screenshot taken from: https://localmess.github.io/
When
Thursday, 11th June 2026, 6:00pm to 9:00pm
Where
Mozilla Berlin Office, Schlesische Strasse 27, Berlin, Germany
Hosting Organization
Berlin Mozilla Meetup
Participation Fee
Free Entrance
Agenda
Socializing, Host Intro, Talk 1, 30-Minutes-Break, Talk 2, Socializing
Topics Covered
Mozilla Community Participation Guidelines & Quick Mozilla Colleague Introductions (Host Intro), Local Mess, Local Network Access, & the Firefox Implementation (Talk 1), Mitigating Cross-Site Scripting with Trusted Types and the Sanitizer API (Talk 2)
I’ve learned something today
- Meta and Yandex allegedly used scripts on websites to communicate with their Android apps through localhost. This allowed them to link web activity and cookies to persistent app or device identifiers. For users, this meant browsing could potentially be de-anonymized. Clearing cookies, using Incognito Mode, or relying on normal permission controls did not necessarily prevent it. More details are available on https://localmess.github.io/.
- Mozilla Connect is a community platform where users can submit ideas, share feedback, and discuss Mozilla products. It gives the community a direct way to influence future features and product decisions.
- SOHO pharming compromises home or small-office routers and secretly changes their DNS settings. This lets attackers redirect users from legitimate websites to malicious ones that steal credentials, inject ads, or deliver malware.
- Some banks probe users’ local ports to detect signs of malware. Mozilla noticed the practice when their newly developed Local Network Access prompts began appearing unexpectedly on some banking websites.
- QUIC replaces the traditional combination of TCP and TLS. It uses UDP while building in encryption, reliability, and independent data streams. HTTP/3 runs on QUIC.
- A Local Network Access prompt appears when a public website tries to connect to devices or services on your local network. It lets you approve expected access, such as reaching a printer, while blocking silent attempts to probe routers or localhost services.
- In the bottom-left corner, you can see the backpack I used to reserve a front-row seat at the event. After all, I am but of a German mindset:
picture taken at venue
Published:
Modified: