Creating and maintaining privacy friendly free and open source software since 2014.
they/them
| Website | https://divested.dev |
Firefox 147 for Android enabled per-site process isolation, notably without using Android's strong isolatedProcess confinement feature.
Today's 147.0.2 however disables it again and they didn't even mention it in the release notes: https://bugzilla.mozilla.org/show_bug.cgi?id=2011886
Today's real-ucode update now lets you mitigate the recent TSA vulnerability even if your system hasn't received the microcode signing update from the beginning of the year.
https://divested.dev/pages/blog#2025-07-14-resigned-ucode
Big thank you to AMD, Linux, and the vendors for dropping the ball and leaving a ton of systems unpatchable using normal means.
Fresh results of ECH availability on the top 10k domains: https://divested.dev/misc/ech.txt
I've updated the script to also discern between hosted on Cloudflare or not.
And I've published the script, which I thought I did long ago: https://github.com/divestedcg/ech-tester