Skip to content

BearBrowser v150.0.5 — hardening + sovereign update channel

Choose a tag to compare

View all tags
@mdheller mdheller released this 03 Aug 23:01
v150.0.5
e901760
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

BearBrowser v150.0.5 — hardening + sovereign update channel

Package gate assertions verified: 15/15 on both macOS and Linux artifacts.

Cockpit startup race fixed — waiter page polls sidecar :8080/health with a 20s deadline; no more blank cockpit on cold start.

Sovereign update channel — weekly poll of a static latest.json on GitHub Releases (credentials:"omit", referrerPolicy:"no-referrer", robust semver parse). Replaces the killed aus5.mozilla.org telemetry-tied channel.

Vendor honeypot (BearWall) — blocked-vendor channels now redirect to a loopback /vendor-sink that records host/path/method/headers and returns 204. Not just a denylist — a receipt-producing trap.

Xray-scope clamp fix — hardwareConcurrency clamp now takes effect in content scope (v150.0.2–4 shipped the clamp only in privileged scope due to Xray wrapper shadowing).

Newtab ad/profiling modules deleted at source — AdsFeed / DiscoveryStreamFeed / InferredPersonalizationFeed / NewTabContentPing scrubbed from browser/builtin-addons/newtab/lib + jar.mn. Patch script warns on 0/N drift so a future refactor can't silently un-fix this.

RS mirror scaffold — 6-hour sync of 10 security/anti-tracking collections + AMO manifests, fail-closed review (no signature / unexpected URLs / active-content markers / >25% record swing). Publish target lands when GCP creds finish provisioning.

Runtime audit in CI — content-scope probe served over loopback; browser fetches it, POSTs report back. Guards hardwareConcurrency clamp + honeypot integration + cockpit waiter.

Signing pipeline scaffolded — mac notarize + windows signtool workflows. No-op until certificates are provisioned.

Every claim above is a static assertion in scripts/verify-package.sh. Adversarial review pass caught 6 real issues before merge (SINK_UNSAFE anchoring, update-check leaking Referer/cookies, semver parser breaking on -rc suffixes, sweep NameError, malformed pref output, systemAddon dead-code); all resolved.

Sovereign, decoupled, no bloat. No paper tigers.

Assets 6
Loading