Firefox 159.0 is out: the two-week development cycle begins to show

Posted on by Martin Brinkmann

Mozilla released Firefox 159.0 a moment ago. The new stable version of the open source browser introduces just a few new features, fixes bugs and also security issues.

Mozilla highlights two new features in the official release notes. The first adds the /watch command to Smart Window, the optional AI feature of the Firefox browser. This enables watching webpages for changes. The second change enables the native macOS share picker on devices running the operating system.

Other than that, Mozilla lists mostly fixes for issues in the release notes. Notable is a fix for excessive memory use in Firefox for Linux on devices with AMD graphics when “viewing map or place results on sites such as ChatGPT”.

Furthermore, the issue that Firefox failed to load certain sites due to “falling back to HTTP/2 when the site rejected an HTTP/3 request” has been fixed as well.

Lastly, there is also a fix for rapid memory usage “when sites such as the Zoom web app were left open in a minimized window”.

The fixed security issues have an aggregate rating of high, the second highest after critical. Plenty of fixes this time, but no mentioning of exploits in the wild. Still, I recommend upgrading as soon as possible. Updates for the supported Firefox ESR releases fix security issues as well.

The two-week development cycle reduces the number of new major features in browsers such as Firefox or Google Chrome further. It is not a major problem, as the benefits of shipping new versions seem to outweigh this for the developers.

However, users who liked to browse new releases to see what is new will likely be disappointed more often.

Windows 11 26H2 is now available for nearly everyone, but you shouldn’t rush it

Posted on by Martin Brinkmann

It took about a month to go from first availability to a widespread rollout. Microsoft confirmed that the new version of Windows 11 has reached general availability and should therefore be available to most users.

Microsoft says that users may find the update with a click on the “check for updates” button in Settings > Windows Update. If the Windows 11 version that is installed at the time on the device is eligible, version 26H2 should be returned.

You need to press the download & install option then to install the new version. Since it is just a smaller update, a single restart does the trick. All devices running Windows 11, version 24H2 or later should update very quickly.

What about new features? Microsoft confirms that all the recent features of versions 24H2 and 25H2 are also included in the latest feature release.

Furthermore, Microsoft claims that all known issues are either mitigated or resolved at the time of writing.

With that out of the way, Windows users should not feel a need to rush and install the update. It is still just a month after release and it does not come with a plethora of exciting new features that make life better or more secure.

My advice is to wait at least another month or two before taking the plunge. Yes, there is a great chance that nothing will break when you finally install the update, but since there is not much to gain from installing it in first place, it is probably better for most users to play it safe.

It is also a good idea to create a backup of the system before installing the update. It may be small, but even small updates may cause big issues and a third-party update that is independent from Windows’ own capabilities is always a good idea.

Google may use content from Drive, Gmail and Photos for personalized ads: how to prevent it

Posted on by Martin Brinkmann

The rise of artificial intelligence is also bringing along with it new opportunities for advertising and marketing companies.

Google has updated its privacy policy recently according to a report by Android Authority that allows it to use content from Google Drive, Gmail or Photos for personalized advertisement.

Up until now, Google did not use the content for showing personalized ads when customers interacted with AI services and tools.

The updated policy adds an exception to the general rule. Google writes:

We don’t show you personalized ads based on your content from Drive, Gmail, or Google Photos, unless you choose to make data from these services available to other Google services that support personalized ads.

In other words, if you allow Google services to access content from Google Drive, Gmail or Google Photos, personalized advertisement may use that content for showing ads to you. Google reaffirms customers that advertisers won’t get direct access to a customer’s file, photos, names, email addresses and other personal data.

While that means that customers have to allow Google to connect the services in first place, prompts to do just may be shown in regular intervals to users who use Gemini and other Google services.

You can verify if you have given Google permission for access already and can also revoke it. Downside to revoking is that certain Google services may no longer use the information for personalized suggestions or answers.

  1. Load the main Google account website: https://myaccount.google.com/
  2. Switch to Data & privacy.
    1. If you see that Personalize Search is set to Off, you have nothing to worry about.
  3. Otherwise, select Personalization settings under Personalization & activity.
  4. Choose Manage Personalized Recommendations in Search Services.
  5. Find Connected Content apps under Additional Personal Intelligence.
  6. Disconnect Google Workspace and Google Photos there.

