July 5, 2016 By Larry Loeb 2 min read

The Tor project works to preserve anonymity for users browsing the net, and it has instituted some recent upgrades to its security to further this effort. Now Mozilla is returning the favor by expanding its Firefox security options — and its taking some cues from Tor.

GHacks noted that the nightly build channel of Firefox 50 has started adding features that Tor originated. Mozilla will probably integrate more measures into the standard version Firefox in the coming weeks, but a few changes have materialized and are already available for privacy-conscious users.

About the Firefox Security Measures

The first patch rolled out aims to reduce fingerprinting, which involves getting the characteristics of a specific browser being used to view information. According to GHacks, Firefox does this by blocking the reading of plugins and MIME types supported by the browser.

Softpedia noted that the second patch will also keep the user’s browser orientation a secret even when sites or applications request the information. This request is often a part of fingerprinting as well.

The third patch removes the “open with” option in the download menu. Again, this sort of behavior can be diagnostic for a specific browser’s use.

While these privacy measures are slowly being integrated into Firefox security, they are not enabled by default. In the current nightly builds, they must be expressly set by the user before they become effective. GHacks outlined how to turn on these settings.

Uplifting Tor

Mozilla named this overall privacy effort the Tor Uplift project. It is tracking the specific status of the privacy-enhancing changes it has planned, so it’s a useful resource for users who want to understand what Firefox security improvements are on the horizon.

Most of the changes are grouped under the core preference privacy.resistFingerprinting, which has been around since Firefox 41. This is the central repository for Tor-related settings being implemented in the Firefox browser, but it’s not the only location where these changes are found.

While this preference covers many Tor settings that are being implemented in the Firefox browser, some — such as the “open with” option — are available under other preferences.

These changes to Firefox will be welcomed by any users concerned about their privacy — even if they are not using Tor.

More from

Smoltalk: RCE in open source agents

26 min read - Big shoutout to Hugging Face and the smolagents team for their cooperation and quick turnaround for a fix! Introduction Recently, I have been working on a side project to automate some pentest reconnaissance with AI agents. Just after I started this project, Hugging Face announced the release of smolagents, a lightweight framework for building AI agents that implements the methodology described in the ReAct paper, emphasizing reasoning through iterative decision-making. Interestingly, smolagents enables agents to reason and act by generating…

4 ways to bring cybersecurity into your community

4 min read - It’s easy to focus on technology when talking about cybersecurity. However, the best prevention measures rely on the education of those who use technology. Organizations training their employees is the first step. But the industry needs to expand the concept of a culture of cybersecurity and take it from where it currently stands as an organizational responsibility to a global perspective.When every person who uses technology — for work, personal use and school — views cybersecurity as their responsibility, it…

How red teaming helps safeguard the infrastructure behind AI models

4 min read - Artificial intelligence (AI) is now squarely on the frontlines of information security. However, as is often the case when the pace of technological innovation is very rapid, security often ends up being a secondary consideration. This is increasingly evident from the ad-hoc nature of many implementations, where organizations lack a clear strategy for responsible AI use.Attack surfaces aren’t just expanding due to risks and vulnerabilities in AI models themselves but also in the underlying infrastructure that supports them. Many foundation…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today