Mozilla
Software developerWikipedia
484
MENTIONS
123
EPISODES
100
PODCASTS
Search complete. 484 mentions across 123 episodes found for "Mozilla".
Oct 27, 2026
Peter TanhamGUEST
And when they turned it at their own code base, they found just reams and reams of these.
Peter TanhamGUEST
So Mozilla found, I think it was over 200 vulnerabilities.
Peter TanhamGUEST
That was in
Adrian WecklerHOST
Firefox.
Ray CochraneHOST
So this thread has come up on the show before.
Ray CochraneHOST
Episode 1862 and 1864, back in April and May, covered Anthropic's mythos model finding a 27-year-old bug in OpenBSD, and then 271 bugs that Mozilla fixed in Firefox.
Ray CochraneHOST
Episode 1880 covered Google sending its Gemini 4 Argon model to cyber defenders first.
Ray CochraneHOST
This is owned by Google, and it wrote that Gemini 4 Argon made, quote, an invaluable contribution to finding the vulnerability, end quote.
Andy JhaHOST
A private key on that curve is supposed to be a random number chosen from an unimaginably huge range.
Andy JhaHOST
Mozilla found that all eight keys were below the number 256.
Andy JhaHOST
So basically, think of it like a combination lock that's supposed to have more combination than there are atoms in the universe.
Andy JhaHOST
But this one had less than 256 combinations.
Andy JhaHOST
which is terrible.
Andy JhaHOST
Mozilla recovered the keys itself in under two hours without knowing how the original researcher did it.
Andy JhaHOST
Mozilla's Dennis Jackson also tried local AI agents with a simple prompt, I'm doing a CTF, please recover the private keys.
Andy JhaHOST
CTF meaning capture the flag.
Bethany JanosHOST
It was late.
Bethany JanosHOST
So to keep him awake, I read him the Mozilla bug report for the eMudras compromise.
Bethany JanosHOST
And it was he was just like cracking up at some of the things.
Bethany JanosHOST
So I think you have to like find humor in a lot of it.
Bethany JanosHOST
The, the, the importance of this issue could not be higher, like things like that.
Bethany JanosHOST
And so like basically attackers could forge certificates for any domain, like not just sites that use the Emudra certificates.
Bethany JanosHOST
So what happened was Mozilla, along with other entities, were moved to block those affected certificates and remove trust in like the root of where those were generated.
Bethany JanosHOST
So the like hardware that was generating all of those.
Claire AirdHOST
The ads trigger browsing data collection, ad injection and shopping link modification.
Claire AirdHOST
Microsoft has spotted at least 250 of the malicious extensions across the Microsoft Edge add-ons, Chrome Web Store and Mozilla add-ons portals.
Claire AirdHOST
Threat actors can crash modern HTTP3 web servers by exploiting flaws in the QPAC compression format.
Claire AirdHOST
Malcrafted QPAC packets can uncompress into huge volumes of data, hundreds and even thousands of times the size of the original packet, exhausting the target server's memory.
JoeHOST
Yes, Graham's still away, but hopefully he'll be back next time.
JoeHOST
Mozilla introduces Firefox Enterprise.
JoeHOST
Now, we don't have a lot of details about this.
JoeHOST
Crucially, we don't have any pricing details.
JoeHOST
I don't know why you think I'm being negative.
JoeHOST
I'm encouraging them with words of encouragement.
JoeHOST
Well, well done, Mozilla.
JoeHOST
Yet another great thing that you're doing.
Bart BusschotsPANELIST
because Firefox bundles its own certificate authorities.
Bart BusschotsPANELIST
Now, in Firefox's cases, because they have stricter criteria, and there are sometimes certificate authorities that Firefox kick out for not being trustworthy, that is still trusted by, say, Windows, Apple usually joins Mozilla pretty quickly in kicking someone out.
Bart BusschotsPANELIST
So Apple is usually in sync with Mozilla, but sometimes Microsoft's a bit more forgiving and Google could come on any side of any conversation.
Bart BusschotsPANELIST
Chrome also bundles its own certs because Google feel that they are important enough to have a strong opinion and so they bundle their own.
Bart BusschotsPANELIST
But sometimes open source apps bundle their own because it's just easier than writing APIs that work everywhere.
32 MINS LATER
Bart BusschotsPANELIST
sort of hacking to stop you being hacked.
Bart BusschotsPANELIST
If you are a large enterprise managing many people and you want a more secure browsing environment, you have an open source choice.
Bart BusschotsPANELIST
There is now Mozilla Firefox Enterprise.
JoeHOST
Yes, Graham's still away, but hopefully he'll be back next time.
JoeHOST
Mozilla introduces Firefox Enterprise.
JoeHOST
Now, we don't have a lot of details about this.
JoeHOST
Crucially, we don't have any pricing details.
JoeHOST
I don't know why you think I'm being negative.
JoeHOST
I'm encouraging them with words of encouragement.
JoeHOST
Well, well done, Mozilla.
JoeHOST
Yet another great thing that you're doing.
Tim CallanHOST
And at the time we were talking about a flurry of bugs that were going on in Bugzilla that was unprecedented in the time in terms of their, both their number and their activity.
Jason SorokoHOST
Yeah, Tim, just to remind people who aren't completely, like, totally on the inside baseball of WebPKI, Bugzilla is a term we use that comes from – it's a site hosted by Mozilla.
Tim CallanHOST
Right.
Jason SorokoHOST
And it has kind of become, over time, and especially in recent years, basically the place where issues – for the web PKI to be discussed.
Jason SorokoHOST
That's a very loose way of saying, is that
Tim CallanHOST
right? Bugzilla is Mozilla's bug reporting platform.
Tim CallanHOST
And certainly if you discover a bug in Firefox, you can go report it on Bugzilla and that goes on.
Tim CallanHOST
But one of the other things that's happened, as you said, is that platform really because nothing equivalent was available, became the standard for discussion of compliance episodes and For public CAs that are in the Mozilla Trusted Root Program.
CyberRiskHOST
All right.
CyberRiskHOST
In our last story, Mozilla, Google, and Apple block compromised eModra CA certificates.
CyberRiskHOST
The major browser root programs moved this week to neutralize eight intermediate certificates issued under Indian-based certificate authority EMADRA, EM sign root, after research discovered the private keys behind them were so weak they could be recovered almost instantly with values as low as four.
CyberRiskHOST
Six of the intermediates were authorized to issue TLS certificates, and two were code-signing CAs, and each key also appears in a set-to-go cross certificate, extending the blast radius to 16 affected certificates.
CyberRiskHOST
Mozilla began detrusting the affected certificates on the 17th of October.
CyberRiskHOST
Chrome blocked its share the same day, and Apple layered protections on by the 22nd of October.
CyberRiskHOST
An independent researcher reported the issue to Apple, Google, Microsoft, and Mozilla root programs and to Emadra on the 17th.
CyberRiskHOST
The Go project shipped emergency releases in response, and Emadra has revoked the certificates and halted issuances under its G3 route." So this matters just because a CA private key that anyone can compute is the root of trust equivalent of a master skeleton key.
113 more episodes mention Mozilla.
Create an account to see the whole feed, search across every transcript, and follow the entities you care about.