Cookie Banners are here to stay, but there will be exceptions

Posted on by Martin Brinkmann

So called cookie banners are nearly everywhere on today’s Internet. What started out as a rule to give users more control over cookies turned into an annoyance pretty quickly.

With banners on many sites, users started to spend a lot of time reacting to these banners to get them away. Extensions were created that would do away with the banners automatically and other workarounds were created to lighten the burden.

Talks about changing the legislation in the European Union started some time ago. The initial idea was to introduce controls in browsers. Users would have to set their preference there and the browsers would do the rest.

This proposal seems to be off the table. The new solution wants to increase the number of exceptions. The main idea is that certain cookies can be set without permission of the user visiting the site. This includes service delivery, audience measurement and device security according to the new draft.

Sites would no longer have to display cookie banners to the user for getting permission to set these types of cookies. The rules remain for other types, including advertisement that relies on tracking.

Ideally, if the change passes, website visitors would see less cookie banners than they see right now. The change is a massive undertaking, as scripts, extensions, plugins and code need to be rewritten to comply with the new rules.

However, it may still take a while before — if — the change becomes the new status quo. For now, on of the better options to deal with cookie banners is to use extensions or browsers that try to disallow everything that is necessary or get rid of the banners entirely, which would automatically mean that the user has not given the site any permission to set cookies.

Google Chrome may now warn users before visiting “suspicious” websites

Posted on by Martin Brinkmann

Google announced that it is improving Chrome’s Enhanced Protection feature. The new “suspicious” website warning may pop up on sites that exhibit “deceptive patterns commonly associated with known malicious sites” Google writes on its security blog.

The feature follows the downloads warning system that Google implemented in Chrome in 2024. It differentiated between suspicious and dangerous downloads.

A dangerous rating for a download is the result of a “high confidence verdict” and means that there is a high risk of harm.

Suspicious on the other hand means that Chrome’s security feature has a lower confidence in the verdict and that there is “unknown risk of user harm” associated with the download.

Translated for websites, a suspicious rating means that a site could contain harmful elements whereas a dangerous rating means that there is a higher risk of it containing harmful content.

When Enhanced Protection detects a suspicious website, it displays a prompt in the upper left corner of the browser window saying “this site doesn’t seem right”. The site is grayed out and users have several options to deal with the warning, including adding the site to an allow-list and going back to a safer location.

Dangerous sites, those that Chrome determines pose a high risk to users, show the usual “dangerous site” full screen warning instead.

Is it a useful feature? It depends on how well its rating system works and also on the experience level of the user. It may serve inexperienced users well while experienced users usually know what they are doing and have other protections, like content blockers, installed that improve security significantly.

How to enable this right now

Google is rolling out the feature over time to all Chrome users. If you do not want to wait, or prefer to disable the feature if it landed already, you can do so in the following way:

  • Load chrome://flags/#suspicious-site-warnings in the browser’s address bar.
  • Set the flag to True to enable suspicious site warnings or to False to disable the feature.
  • Restart Google Chrome.

ClickFix Protection

Google is also rolling out another security improvement. ClickFix describes malicious attacks that try to get users to run commands on their computer, usually by pasting and running them.

Google says that Chrome is now detecting suspicious commands a user copies. The command is submitted to Safe Browsing for analysis and a warning is shown if the analysis concluded that the script is dangerous.

Some Windows users can’t sign in to some of their Xbox games currently

Posted on by Martin Brinkmann

Reports suggest that some players on Windows 11 PCs can’t sign in to their Xbox accounts in certain games anymore. The issue started to appear for affected users after installation of recent updates for the operating system.

A thread on the Microsoft Learn website exemplifies the issue. The user writes:

No matter what I do, I get the above error trying to sign in to Microsoft Solitaire & Casual Games. I have a subscription. I’m signed on to XBOX with my browser, but the game won’t sign in and I have to play as Guest without all my settings & how far I’ve gotten with various games in that collection. HELP! Bots are useless and I’m spending too much time reading instead of playing. What a waste of my time. I’m getting charged for that game whether I can play it or not.

