Firefox Community Forum

Hi all the people,

I was just surprised to see this in an Apache HTTP log: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/58.0.1"

This bugs me. My first guess would be that a Webkit based Firefox could not be qualified as really Firefox. Although that, I could imagine a Firefox for iOS or MacOS based on Webkit, may be, but it says it is on Windows, which makes less sense.

I suspect this is a user agent string spoofing, but I just need to be sure (I try to get ride of far too invasive bots, while I’m afraid to disrupt browsing from legitimate web users).

With thanks and my apologizes for such a question which may looks obvious or strange to people who know for sure.

There must be a way to turn off this popup off. This is REALLY annoying when it covers a password box and to remove it i must click outside it and I lose focus on the password box. If you must put he box there then at least leave the first part of the password box clear so I cab click on it and not have to click again to get the focus back.

After all of those years, am I witnessing now that FF literally failing?

How could it become mysterious by that it lets user's location leaked to github even though: - third-party HiFi company VPN is active and in OpenVPN UDP/TCP, Wireguard, IPv6 On/Off, etc... - No bookmark to corresponding website - Cache and website data were so-called cleaned, - Other browsers don't give that symptom, only FF - No related plugin, out of only 3

it's impossible to find out how it lends to the language and region query of this website every time after cleaning. Is FF getting closed app?

Is that a no-way-to-explain effect of language models' evolution is exponentially higher in every 4 months after two years?

Last few days I've been getting this popup:

Attention!!! Click to turn on the antivirus

or

Attention!!! Click to scan the device

obviously some phishing or something. How can I get rid of it?

Some extensions I use have been updated and now ask permission to "Access your data for all websites." What is the scope of this access? Can an extension which facilitates video downloads see my bank password? Can it access data for sites in a different Firefox container? Can it access sites which I use in a different browser? Can it access data for sites which, on my system, are only available to a different user? Thanks for any clarification. [I am running Firefox 149.0 under Kubuntu 24.04]

How do I keep my online banking private when using Firefox as my browser? When using Google Chrome as my browser, I use incognito, but I'm changing to Firefox and need to know that my online banking is safe.

I am just burned out with Firefox and not sure why I should continue to use it instead of some fork or Chromium-based browser.

It seems like every update brings some new GenAI/LLM component that is auto-enabled and difficult to disable. I do not want GenAI/LLMs in my web browser. I have dropped nearly every other application or software that has forced it on me and included it in their product. I feel like I'm trying manage a Windows system having to follow blogs to debloat, restore privacy, and restore security. GenAI/LLMs shouldn't be in my web browser. And, they should be opt-in, not opt-out in some confusing mix of GUI and about:config madness. If GenAI/LLM is so great, then make it an extension or a fork then let those folks use it from there. Don't bake it into the web browser.

I continue to use Firefox for uBlock Origin but I guess that would be possible with a Firefox-fork. However, I am just tired of having to continuously manage my Firefox browser and battle websites that only support Chromium-based browsers. If Firefox actually seemed intent on improving security and privacy then I could find the motivation but this GenAI/LLM nonsense seems the point of no return.

On my Android phone, I've switched to a Chromium-based browser given the poor state of security and hardening for the vanilla Firefox. I keep IronFox on hand but it is just easier to surf the web with a Chromium-based browser due to many websites just working better. Why should I deal with the pain and frustration of limited Firefox support when Firefox isn't even keeping up with security hardening?

As for desktop, the Firefox browser just doesn't seem as snappy or stable as I would expect. Firefox for Linux is still not supported for Slack Huddles. How is it 2026 and Mozilla/Firefox are still not fully functional with one of the major business chat platforms? Yes, I know this primarily a Slack and AWS-Chime-SDK problem but it is also a Firefox problem because there isn't much that a user can do. I've tried to prod Slack and the AWS teams numerous times to support Firefox but they've just done nothing. I also see nothing being done by the Firefox team, too.

Another example is the EdgeSuite CDN. Nearly always they block my traffic when I use Firefox. Switch to a Chromium-based browser and EdgeSuite is much less likely to block me. This is fairly consistent for the retail and financial institutions I use.

As far as I am aware, many of the security concerns brought up by Madaidan in 2022 still hold true for Firefox today, especially for Android and Linux. If this is no longer true, then it might be good for the Firefox team to post a rebuttal or update clarifying the current state of Firefox. The average users such as myself only see the Madaidan blog post and have to take it at face value. https://madaidans-insecurities.github.io/firefox-chromium.html

Anyway, I don't see a way ahead for me and Firefox but maybe you can convince me. It just seems like Firefox and Mozilla have lost their way. They no longer seem focused on security and privacy. Instead they're forcing privacy, security, and system resource disasters onto their userbases, just like Microsoft, Google, and every one of the major tech firms. I just don't see why I should use, promote, and even support Firefox going into 2026.

