Tom Ritter

Firefox Security, Tor Browser Dev. Also: exploits, mitigations, crypto, privacy, pseudonymity & anonymity, tor

Public Key

npub18td2gpdprc633gccurdd5sdqjmy26889twk2m2v0f43muupwz5qsv9ljed

NIP-05 Address

tomrittervg_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqsr4k4yqks3udgc5vvwpkk6gxsfdj9drnj4ht9d4x856ca7wqhp2qgppamhxue69uhkummnw3ezumt0d5q3gamnwvaz7tmjv4kxz7fwv3sk6atn9e5k74z7vc7

Publishing to

nostr.mom

relay.damus.io

nos.lol

Author Public Key

npub18td2gpdprc633gccurdd5sdqjmy26889twk2m2v0f43muupwz5qsv9ljed

Show more details

Last Notes

2026-08-20 20:14:43 UTC

Alibaba got caught doing some invasive fingerprinting that actually interrupted a user's workflow. (Normally they're more stealthy than that.) https://blog.laserphile.com/2026/08/aliexpress-webpage-keeping-multipoint.html
I did a quick write-up about Firefox's efforts (and success) neutering this fingerprinting vector https://ritter.vg/blog-webaudio_alibaba.html

2026-05-18 14:07:48 UTC

Tor Project is hiring an Android Engineer: https://www.torproject.org/about/jobs/

2026-03-05 15:19:29 UTC

I've been seeing a lot of comments online about how browser telemetry is just a way to spy on users and we never actually use it, and it provides no value.
We can debate whether you think someone (Firefox or otherwise) overcollects telemetry, or doesn't collect it in a privacy-preserving enough way. And you should be able to turn it all off, for any reason.
But it's been instrumental for me, personally, to ship multiple security improvements to Firefox - and I'm just one of hundreds of developers. I wrote up some more here: https://ritter.vg/blog-telemetry.html

2024-10-11 12:17:16 UTC

Very kind for 0-day to hit right at the start of a workday TBH
https://blog.mozilla.org/security/2024/10/11/behind-the-scenes-fixing-an-in-the-wild-firefox-exploit/
Light on details, but there's some.