My machine installed a Windows Update before this started happening. I played yesterday for a while, so it’s not my computer, dangit. How can I be logged in with my browser, but not inside the game. I supposedly cleared cache, tried to reset, and reinstalled XBOX Live and the game.

Considering that this post got 21 comments and that there are more than 90 posts with the same question on the website already, it appears that the issue is widespread.

Games like Microsoft Solitaire, Microsoft Mahjong and even Gears of War 4 are listed as affected by the users.

Microsoft has not acknowledged the issue at this point. There is no entry in the list of known issues for recent versions of Windows 11 and no Microsoft representative has posted a reply on the forum.

One user suggested that the issue is caused by an Xbox Live Service connection issue. The official status page for Xbox Services does not list any issues, however.

At least two users said that they rolled back to a previous state of their Windows 11 system and that they experienced the issue still. While not confirmed, it is probably best to wait for an official statement by Microsoft before making rushed changes to an otherwise fine running system.

Latest Windows updates break Smart App Control on some devices

Posted on by Martin Brinkmann

Recently, Microsoft changed the security feature Smart App Control on Windows so that it could be enabled on existing installations. Previously, the feature could only be activated on new systems. Even worse, once turned off, it could not be enabled again without setting up the system anew.

Clearly, this meant that many Windows users never came into contact with the feature in first place. Microsoft changed the behavior so that Smart App Control could be enabled on all Windows devices.

This week, the company had to admit that the most recent Windows updates could cause problems with enabling the security feature on Windows devices.

After installing this update, some devices might be unable to turn on Smart App Control in the Windows Security app if it has been turned off. On affected devices, the option to turn on Smart App Control might be grayed out.

Devices where Smart App Control is already turned on are not affected and remain protected.

Good news is that the issue does not affect systems with Smart App Control enabled. However, it may affect Windows users who want to enable the feature, as they may not be able to do so.

Even better, there is a Registry workaround that should enable the toggle functionality again.

Option #1: Modify the registry

You can modify the registry to restore the ability to turn on Smart App Control by following these steps:

Open a Command Prompt window by typing cmd in the Search box.

Select Run as administrator.

At the command prompt, enter the following commands. Then restart the device.

reg add “HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides” /v 2883193997 /t REG_DWORD /d 1 /f

reg add “HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides” /v 2850574478 /t REG_DWORD /d 1 /f

Option #2: Install a Group Policy

IT administrators can instead choose to mitigate this issue for enterprise-managed devices managed by IT departments by installing and configuring the special Group Policies listed below.

Group Policy downloads with Group Policy name:

  • Download #1 for Windows 11, versions 24H2, 25H2, and 26H2 — KB5074105 261015_19222 Feature Preview
  • Download #2 for Windows 11, versions 24H2, 25H2, and 26H2 — KB5074105 261015_19221 Feature Preview

Important: You should install and configure both Group Policies to resolve this issue. The first Group Policy is needed to turn on Smart App Control. The second Group Policy ensures that logging is available to assist with troubleshooting in case any problems arise.

The special Group Policies can be found in Computer Configuration > Administrative Templates > {Group Policy name} > Windows 11, version 24H2, 25H2. After installing the Group Policies, configure the value for both settings to Enabled and restart your device(s) to apply the Group Policy settings.

Should you use it?

While Smart App Control may sound good on paper with its threat blocking happening before actual execution, its lack of exceptions makes it highly problematic. Furthermore, since it relies on online checks, it may also be problematic from a privacy point of view.

More and more companies create software using AI tools

Posted on by Martin Brinkmann

The rise of AI systems fueled several trends: from AI generated articles over media generation to coding. The latter has been at the forefront of interest by some companies.

The idea is simple: instead of paying engineers a lot of money to create or improve software, you use AI for the most part. This allows you to “let go” of employes that are no longer needed.

The result? More money in the pockets of the organization and less human workers to worry about.

But there is a problem. At least some of the creations are not well-liked or can even be considered AI slop.

Update: Sega announced that it has pulled the remake of Shogun 2 from stores and reinstated the old version.

Two examples to illustrate the point. Epic Games “vibe coded” its new store. Yes, the same Epic Games responsible for Unreal Engine, one of the most widely used development systems for digital games.

