firefox and a security banner appears: secure your device, download Chrome, sign in with your work account. No technical reason was visible for the demand.

The blog's author turned up in the thread to confirm he is the admin, has never enabled Identity-Aware Proxy, and is on Workspace Business Plus, where Google's Context-Aware Access browser lock isn't even available. So what is triggering it?

Chrome 150 pulls the last MV2 flag on June 30, ending uBlock Origin (9to5google.com)

Chrome 150 (around June 30, 2026) drops the ExtensionManifestV2Disabled flag; Chrome 151 in July removes the rest. Google cites "complexity, tech debt, and security risks."

A self-identified Googler defended it as a security move. A reply noted Google makes 75% of its revenue from ads — and controls the extension store it claims to be protecting.

🚀Tech ★ 266 · 💬 338 · Jun 17 · #big tech#privacy#web#Brave#Firefox#Google Chrome+2

A 12-year Mozilla insider leaves, and names the feedback trap that flatters every org (blog.unitedheroes.net)

Ship DRM, AI, or push notifications, he argues, and your survey numbers look great — because the dissatisfied already left, so only the satisfied remain to be counted. The feedback that's left is survivorship bias wearing a dashboard.

The thread split on the diagnosis. One reader refused to pin it on leadership: would the best browser on earth have changed Firefox's fate when it survives on Google's money? Others called that money the whole strategy.

📈Biz ★ 468 · 💬 281 · Jun 14 · #big tech#culture#web#Firefox#Google#Mozilla

Chrome's last loophole for the real uBlock Origin closes this summer (neowin.net)

Manifest V2 was already off by default since Chrome 138 last July. What dies now is the last enterprise-and-flag workaround that let technically-minded users re-enable it — uBlock Origin Lite, the Manifest V3 version, keeps far less power to block.

The thread's sharpest line wasn't outrage at Google. It was a Firefox user admitting he still keeps Chrome around because some sites simply won't load right anywhere else.