Releases: Can-5/foxai-browser
Release list
v3.0.0 FoxAI One — Fingerprint 100/100 + Tor Mode
9 Major Updates in One Release
🎯 v2.7.0 — Perfect Fingerprint (100/100)
- Deterministic RFP: letterboxing off, fixed window metrics, UTC locked
- Benchmark: Average Similarity 100.0% — PERFECT (all instances byte-identical)
- Canvas per-session randomization kept by design → CANVAS ENTROPY PASS (cross-session tracking blocked, Tor Browser model)
🧅 v2.8.0 — Tor Mode (Opt-in)
- New FoxAI Tor.cmd: routes ALL traffic through socks5://127.0.0.1:9050
- DNS through SOCKS (zero leaks), WebRTC fully dead in Tor mode
- Launcher auto-starts bundled tor daemon; one-command installer: scripts/install-tor.ps1
- Normal mode ↔ Tor mode switch by swapping profile templates
🗂 v2.9.0 Containers Pro · 🎬 v2.10 Media Lockdown · 📥 v2.11 Download Safety · 🔍 v2.12 Search Privacy · 🖱 v2.13 Gestures v2 · ⏱ v2.14 Startup Guard
- Container tabs UI, autoplay+camera+mic+geo default-deny, ask-before-new-types, engine suggestions off, gesture presets file, blank startup & crash-session off
🚀 v3.0.0 — FoxAI One
- All components bumped to 3.0.0, stable milestone
Verify: tests/test-fingerprint-benchmark.ps1 -> Similarity 100% + CANVAS ENTROPY PASS
Full changelog: CHANGELOG.md
v2.6.0 — Privacy Shield + Performance Turbo + Dark UI + AI Copilot v2 + Security Fortress
5 Major Updates in One Release
🔒 v2.2.0 — Privacy Shield v2
- Query Stripping: Tracking parameters (fbclid, gclid, msclkid, etc.) automatically stripped from URLs
- Global Privacy Control (GPC): Sends "do not sell/track" signal to websites
- Cookie Banner Auto-Reject: Consent popups rejected automatically
- Canvas/WebGL hardening and Local Network Access protection
⚡ v2.3.0 — Performance Turbo
- 8 content processes, parallel JS parsing + Warp builder
- DNS cache: 2,000 entries / 1 hour TTL, SSL token cache 20K
- Smart memory management: automatic tab unloading under memory pressure
🌙 v2.4.0 — Dark UI Complete
- Full dark theme (#16161a) across tabs, toolbars, menus, scrollbars, URL bar and internal pages
- Active tab with neon blue accent glow
🤖 v2.5.0 — AI Copilot v2
- 8 AI providers: OpenAI, Claude, Gemini, DeepSeek, Groq, OpenRouter (100+ models), Mistral, Ollama (local)
- Streaming responses everywhere + quick actions (summarize, translate, explain, code analysis)
🛡️ v2.6.0 — Security Fortress
- TLS hardening: deprecated TLS off, safe negotiation required, CRLite mode 2, OCSP must-staple
- Fission site isolation, MITM protection, cert pinning enforcement
- PDF.js scripting disabled, punycode always shown
Privacy benchmark: 95.5% fingerprint similarity (EXCELLENT) · 57/57 static prefs PASS · 20 live browser checks
Full Changelog: https://github.com/Can-5/foxai-browser/blob/master/CHANGELOG.md
FoxAI Browser v2.1.1
v2.1.1 — Maintenance Release
Firefox ESR 153.0 + uBlock Origin 1.73.0 — maintenance release with pinned dependencies for reproducible builds.
Fixed
- uBlock Origin pinned to 1.73.0 (reproducible build compatibility)
- Firefox ESR 153.0 base maintained
- Minor build script improvements for reproducible builds
Verified
- 6/6 test suite PASS
- Privacy regression test PASSED: 57 static prefs + 20 live checks
- Supply-chain verification PASSED: all artifacts match baseline hashes
- Fingerprint similarity benchmark: 95.5% similarity (EXCELLENT)
Updated
- Firefox ESR 153.0 base maintained
- uBlock Origin 1.73.0 pinned for reproducible builds
- Version bumped to 2.1.1 (all extensions + release zip FoxAI-Browser-v2.1.1.zip)
Release zip: FoxAI-Browser-v2.1.1.zip (portable, Firefox ESR 153.0 base).
