Rather than downloading random binaries from random forks (or clamour for governance at the sidelines), you can take back more control by building your own fork.
Librewolf and Waterfox are two fine choices to use for upstream sincr they have saner defaults and make the forking and building easier to wire up.
Ive been running my own FF fork for a few years like this now.
> Firefox also shares information with our marketing partners to measure and improve these campaigns; what information is specifically shared varies (depending on how you discovered Firefox and your operating system) but generally includes how you were referred to our download page and whether you actively use Firefox. Where Firefox is pre-installed on your device, technical and interaction data (your device type and whether Firefox is used) will be sent to our marketing partners, and shared with Mozilla. Learn more about what is collected and shared, and how to opt out.
This is new (There's no link or further reference for that "learn more" in context)
> We may also be required to process your personal data to comply with applicable laws and protection purposes, such as:
> (...)
> Identifying, investigating and addressing potential fraudulent activities, or other harmful activities such as illegal activities, cyberattacks or intellectual property infringement (including filing or defending legal claims).
> Performing internal compliance and security activities, such as audits and enterprise security management.
---
Being US, how far stretch is it to imagine PII being under scope for some anti-DEI (aka anti-terror) audit? Also you better switch browsers if you'll ever be in a lawsuit with Mozilla I guess...
Per my comment on another message, it seems like Matt was telling the truth, but not the whole truth, which is probably more than he was legally required to do.
Right. In current environment it would certainly behoove any other attacker to associate themselves with assumed DPRK entities. Why not take inspiration of their laundering patterns and "donate" some fraction of the bounty to their wallets as cover?
Pinning things on Lazarus is in interest of US agencies, the victim themselves, and industry media.
It's the only desktop application I've consistently installed on every desktop for that long. This is the end of that era and ends the streak.
It's as frustrating as it's sad.