At least some users showed off some bugs on X, others recommended removing any payment methods as vibe coded software did not give them confidence in the quality of the code.

Epic Games confirmed that the new client is unfinished and is asking customers to report bugs that they encounter.

Then there is the remake of Total War: Shogun 2 by Creative Assembly and Sega. It appears that the developers used AI to upscale graphics, removed the classic version from Steam to charge more for the remake and give gamers no other option.

The game has over 80 percent negative comments on Steam at the time of writing, mostly because of the use of AI and not disclosing that AI was used.

It seems likely that the use of AI in software products and elsewhere is going to rise in the coming years. The best way to deal with it is to avoid products that do not offer the same quality as purely human-coded software.

Mozilla launches Firefox Enterprise and Thunderbird Enterprise

Posted on by Martin Brinkmann

For years, Mozilla offered Firefox ESR to businesses and Enterprises. While the organization implemented features aimed specifically at managing Firefox on large fleets of devices, it never offered a specific Firefox version for Enterprises.

This changes today with the introduction of Firefox Enterprise (and Thunderbird Enterprise):

Firefox Enterprise is built for organizations with strict security, governance, and compliance requirements. It pairs the Firefox browser, built on Mozilla’s independent Gecko engine, with a management console organizations can run on their own infrastructure. From that console, IT teams can centrally manage browser policy and access, govern how data moves through the browser and set controls around AI use.

Mozilla says that Firefox Enterprise is giving organizations more control, not only over the browser but also over the infrastructure that is managing it. The highlight features are sovereignty, control and resilience according to the official website.

As far as features are concerned, here are the highlights:

  • Centralized policy control — manage browser behavior across endpoints
  • External connection controls — govern browser callouts and telemetry
  • Native DLP — warn or block sensitive data actions by domain
  • AI controls — allow, restrict or disable AI tools
  • SIEM integration — export browser events and audit activity
  • Lockdown Mode — harden high-risk or restricted browsing
  • Extension governance — allow or block add-ons organization-wide
  • Professional Support included — private triage and defined response times

Firefox Enterprise is rolling out in select European markets first, with France, Germany, Austria and Switzerland in the beginning.

Brave Debloater: Remove potentially unwanted features of Brave Browser

Posted on by Martin Brinkmann

Brave Debloater is an open-source PowerShell script designed to remove the extra, often unwanted features (bloatware) that come bundled with the Brave Browser, such as crypto wallets, AI chatbots, and sponsored content. It works across Windows, macOS, and Linux.

What Does Brave Debloater Do?

Instead of manually clicking through menus to turn off various features or using policies, Brave Debloater turns off the features in one swift operation instead.

Specifically, it can disable and hide:

  • Crypto & Paid Features: Brave Rewards, BAT prompts, Brave Wallet, and Brave VPN.
  • Add-on Services: Leo AI Chat (sidebar and address bar), Brave News, Brave Talk, Playlist, and Email Aliases.
  • Telemetry & Tracking: Brave’s P3A telemetry, stats ping, Web Discovery, Chromium metrics, and URL-keyed data collection.
  • Clutter (using the “Extreme” preset): Sponsored new tab backgrounds, new tab cards, shopping lists, QR generators, and the Google search side panel.

Is it Safe?

Many Windows debloat scripts aggressively delete system files, patch binaries, or mess with the hosts file, which can break your system or browser. Brave Debloater takes a much safer, standardized approach.

It uses official Enterprise Policies: Rather than modifying individual files of the browser, it tells your operating system to enforce official Chromium/Brave enterprise policies (e.g., writing native registry policies on Windows or JSON policies on Linux). This is the exact same method IT departments use to manage browsers on company computers.

In doing so, it does not weaken security. Furthermore, you can use a preview mode feature. This lists the changes that the script does without applying them.

For recovery, it creates a backup that you can restore at any time. Lastly, any change that it makes is highlighted on brave://policy, a native page of the browser listing all changes enforced by policies on the device.

If you like Brave’s ad-blocking but dislike the crypto integrations, AI tools, and telemetry, Brave Debloater is a safe option to remove unwanted features. While you can make the changes manually as well, doing so would take much longer for most users, but it would mean that you would stay in full control during the entire activity.