Skip to content

Releases: Can-5/foxai-browser

v3.0.0 FoxAI One — Fingerprint 100/100 + Tor Mode

Choose a tag to compare

@Can-5 Can-5 released this 24 Aug 03:58

9 Major Updates in One Release

🎯 v2.7.0 — Perfect Fingerprint (100/100)

  • Deterministic RFP: letterboxing off, fixed window metrics, UTC locked
  • Benchmark: Average Similarity 100.0% — PERFECT (all instances byte-identical)
  • Canvas per-session randomization kept by design → CANVAS ENTROPY PASS (cross-session tracking blocked, Tor Browser model)

🧅 v2.8.0 — Tor Mode (Opt-in)

  • New FoxAI Tor.cmd: routes ALL traffic through socks5://127.0.0.1:9050
  • DNS through SOCKS (zero leaks), WebRTC fully dead in Tor mode
  • Launcher auto-starts bundled tor daemon; one-command installer: scripts/install-tor.ps1
  • Normal mode ↔ Tor mode switch by swapping profile templates

🗂 v2.9.0 Containers Pro · 🎬 v2.10 Media Lockdown · 📥 v2.11 Download Safety · 🔍 v2.12 Search Privacy · 🖱 v2.13 Gestures v2 · ⏱ v2.14 Startup Guard

  • Container tabs UI, autoplay+camera+mic+geo default-deny, ask-before-new-types, engine suggestions off, gesture presets file, blank startup & crash-session off

🚀 v3.0.0 — FoxAI One

  • All components bumped to 3.0.0, stable milestone

Verify: tests/test-fingerprint-benchmark.ps1 -> Similarity 100% + CANVAS ENTROPY PASS

Full changelog: CHANGELOG.md

v2.6.0 — Privacy Shield + Performance Turbo + Dark UI + AI Copilot v2 + Security Fortress

Choose a tag to compare

@Can-5 Can-5 released this 24 Aug 02:00

5 Major Updates in One Release

🔒 v2.2.0 — Privacy Shield v2

  • Query Stripping: Tracking parameters (fbclid, gclid, msclkid, etc.) automatically stripped from URLs
  • Global Privacy Control (GPC): Sends "do not sell/track" signal to websites
  • Cookie Banner Auto-Reject: Consent popups rejected automatically
  • Canvas/WebGL hardening and Local Network Access protection

⚡ v2.3.0 — Performance Turbo

  • 8 content processes, parallel JS parsing + Warp builder
  • DNS cache: 2,000 entries / 1 hour TTL, SSL token cache 20K
  • Smart memory management: automatic tab unloading under memory pressure

🌙 v2.4.0 — Dark UI Complete

  • Full dark theme (#16161a) across tabs, toolbars, menus, scrollbars, URL bar and internal pages
  • Active tab with neon blue accent glow

🤖 v2.5.0 — AI Copilot v2

  • 8 AI providers: OpenAI, Claude, Gemini, DeepSeek, Groq, OpenRouter (100+ models), Mistral, Ollama (local)
  • Streaming responses everywhere + quick actions (summarize, translate, explain, code analysis)

🛡️ v2.6.0 — Security Fortress

  • TLS hardening: deprecated TLS off, safe negotiation required, CRLite mode 2, OCSP must-staple
  • Fission site isolation, MITM protection, cert pinning enforcement
  • PDF.js scripting disabled, punycode always shown

Privacy benchmark: 95.5% fingerprint similarity (EXCELLENT) · 57/57 static prefs PASS · 20 live browser checks

Full Changelog: https://github.com/Can-5/foxai-browser/blob/master/CHANGELOG.md

FoxAI Browser v2.1.1

Choose a tag to compare

@Can-5 Can-5 released this 18 Aug 16:59

v2.1.1 — Maintenance Release

Firefox ESR 153.0 + uBlock Origin 1.73.0 — maintenance release with pinned dependencies for reproducible builds.

Fixed

  • uBlock Origin pinned to 1.73.0 (reproducible build compatibility)
  • Firefox ESR 153.0 base maintained
  • Minor build script improvements for reproducible builds

Verified

  • 6/6 test suite PASS
  • Privacy regression test PASSED: 57 static prefs + 20 live checks
  • Supply-chain verification PASSED: all artifacts match baseline hashes
  • Fingerprint similarity benchmark: 95.5% similarity (EXCELLENT)

Updated

  • Firefox ESR 153.0 base maintained
  • uBlock Origin 1.73.0 pinned for reproducible builds
  • Version bumped to 2.1.1 (all extensions + release zip FoxAI-Browser-v2.1.1.zip)

Release zip: FoxAI-Browser-v2.1.1.zip (portable, Firefox ESR 153.0 base).

FoxAI Browser v2.1.0

Choose a tag to compare

@Can-5 Can-5 released this 18 Aug 01:13

v2.1.0 — Complete Privacy Architecture

All 8 Privacy Systems Operational

  1. Reproducible Build (build.ps1 -Reproducible) — byte-for-byte identical artifacts via deterministic timestamps, pinned uBlock, sorted ZIP/XPI entries, fixed rcedit timestamps.

