Apple Mail and Hidden Tracking Images

John Gruber, writing at DaringFireball: In my piece yesterday about email tracking images (“spy pixels” or “spy trackers”), I complained about the fact that Apple — a company that rightfully prides itself for its numerous features protecting user privacy — offers no built-in defenses for email tracking. A slew of readers wrote to argue that Apple Mail does offer such a…

Developer Claims Chrome Uses 10x More RAM Than Safari

MacRumors writes:
Under normal and lightweight web browsing, Google Chrome uses 10x more RAM than Safari on macOS Big Sur, according to a test conducted by Flotato creator Morten Just (via iMore). In a blog post, Morten Just outlines that he put both browsers to the test in two scenarios on the latest version of macOS. The first test was conducted on…

Apple Will Proxy Safe Browsing Traffic on iOS 14.5 To Hide User IPs from Google

Apple’s upcoming iOS 14.5 release will ship with a feature that will re-route all Safari’s Safe Browsing traffic through Apple-controlled proxy servers as a workaround to preserve user privacy and prevent Google from learning the IP addresses of iOS users. From a report: The new feature will work only when users activate the “Fraudulent Website Warning” option in the iOS Safari…

Safari 14 Added WebExtensions Support. So Where Are the Extensions?

At WWDC last year, Apple announced it was going to support Chrome-style browser extensions (the WebExtensions API) in Safari. Months after Safari 14’s release, are developers bothering with Safari? Jason Snell: The answer seems to be largely no — at least, not yet. The Mac App Store’s Safari extensions library seems to be largely populated with the same stuff that was…

Adobe Flash Is Officially Dead After 25 Years With Content Blocked Starting Today

When a user attempts to load a Flash game or content in a browser such as Chrome, the content now fails to load and instead displays a small banner that leads to the Flash end-of-life page on Adobe’s website. While this day has long been coming, with many browsers disabling Flash by default years ago, it is officially the end of…

Apple, Google, Microsoft, and Mozilla Ban Kazakhstan’s MitM HTTPS Certificate

Browser makers Apple, Google, Microsoft, and Mozilla, have banned a root certificate that was being used by the Kazakhstan government to intercept and decrypt HTTPS traffic for residents in the country’s capital, the city of Nur-Sultan (formerly Astana). From a report: The certificate had been in use since December 6, 2020, when Kazakh officials forced local internet service providers to block…

Firefox 84 Claims Speed Boost from Apple Silicon, Vows to End Flash Support

The Verge reports: Firefox’s latest update brings native support for Macs that run on Apple’s Arm-based silicon, Mozilla announced on Tuesday. Mozilla claims that native Apple silicon support brings significant performance improvements: the browser apparently launches 2.5 times faster and web apps are twice as responsive than they were on the previous version of Firefox, which wasn’t native to Apple’s chips……

Google Sued After Mobile Allowances Eaten Up By Hidden Data Transfers

Slashdot reader Iwastheone shared this report from the Register: Google on Thursday was sued for allegedly stealing Android users’ cellular data allowances though unapproved, undisclosed transmissions to the web giant’s servers… The complaint contends that Google is using Android users’ limited cellular data allowances without permission to transmit information about those individuals that’s unrelated to their use of Google services… What…

Brave Browser First To Nix CNAME Deception

An anonymous reader quotes a report from The Register: The Brave web browser will soon block CNAME cloaking, a technique used by online marketers to defy privacy controls designed to prevent the use of third-party cookies. The browser security model makes a distinction between first-party domains — those being visited — and third-party domains — from the suppliers of things like…

Seven Mobile Browsers Vulnerable To Address Bar Spoofing Attacks

In a report published today by cyber-security firm Rapid7, the company said it worked with Pakistani security researcher Rafay Baloch to disclose ten new address bar spoofing vulnerabilities across seven mobile browser apps. From a report: Impacted browsers include big names like Apple Safari, Opera Touch, and Opera Mini, but also niche apps like Bolt, RITS, UC Browser, and Yandex Browser….