This happens occasionally for many months. It is still happening on v147.0.1. I start the computer, open Firefox, and the browser loads previously viewed pages, including my Gmail account. The Gmail page has me already logged in, and I DID NOT provide my password! This has to be a big security risk. If some one were to use my computer, or it was stolen, they would have complete access to my Gmail and all Google properties! OS - Debian GNU/Linux 12 (bookworm) Kernel v6.1.0-42-amd64 Firefox v147.0.1 (and MANY previous versions)

Some users are abandoning Firefox because of the difficulty of protecting against Firefox fingerprinting. Therefore, I strongly recommend adding an option in the settings that allows the digital fingerprints to be made random, or at least, if it is difficult, to make the fingerprints indistinguishable. This will help improve Firefox’s reputation and the privacy of its users. Love you all 3:

Hello

I would like to report an issue on Firefox If i work on my Private domain on my laptop my cursor is moving alone some time to time I have also sometimes intrusion after my CPU FAN run very high

I'm on Linux Mint last version but I have also the issue on Linux Mageia 10. (last version one month ago)

I have posted some question to mageia Team Post : viewtopic.php?p=92060#p92060 viewtopic.php?p=93642#p93642

My Suspicion so far from now : The problem is probably an HTTP Flood that permits access to User Security.

So I have two problems: • The problem of the cursor moving. • I also have my CPU fan increasing speed from time to time without reason after I change my User Password. ( Less noticed on Mint so far from now but it's doesn't mean it's better )

After reinstalling my laptop and not moving files, the issue generally occurs again. It's less occuring if I change my IP Address, meaning if my Internet Provider change IP everyday it's less occuring

I went to discuss it with an External IT Consultant (we tried to scan the laptop for viruses and found nothing with multiple antivirus programs, DocWeb, Kaspersky, … ISO Boot Scan). So the issue is probably only an intrusion without any virus, as a Security Leak Exploit on Firefox

(maybe an HTTP Flood Attack from my IP found when I connect to my Domain). Both issues generally occurred first if Firefox was open. It stops if I close Firefox.

It occurred after my work on my private domain. I strongly think, after experimenting with reinstalling, rebooting, etc.,

it’s a security bug or issue on Firefox that makes someone able to control “a little” the cursor when the cursor is moving on the page, which makes life very difficult when you work on your stuff. The cursor is able to go up and down, up and down, something like that. Sometimes it goes across or moves to the bottom of the screen suddenly. Only from the CursorPad. If I use the button mouse controller from my laptop keyboard, the cursor does not move in the same way, I believe. I didn’t try so much with an external mouse. I don’t want to hide the issue.

Trying to currently install a Gateway on my Personal Internet Broadband (but currently an issue because my new Gateway turned off and was not able to start anymore, so I sent it back to the Seller). So still waiting for this.

Issue on Mageia or Mint, so the problem does not come from the distribution, but ( I suspect ) it took time for the guy to come back to the same level. Of intrusion, They need to adapt to the new version of the Distrib. I suspect I'm not 100% sure I’m reporting it to Mozilla Firefox, Mint, and Mageia here.

Thanks for your help. ( I have lot of problem of Availability currently... I'm sorry if I'm not replying so much )

Demos95

---

NAME="Linux Mint" VERSION="22.3 (Zena)" ID=linuxmint ID_LIKE="ubuntu debian" PRETTY_NAME="Linux Mint 22.3" VERSION_ID="22.3" HOME_URL="https://www.linuxmint.com/" SUPPORT_URL="https://forums.linuxmint.com/" BUG_REPORT_URL="http://linuxmint-troubleshooting-guide.readthedocs.io/en/latest/" PRIVACY_POLICY_URL="https://www.linuxmint.com/" VERSION_CODENAME=zena UBUNTU_CODENAME=noble

Problem occured also on Mageia 9 and 10 last version

I run Firefox on a retro Linux system that is currently running a personal "Frankenbuntu". Basically, Kubuntu 14.04 LTS with lots of components updated either "in-tree" or via a pkgsrc-like collection of "ports" installed under /opt/local that includes GTk3, Mesa, VAAPI plugins etc. I use that tree with a combination of built-in rpath settings (for apps installed under /opt/local) and wrapper scripts setting LD_LIBRARY_PATH, so as to maintain the possibility to run system apps independently, in particular while booting. (Sounds complicated, but it's also a rewarding fun project for me, allowing me to keep using an old and familiar DE with modern features on 2017 hardware,)

I have never yet dared to update my glibc from the stock 2.19, so with every Firefox update I fear to run into problems with that. I do have a 2.27 build but that is installed in another parallel prefix (/opt/glibc/2) because one cannot simply use LD_LIBRARY_PATH to use a newer glibc (I think because the ELF interpreter, ld-linux.so, has to match).

I already use patchelf with success to change the ELF interpreter to the 2.27 one, for instance with Ferdium, a Node/Electron application. This works and as far as I can tell, it will load all Mesa and DRI components from my /opt/local tree so hw-accelerated video works as it should.