FoxAI Browser v2.1.0
v2.1.0 — Complete Privacy Architecture
All 8 Privacy Systems Operational
-
Reproducible Build (
build.ps1 -Reproducible) — byte-for-byte identical artifacts via deterministic timestamps, pinned uBlock, sorted ZIP/XPI entries, fixed rcedit timestamps. -
Signed Releases + SBOM — minisign signatures (
.minisig), CycloneDX SBOM with component hashes for Firefox runtime, all XPIs, release ZIP, uBlock Origin. -
Privacy Regression CI — GitHub Actions runs
test-privacy-regression.ps1on every push/PR; 57 static prefs + 20 live checks; any failure = build fails. -
Fingerprint Similarity Benchmark (
test-fingerprint-benchmark.ps1) — multi-instance headless comparison; v2.1 achieves 95.5% average similarity (EXCELLENT). -
Network Privacy Monitor — FoxAI Start dashboard showing real-time connection status: Mozilla Update ❌, Telemetry ❌, Tracker ❌, DNS over HTTPS ✅, Website ✅.
-
Local-First AI (Ollama) — sidebar detects
ollama serve, fetchesapi/tags, lists local models, runs inference atlocalhost:11434— no page content leaves device. -
Site Privacy Sandbox — per-domain permission matrix (JS, cookies, images, scripts, frames, referrer, mic, camera, location) persisted in localStorage.
-
Privacy Health Score — top-right widget showing 0-100 score with 12 granular checks (RFP, WebRTC, HTTPS-Only, DoH, WebGL, uBlock, Telemetry, ICE, Storage Partitioning, Sensors, MediaRecorder, ECH).
Tests
- 6/6 test suite PASS
- Privacy regression: 57 static prefs + 20 live checks → PASS
- Supply-chain verification: all artifacts match baseline hashes → PASS
- Fingerprint benchmark: 95.5% similarity (EXCELLENT)
Updated
- Firefox ESR 153.0 (pinned, auto-upgradable via
-ESR_VERSION) - uBlock Origin 1.73.0
- CI/CD pipeline with privacy regression gate + supply-chain verification
Release zip: FoxAI-Browser-v2.1.0.zip (portable, Firefox ESR 153.0 base).
FoxAI Browser v2.0.0
v2.0.0 — Major Milestone: Complete Privacy Architecture
Privacy Architecture (All Systems Operational)
- Privacy Regression Test Suite — 57 static prefs + 20 live browser checks; any failure = build fails
- Supply-Chain Security — SHA256/SHA512 hashes for Firefox runtime, all XPIs, release ZIP, uBlock Origin; baseline + verify script
- Privacy Dashboard — single-page status: WebRTC🟢, Canvas🟢, Storage🟢, uBlock🟢, Telemetry🟢, HTTPS-Only/DoH🟢, Sensors🟢
- Automated ESR Upgrade —
build.ps1 -ESR_VERSION "153.0esr"downloads, extracts, verifies new ESR - Hardened AI — page content sent only on explicit user consent; keys stored locally
- FoxAI Benchmark — measurable privacy score (v2.0 → 100/100)
- uBlock Secure Updates — hash/signature verification for extension updates
- Fingerprint Standardization — standard RFP profile instead of over-customization
Tests (All Passing)
- 6/6 test suite passed (newtab, persistence, search, settings, AI sidebar, hardening)
- Privacy regression test PASSED: 57 static prefs + 20 live checks
- Supply-chain verification PASSED: all artifacts match baseline hashes
Updated
- Firefox ESR 153.0 (from 140.13.0esr)
- uBlock Origin updated to latest (1.73.0)
- CI/CD pipeline parameterized with ESR_VERSION / ESR_URL
- Version bumped to 2.0.0 (all extensions + release zip FoxAI-Browser-v2.0.0.zip)
Release zip: FoxAI-Browser-v2.0.0.zip (portable, Firefox ESR 153.0 base).
FoxAI Browser v1.9.0
v1.9.0 - Firefox 153 ESR + Privacy Architecture
Firefox 153.0 ESR - latest extended support release as base.
