2026-10-17T05:08:05Z https://nostr.now Tom Ritter https://nostr.now/npub18td2gpdprc633gccurdd5sdqjmy26889twk2m2v0f43muupwz5qsv9ljed https://media.infosec.exchange/infosec.exchange/accounts/avatars/113/113/445/982/558/584/original/3f796f1493a1b586.png https://media.infosec.exchange/infosec.exchange/accounts/avatars/113/113/445/982/558/584/original/3f796f1493a1b586.png https://nostr.now/nevent1qqszppgwjh3veulf7d62dgafrfhpt7q5d8wgg7y3xn3lkqda53pn88szyqad4fq95y0r2x9rrrsd4kjp5ztv3tguu4d6etdf3axk80ns9c2szrjrr2l Alibaba got caught doing some invasive fingerprinting that actually interrupted a user&#39;s workflow. (Normally they&#39;re more stealthy than that.) <a href="https://blog.laserphile.com/2026/08/aliexpress-webpage-keeping-multipoint.html">https://blog.laserphile.com/2026/08/aliexpress-webpage-keeping-multipoint.html</a><br/><br/>I did a quick write-up about Firefox&#39;s efforts (and success) neutering this fingerprinting vector <a href="https://ritter.vg/blog-webaudio_alibaba.html">https://ritter.vg/blog-webaudio_alibaba.html</a> 2026-08-20T20:14:43Z https://nostr.now/nevent1qqs8jjcy8d7dxydktmvqnuutlw9hyc762vehtzgz5l7w9u7d5kkvkegzyqad4fq95y0r2x9rrrsd4kjp5ztv3tguu4d6etdf3axk80ns9c2szsx3d7a Tor Project is hiring an Android Engineer: <a href="https://www.torproject.org/about/jobs/">https://www.torproject.org/about/jobs/</a> 2026-05-18T14:07:48Z https://nostr.now/nevent1qqsvacj9agjwxmr60ld2t23jjv3njldhg92shq6yvlwnpf39pjrmyhczyqad4fq95y0r2x9rrrsd4kjp5ztv3tguu4d6etdf3axk80ns9c2szmjpel5 I&#39;ve been seeing a lot of comments online about how browser telemetry is just a way to spy on users and we never actually use it, and it provides no value. <br/><br/>We can debate whether you think someone (Firefox or otherwise) overcollects telemetry, or doesn&#39;t collect it in a privacy-preserving enough way. And you should be able to turn it all off, for any reason.<br/><br/>But it&#39;s been instrumental for me, personally, to ship multiple security improvements to Firefox - and I&#39;m just one of hundreds of developers. I wrote up some more here: <a href="https://ritter.vg/blog-telemetry.html">https://ritter.vg/blog-telemetry.html</a> 2026-03-05T15:19:29Z https://nostr.now/nevent1qqszuym4cwrfqv8f6e4rk3qeswnyezmvkyucjvj5w897g96sqqh7hmqzyqad4fq95y0r2x9rrrsd4kjp5ztv3tguu4d6etdf3axk80ns9c2szzgjwsk Very kind for 0-day to hit right at the start of a workday TBH<br/><a href="https://blog.mozilla.org/security/2024/10/11/behind-the-scenes-fixing-an-in-the-wild-firefox-exploit/">https://blog.mozilla.org/security/2024/10/11/behind-the-scenes-fixing-an-in-the-wild-firefox-exploit/</a><br/>Light on details, but there&#39;s some. 2024-10-11T12:17:16Z