But when I try this with Firefox, I get what appears to be a sandboxing issue when attempts are made to load Mesa DRI libraries: ``` libva info: VA-API version 1.24.0 libva info: Trying to open /opt/local/lib/dri/iHD_drv_video.so libva info: Found init function __vaDriverInit_1_23 [GFX1-]: VideoBridgeParent receives IPC close with reason=AbnormalShutdown MESA-LOADER: failed to open iris: libsensors.so.4: cannot open shared object file: Permission denied (search paths /opt/local/lib/dri, suffix _dri) failed to load driver: iris MESA-LOADER: failed to open kms_swrast: libsensors.so.4: cannot open shared object file: Permission denied (search paths /opt/local/lib/dri, suffix _dri) failed to load driver: kms_swrast MESA-LOADER: failed to open swrast: libsensors.so.4: cannot open shared object file: Permission denied (search paths /opt/local/lib/dri, suffix _dri) failed to load swrast driver libva info: VA-API version 1.24.0 libva info: Trying to open /opt/local/lib/dri/iHD_drv_video.so libva info: Found init function __vaDriverInit_1_23 [GFX1-]: VideoBridgeParent receives IPC close with reason=AbnormalShutdown ``` Copying libsensors into /opt/local/lib turns the above error into the same one about the next library available in the system (/lib/x86_64-linux-gnu/libtinfo.so.5). The DRI module I actually need (iHD) does load but I still get the GFX abnormal shutdown error. I've tried the interpreter change in other applications using libva and don't see the issue.

I do see this in the syslog: ``` Aug 31 15:18:47 Bmbl kernel: [2043645.959690] MediaSu~isor #1[17692]: segfault at 290 ip 00007f2b0815b284 sp 00007f2ad913e990 e rror 4 in ld-2.29.so[7f2b0814f000+21000] Aug 31 15:18:47 Bmbl kernel: [2043645.959702] Code: 04 49 83 fc 06 44 0f 44 c8 81 e6 ff 7f 00 00 45 89 8f 08 04 00 00 48 8d 04 76 4d 89 b7 00 04 00 00 4c 8d 04 c7 4d 85 c0 74 0f <41> 8b 48 08 b8 00 00 00 00 85 c9 4c 0f 44 c0 41 8b 3e 6a 00 48 8d Aug 31 15:18:47 Bmbl kernel: [2043646.080407] MediaSu~isor #1[17732]: segfault at 290 ip 00007f2b0815b284 sp 00007f2ad913e990 e rror 4 in ld-2.29.so[7f2b0814f000+21000] ```

Any idea why this is, and what can be done to prevent this, beyond actually updating my system glibc? I'd have no problems disabling sandboxing.

I am using version 143 for Linux and it is suppose to have improved fingerprinting protection. But when I go to https://coveryourtracks.eff.org i still see a result that says "your browser has a unique fingerprint"

Is there a parameter I should be enabling ?

Using the "re-open tab" function on a browser based discord instance changed a bunch of my settings, for one it turned on vertical tabs, added extra side bars to everything, and made every ui element animated. Ive figured out of how turn vertical tabs back off, and while I was writing this, I figured out where to turn off this stupid animated gizmo to select what I actually want, instead of directly bringing up my bookmarks/history. How do I stop a random website from overriding my settings in the future? If discord can do it through incompetence another website can surely do it maliciously and I really dont fancy this happening again. The "best" (and completely unrelated) I've found on how to undo this, let alone prevent it from happening again is pressing esc or f11 because of course everything these days has to drown in AI slop :/

Firefox security features warning on Linux doesn't explain what kind of file to add to apparmor.d/firefox-local. Is it a .txt file, or something else?

If Firefox becomes an "AI browser" as it's new CEO says I will switch to another browser. The privacy and environmental problems alone are enough for me to warrant this change, to say nothing of how it's slowing the browser itself down and making it worse. I'm sick and tired of AI shoving itself into every single aspect of life, taking things that already worked fine on their own and making them worse for no reason, in addition to ruining the planet and encroaching more and more on the privacy of everyday folks like myself. Anthony Enzor-DeMeo's insistence that we should "trust" this hypothetical version of the browser is frankly sickening, and everyone involved in this scam should be ashamed.

Hey

I'm genuinely curious about Firefox BTS in this scenario.

Example: I open website (http://homedevice:1000) and it requires me to log in. Then I log in at (http://192*:1000) and it requires me to login. "homedevice" is a domain name for 192*, yet I still have to log in twice for the same IP under the same port. Why is it treated seperately the homedevice:1000 and the 192.*:1000 address?

Greets

I have picked up some bug(s) on my Firefox that I cannot figure out how to get rid of. With a Firefox ID I have warnings of 3 Trojan Virus detected, Virus detected, hard drive infected, secure data notice and system alert. I also got a warning that my McAfee protection had expired which is very strange. Since switching over in 2010 from Windows to Linux I have never had protection of any kind and unlike Windows have never had a single problem. In addition when I was using Windows the protection that I had was never McAfee. I suspect that these warnings are not from Firefox given the misprints, spelling errors and the poor English. It is likely phishing from some third world country. How do I get rid of this obvious garbage permanently? Many thanks! Kris

chrome logs onto my email without me entering password, and facebook under firefox stays logged in even when i log out with no password. i neeed help forget the vfb but my [redacted] @gmail.com email is dangerously in jeprody