spoiler
they are not
Software like Firefox is designed in a modular way for humans to be able to reason about its correctness. It is complex, but not arbitrarily complex.
So take out the free VPN and Pocket and it’ll be less complex! ¯\(ツ)/¯
“Complex but not arbitrarily complex”? I need more coffee this morning already because I’m burning through my patience for idiotic things at an accelerated rate.
Firefox Forks (Waterfox/Librewolf/Ironfox) my beloved
Yeah, let’s all use a fork that doesn’t patch those AI slop vulnerabilities.
… You do realize that security patches are upstreamed, correct? These forks just don’t include the ads, AI, or built-in VPN.
Didn’t some of those promise not to merge AI slop? I guess I misunderstood.
Depends on the fork. The MPL largely allows the forks to do as they please, so feel free to check their blog posts and patch notes for reference.
They killed Pocket (they didn’t just remove it from FF) some time ago.
We got the worst of both worlds. The Pocket functionality got Ship of Theseus’d: The original functionality is all gone, and what remained became a Mozilla-run ad/news network. They removed the Pocket label last.
Ah yes, nothing wrong with vibe coding security fixes in a browser.
InfoSec is actually one field that AI can be useful for.
