Show HN: Kairos – Open-source risk and fraud decisioning platform
Kairos is an open-source platform for real-time event intelligence and fraud and risk decisioning. It focuses on analyzing financial behavior to support risk decisions. (github.com)
Firefox Security and Privacy Newsletter 2026 Q3
attackanddefense.dev9 points0 comments
Firefox’s Q3 2026 security work focuses on delivering fixes faster and making potential risks more visible. Since September, a quicker release cycle has brought security improvements to users sooner, while Mozilla says it is using advanced language models to help find and fix vulnerabilities. Security advisories now distinguish individual internally discovered memory-safety bugs rather than grouping them under one CVE. From Firefox 157, warnings will alert users when their TLS connection may be less private - for example, if an administrator has configured encryption-key recording. Mozilla also strengthened requirements for public certificate authorities, blocked websites from repeatedly opening email-composition windows without user action, and made local-file access unavailable to extensions unless users explicitly grant permission.
Privacy additions include research showing how Firefox limits audio fingerprinting, and an expanded “Copy Clean Link” feature that removes tracking parameters across subdomains and recognizes 130 more parameters. Firefox 153 brings Containers into the browser, separating cookies and sessions for different activities or accounts; users can reorder containers starting in version 155. Android’s Privacy Dashboard now identifies categories of blocked trackers, while Firefox for iOS adds built-in ad blocking alongside Enhanced Tracking Protection. The newsletter also describes Mozilla’s participation in web-security research and education, including work on vulnerability detection, cross-site scripting defenses, and networking protocols. A security research summit at TU Delft is planned for November, connecting Mozilla engineers with academics to explore future security and privacy challenges.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
More in Security
DOJ warns FBI data breach likely extends to Justice Department employees
The DOJ warned that a data breach involving the FBI likely also affected Justice Department employees. The warning indicates the breach may extend beyond the FBI. (politico.com)
AI Agents Used by Railway Breach Systems of Rival Primcloud
AI agents were used by Railway to breach systems belonging to rival Primcloud. The incident involved an attack on a competing cloud provider’s infrastructure. (securityboulevard.com)
I Dumped Apple's Fucking Word List
macOS includes a profanity-usage database designed to track swear words by app and recipient so autocorrect can adapt, though the author’s database stayed empty. Apple’s system dictionary privately classifies words across 15 languages by offensiveness and topic, with surprising labels for some names and terms. (helgesver.re)
Apple opens the door to a nightmare world of always-listening tech
Apple plans to add Apple Watch features that continuously listen and turn nearby conversations into transcripts or daily summaries, while saying audio isn’t stored and summaries are encrypted. Privacy experts warn the features could normalize intrusive listening, encourage less secure copycats, and conflict with recording-consent laws in some U.S. states. (this.weekinsecurity.com)
$20M in Fines and Vizio Smart TVs Opt Out of Spying Option Does Nothing
A Northeastern University study found that Vizio smart TVs kept sending the same amount of network traffic after users turned off tracking, while results varied across other brands. The findings raise doubts about whether Vizio’s opt-out controls work, despite $20 million in fines. (pcper.com)