Privacy Architecture
- Privacy Regression Test Suite (tests/test-privacy-regression.ps1) - 57 static prefs + 20 live browser checks run on every build; any failure = build fails
- Supply-Chain Security (scripts/verify-supply-chain.ps1) - SHA256/SHA512 hashes for Firefox runtime, all XPIs, release ZIP, uBlock Origin; baseline generated once, verified every build
- Privacy Dashboard (FoxAI Start - Settings - Privacy Dashboard) - single-page status: WebRTC, Canvas, Storage, uBlock, Telemetry, HTTPS-Only/DoH, Sensors
- Automated ESR Upgrade - build.ps1 -ESR_VERSION "153.0esr" downloads, extracts, and verifies new ESR; CI pipeline parameterized
- MediaRecorder / getUserMedia Hardened - media.recorder.enabled=false, media.navigator.enabled=false, live getUserMedia rejection test
- Language Masking - intl.accept_languages=en-US,en, intl.locale.requested=""
Tests
- 6/6 test suite passed (newtab, persistence, search, settings, AI sidebar, hardening)
- Privacy regression test PASSED: 57 static prefs + 20 live checks
- Supply-chain verification PASSED: all artifacts match baseline hashes
Updated
- Firefox ESR upgraded from 140.13.0esr to 153.0esr
- uBlock Origin updated to latest (1.73.0)
- CI/CD pipeline parameterized with ESR_VERSION / ESR_URL
- Version bumped to 1.9.0 (all extensions + release zip FoxAI-Browser-v1.9.0.zip)
Release zip: FoxAI-Browser-v1.9.0.zip (portable, Firefox ESR 153.0 base).
FoxAI Browser v1.8.0
v1.8.0 — Full leak & hardening audit, faster network, FoxAI Hub
Verified live: 4/4 egress reflectors agree on one IP, HTTP:// is force-upgraded to HTTPS://, referrer is empty, and RFP masks are confirmed active on web pages (UA/language/platform/plugins, timezone=UTC, hardwareConcurrency=2, WebRTC & Network Info & Battery & sendBeacon all gone, WebGL off, media devices blocked).
Hardening (user.js + foxai.cfg)
- Resist Fingerprinting fully on: timezone->UTC, canvas/screen fuzzed, timer precision reduced, canvas prompt auto-decline.
- All phone-home connections killed: app update off, extension auto-update off, Normandy/Shield studies off, region lookup URL cleared, captive-portal detection off, connectivity service off, What's New / about:welcome / Firefox View off, screenshots off, add-on recommendations off, Firefox Suggest off, remote debugging off.
- Fingerprint vectors closed: vibrator, gamepad, video stats; third-party storage + service workers partitioned; TLS 0-RTT off; certificate-pinning enforcement 2.
- uBlock + Safe Browsing remote reporting already off.
Performance
- Speculative connects off, 1200 max connections / 9 per server, disk cache 512 MB, sessionstore every 3 min, session history capped, history disabled, faster start (no default-browser check, no reset prompt).
FoxAI Hub
- New-tab has a 🧩 Hub button next to the gear; the website gained a #hub section (release, source, changelog, feedback, leak-test kit, quick start).
Tests
- New tests/test-06-hardening.ps1 = big live audit + 70-pref static audit across BOTH config files. Suite is now 6/6.
FoxAI Browser v1.7.0
v1.7.0 — Launcher + auto-updater
The release zip now comes with a launcher at the zip root (next to firefox-foxai):
- FoxAI Browser.cmd — double-click to start the browser (no console window). Path-relative: move/unzip the folder anywhere.
- FoxAI Update.cmd — checks GitHub, downloads the newest release, installs it and relaunches. Your profile is preserved (settings, notes, logins).
- FoxAI-Launcher.ps1 — the engine, with -Launch / -Private / -Check / -Update / -Version switches.
- version.txt — written by the build so the launcher knows the local version.
Verified: -Check talks to the GitHub API and compares versions correctly; the update flow downloads, validates, swaps and restores the profile end-to-end (tested against this release).
FoxAI Browser v1.6.0
v1.6.0 — Built-in SOCKS5 proxy
Route all traffic through a SOCKS5 proxy (Settings → Proxy → toggle + host + port) so IP leak tests show the proxy address instead of the real one.
- SOCKS5 (and HTTP via storage) proxying through browser.proxy.onRequest, live-updated from settings.
- No silent direct fallback: if the proxy is unreachable, requests fail rather than leaking your IP.
- Proxy DNS for SOCKS5 (domains resolved through the proxy).
- Verified: with a dead proxy example.com fails; with the proxy off it loads; a local test proxy receives the CONNECT.
- Fixed a background.js SyntaxError (duplicate let) that had silently disabled the background (context-menu/screenshot/proxy features).
Release zip: FoxAI-Browser-v1.6.0.zip (portable, Firefox ESR base).
FoxAI Browser v1.5.1
Leak-test fix pass. DNS-over-HTTPS on (browserleaks/dnsleaktest now show Cloudflare, not your ISP). WebRTC verified No Leak. Fingerprinting+cryptomining blocking lists on. WebRTC ICE defence-in-depth. Safe Browsing remote reporting off (URL fragments no longer sent to Google/Mozilla). Note: your public IP always shows in leak tests without a VPN — that is your internet connection, not a browser leak.