Mozilla is pushing back against UK proposals that could restrict or age-gate VPN services, arguing that VPNs are important privacy and security tools that should not be weakened. The company says VPNs protect users from tracking, cyberattacks, censorship, and data collection, and are widely used by students, remote workers, journalists, activists, and everyday internet users. Mozilla argues this could create privacy risks, as people would need to share personal information to access tools designed to protect their privacy. Mozilla also warned that limiting VPNs would not solve online harm. Instead, governments should hold platforms accountable, improve digital education, and support safer online experiences without weakening internet privacy.

Mozilla used a new AI tool called Claude Mythos to find 271 security problems in Firefox, and all of them have been fixed in Firefox version 150. The team built a special testing system to verify the AI's work. This ensured almost none of the reports were false alarms, as the AI creates simple test pages that run on a special test version of Firefox where a crash proves a real bug The fixed bugs include 180 very serious issues, 80 medium issues, and 11 small issues.

We partnered with Mozilla to test Claude's ability to find security vulnerabilities in Firefox. Opus 4.6 found 22 vulnerabilities in just two weeks. Of these, 14 were high-severity, representing a fifth of all high-severity bugs Mozilla remediated in 2025.

Last 2024 #donation# request. I donated to: @ACLU @NAACP @InternetArchive @Wikipedia @PPact @Mozilla** @EFF @CalAcademy @deYoungMuseum @Exploratorium @MontereyAq @SFMOMA @SFParksAlliance #Donate# to ^ that resonate **Disclosure: I work for @Mozilla More:

DAILY SITUATION RECAP: Nvidia releases an open letter advocating for open-weights models. The letter urges government to support the open models ecosystem, and is signed by a number of companies including Andreessen Horowitz, Arena, Black Forest Labs, Box, Dell, Hugging Face, IBM, the Linux Foundation, Meta, Microsoft, Mistral, Mozilla, Palantir, Perplexity, Replit, and Y Combinator. Nvidia CEO Jensen Huang joined X just for this post, which is currently at 112k likes and 30.3M views. Huang has accumulated over 500k followers in less than 12 hours. New information about the OpenAI/Hugging Face incident has been released. The agent first attempted to break out of its sandbox on July 9, and the intrusion at Hugging Face lasted from July 11-13. Hugging Face published a blog post on July 15, but did not know the source of the attack. OpenAI took until July 18-19 to notice that the agent had escaped. The companies only communicated about the incident for the first time on July 20, and published their blog post on July 21. OpenAI recorded one case of an agent leaving notes for future versions on how to escape from OpenAI’s sandbox infrastructure. Midjourney is acquiring astrology app Co-Star. CEO Banu Guler will join Midjourney as Chief Design Officer. Midjourney will be using the Co-Star team to help design their upcoming image generation app. Midjourney, founded in 2021 as an image generation company, keeps expanding into new areas like medical devices. Elon Musk says Grok 4.6 in 2 weeks and Grok 4.7 in 4 weeks. Grok 4.5 is currently the best coding model in its price range, so we’ll see if the next models compete on price, frontier intelligence, or something else (maybe both?) Written by @theojaffee. Read more at link in bio.

ANTHROPIC’S MYTHOS HELPED RESEARCHERS FIND MACOS BUGS WSJ reports Calif researchers used techniques from Anthropic’s Mythos AI testing to find two macOS bugs. The bugs were linked into a privilege escalation exploit. Apple is reviewing a 55-page report and details are expected after patches. Calif says Claude helped build the exploit code in five days, but human researchers were still needed to make the chain work. Mozilla’s recent Mythos results were also notable: 271 Firefox bugs identified for Firefox 150 180 rated high severity 80 moderate 11 low 423 total Firefox security bugs fixed in April

Stop Killing Games has joined a big coalition pushing back against new age verification laws that claim to be for our safety. Big companies can afford the costly ID checks and rules, while small teams, fan fixes for private game servers, and community projects usually cannot. These are exactly what keep old games alive after the makers stop supporting them. One example is the free browser game Urban Dead, which ran for nearly 20 years until its solo developer shut it down in 2025 because UK rules made it too hard to continue. Stop Killing Games signed an open letter with groups like Mozilla and the Electronic Frontier Foundation. The letter says that while protecting kids online matters, these wide age checks create new gatekeepers, collect private data, and shrink the open web. Some of that the rules could make private servers and even some Linux systems illegal in places like California. Games we own should stay playable