https://bugzilla.mozilla.org/show_bug.cgi?id=1991458

"You are not authorized to access bug 1991458. To see this bug, you must first log in to an account with the appropriate permissions"

WTF, is Bugzilla now private for Firefox? 🤔

@m0xEE probably because it’s a security issue: https://nvd.nist.gov/vuln/detail/CVE-2025-13012

@charlotte@akko.chir.rs
Could be. But what's with the secrecy about a disclosed vulnerability that was fixed even in old ESR more than a week ago?
That is actually how I got there, reading release notes for 115.30.0: https://www.firefox.com/en-US/firefox/115.30.0/releasenotes/
I go to "Security fixes", see this bug referenced and… get this 🤪

Those willing to exploit the vulnerability probably have all this information already.

@m0xEE idk maybe they’ll unembargo the bug at some point or just forgor

@m0xEE I _hope_ that this is only due to AI scraping, and can't help but feel like more of the internet is going to be hidden behind account logins...

@nigel@unsociable.lowkey.party
Mozilla's other projects are already like that, for example I'm interested in self-hosting syncserver-rs — re-implementation of Firefox account synchronisation in Rust.
I'm waiting for full PostgreSQL support — because it's the DBMS I already have, so I would like to learn time frame for that.
There are Postgres-related issues on GH that reference Jira task, e.g. here: https://github.com/mozilla-services/syncstorage-rs/issues/1777

But you can't access their Jira anonymously 😢

@charlotte@akko.chir.rs
Yeah, I'm giving them the benefit of the doubt here — let's hope for the best! 😄