  2. Signed Releases + SBOM — minisign signatures (.minisig), CycloneDX SBOM with component hashes for Firefox runtime, all XPIs, release ZIP, uBlock Origin.

  3. Privacy Regression CI — GitHub Actions runs test-privacy-regression.ps1 on every push/PR; 57 static prefs + 20 live checks; any failure = build fails.

  4. Fingerprint Similarity Benchmark (test-fingerprint-benchmark.ps1) — multi-instance headless comparison; v2.1 achieves 95.5% average similarity (EXCELLENT).

  5. Network Privacy Monitor — FoxAI Start dashboard showing real-time connection status: Mozilla Update ❌, Telemetry ❌, Tracker ❌, DNS over HTTPS ✅, Website ✅.

  6. Local-First AI (Ollama) — sidebar detects ollama serve, fetches api/tags, lists local models, runs inference at localhost:11434 — no page content leaves device.

  7. Site Privacy Sandbox — per-domain permission matrix (JS, cookies, images, scripts, frames, referrer, mic, camera, location) persisted in localStorage.

  8. Privacy Health Score — top-right widget showing 0-100 score with 12 granular checks (RFP, WebRTC, HTTPS-Only, DoH, WebGL, uBlock, Telemetry, ICE, Storage Partitioning, Sensors, MediaRecorder, ECH).

Tests

  • 6/6 test suite PASS
  • Privacy regression: 57 static prefs + 20 live checks → PASS
  • Supply-chain verification: all artifacts match baseline hashes → PASS
  • Fingerprint benchmark: 95.5% similarity (EXCELLENT)

Updated

  • Firefox ESR 153.0 (pinned, auto-upgradable via -ESR_VERSION)
  • uBlock Origin 1.73.0
  • CI/CD pipeline with privacy regression gate + supply-chain verification

Release zip: FoxAI-Browser-v2.1.0.zip (portable, Firefox ESR 153.0 base).

FoxAI Browser v2.0.0

Choose a tag to compare

@Can-5 Can-5 released this 17 Aug 23:40

v2.0.0 — Major Milestone: Complete Privacy Architecture

Privacy Architecture (All Systems Operational)

  • Privacy Regression Test Suite — 57 static prefs + 20 live browser checks; any failure = build fails
  • Supply-Chain Security — SHA256/SHA512 hashes for Firefox runtime, all XPIs, release ZIP, uBlock Origin; baseline + verify script
  • Privacy Dashboard — single-page status: WebRTC🟢, Canvas🟢, Storage🟢, uBlock🟢, Telemetry🟢, HTTPS-Only/DoH🟢, Sensors🟢
  • Automated ESR Upgradebuild.ps1 -ESR_VERSION "153.0esr" downloads, extracts, verifies new ESR
  • Hardened AI — page content sent only on explicit user consent; keys stored locally
  • FoxAI Benchmark — measurable privacy score (v2.0 → 100/100)
  • uBlock Secure Updates — hash/signature verification for extension updates
  • Fingerprint Standardization — standard RFP profile instead of over-customization

Tests (All Passing)

  • 6/6 test suite passed (newtab, persistence, search, settings, AI sidebar, hardening)
  • Privacy regression test PASSED: 57 static prefs + 20 live checks
  • Supply-chain verification PASSED: all artifacts match baseline hashes

Updated

  • Firefox ESR 153.0 (from 140.13.0esr)
  • uBlock Origin updated to latest (1.73.0)
  • CI/CD pipeline parameterized with ESR_VERSION / ESR_URL
  • Version bumped to 2.0.0 (all extensions + release zip FoxAI-Browser-v2.0.0.zip)

Release zip: FoxAI-Browser-v2.0.0.zip (portable, Firefox ESR 153.0 base).

FoxAI Browser v1.9.0

Choose a tag to compare

@Can-5 Can-5 released this 17 Aug 22:21

v1.9.0 - Firefox 153 ESR + Privacy Architecture

Firefox 153.0 ESR - latest extended support release as base.

Privacy Architecture

  • Privacy Regression Test Suite (tests/test-privacy-regression.ps1) - 57 static prefs + 20 live browser checks run on every build; any failure = build fails
  • Supply-Chain Security (scripts/verify-supply-chain.ps1) - SHA256/SHA512 hashes for Firefox runtime, all XPIs, release ZIP, uBlock Origin; baseline generated once, verified every build
  • Privacy Dashboard (FoxAI Start - Settings - Privacy Dashboard) - single-page status: WebRTC, Canvas, Storage, uBlock, Telemetry, HTTPS-Only/DoH, Sensors
  • Automated ESR Upgrade - build.ps1 -ESR_VERSION "153.0esr" downloads, extracts, and verifies new ESR; CI pipeline parameterized
  • MediaRecorder / getUserMedia Hardened - media.recorder.enabled=false, media.navigator.enabled=false, live getUserMedia rejection test
  • Language Masking - intl.accept_languages=en-US,en, intl.locale.requested=""

Tests

  • 6/6 test suite passed (newtab, persistence, search, settings, AI sidebar, hardening)
  • Privacy regression test PASSED: 57 static prefs + 20 live checks
  • Supply-chain verification PASSED: all artifacts match baseline hashes

Updated

  • Firefox ESR upgraded from 140.13.0esr to 153.0esr
  • uBlock Origin updated to latest (1.73.0)
  • CI/CD pipeline parameterized with ESR_VERSION / ESR_URL
  • Version bumped to 1.9.0 (all extensions + release zip FoxAI-Browser-v1.9.0.zip)

Release zip: FoxAI-Browser-v1.9.0.zip (portable, Firefox ESR 153.0 base).

FoxAI Browser v1.8.0

Choose a tag to compare

@Can-5 Can-5 released this 14 Aug 12:33

v1.8.0 — Full leak & hardening audit, faster network, FoxAI Hub

Verified live: 4/4 egress reflectors agree on one IP, HTTP:// is force-upgraded to HTTPS://, referrer is empty, and RFP masks are confirmed active on web pages (UA/language/platform/plugins, timezone=UTC, hardwareConcurrency=2, WebRTC & Network Info & Battery & sendBeacon all gone, WebGL off, media devices blocked).

Hardening (user.js + foxai.cfg)

  • Resist Fingerprinting fully on: timezone->UTC, canvas/screen fuzzed, timer precision reduced, canvas prompt auto-decline.
  • All phone-home connections killed: app update off, extension auto-update off, Normandy/Shield studies off, region lookup URL cleared, captive-portal detection off, connectivity service off, What's New / about:welcome / Firefox View off, screenshots off, add-on recommendations off, Firefox Suggest off, remote debugging off.
  • Fingerprint vectors closed: vibrator, gamepad, video stats; third-party storage + service workers partitioned; TLS 0-RTT off; certificate-pinning enforcement 2.
  • uBlock + Safe Browsing remote reporting already off.

Performance

  • Speculative connects off, 1200 max connections / 9 per server, disk cache 512 MB, sessionstore every 3 min, session history capped, history disabled, faster start (no default-browser check, no reset prompt).

FoxAI Hub

  • New-tab has a 🧩 Hub button next to the gear; the website gained a #hub section (release, source, changelog, feedback, leak-test kit, quick start).

Tests

  • New tests/test-06-hardening.ps1 = big live audit + 70-pref static audit across BOTH config files. Suite is now 6/6.

FoxAI Browser v1.7.0

Choose a tag to compare

@Can-5 Can-5 released this 14 Aug 05:03

v1.7.0 — Launcher + auto-updater

The release zip now comes with a launcher at the zip root (next to firefox-foxai):

  • FoxAI Browser.cmd — double-click to start the browser (no console window). Path-relative: move/unzip the folder anywhere.
  • FoxAI Update.cmd — checks GitHub, downloads the newest release, installs it and relaunches. Your profile is preserved (settings, notes, logins).
  • FoxAI-Launcher.ps1 — the engine, with -Launch / -Private / -Check / -Update / -Version switches.
  • version.txt — written by the build so the launcher knows the local version.

Verified: -Check talks to the GitHub API and compares versions correctly; the update flow downloads, validates, swaps and restores the profile end-to-end (tested against this release).

FoxAI Browser v1.6.0

Choose a tag to compare

@Can-5 Can-5 released this 14 Aug 04:51

v1.6.0 — Built-in SOCKS5 proxy

Route all traffic through a SOCKS5 proxy (Settings → Proxy → toggle + host + port) so IP leak tests show the proxy address instead of the real one.

  • SOCKS5 (and HTTP via storage) proxying through browser.proxy.onRequest, live-updated from settings.
  • No silent direct fallback: if the proxy is unreachable, requests fail rather than leaking your IP.
  • Proxy DNS for SOCKS5 (domains resolved through the proxy).
  • Verified: with a dead proxy example.com fails; with the proxy off it loads; a local test proxy receives the CONNECT.
  • Fixed a background.js SyntaxError (duplicate let) that had silently disabled the background (context-menu/screenshot/proxy features).

Release zip: FoxAI-Browser-v1.6.0.zip (portable, Firefox ESR base).

FoxAI Browser v1.5.1

Choose a tag to compare

@Can-5 Can-5 released this 14 Aug 03:36

Leak-test fix pass. DNS-over-HTTPS on (browserleaks/dnsleaktest now show Cloudflare, not your ISP). WebRTC verified No Leak. Fingerprinting+cryptomining blocking lists on. WebRTC ICE defence-in-depth. Safe Browsing remote reporting off (URL fragments no longer sent to Google/Mozilla). Note: your public IP always shows in leak tests without a VPN — that is your internet connection, not a browser leak.