Firefox 40 arrives with Windows 10 support, expanded malware protection, and new Android navigation gestures
Mozilla today launched Firefox 40 for Windows, Mac, Linux, and Android. Notable additions to the browser include official Windows 10 support, added protection against unwanted software downloads …
Context & Ripple Effects
Firefox 40 lands mid-run in a rapid 2015 cadence — Firefox 35 shipped Hello video chat in January, Firefox 36 brought full HTTP/2 in February — and its headline items are compatibility and safety: official Windows 10 support plus expanded protection against unwanted software downloads. That last item is the seed of an arc the corpus keeps extending: Firefox 43's stricter blocklist five months later, then cryptomining and fingerprinting protection in Firefox 67, and eventually Enhanced Tracking Protection on a rebuilt GeckoView Android browser in Firefox 79.
First-order effects
- Windows 10 upgraders get a supported Firefox from day one, and Android users get gesture-based navigation — table-stakes moves to keep Mozilla installed on both platforms during Microsoft's OS transition.
- The expanded unwanted-software protection puts Mozilla's blocklist between users and bundled-junk installers, directly affecting download distributors that rely on extra offers.
Second-order effects
- As the download-protection and blocklist work hardens through Firefox 43, adware-style bundling loses a distribution channel inside Firefox, pressuring those vendors toward other browsers or cleaner installs.
- Security features become a differentiator rather than an afterthought, forcing the browser market to compete on protection quality alongside speed and standards support like the HTTP/2 work.
Third-order effects
- If the pattern holds, the browser consolidates into the user's default security layer — culminating in Mozilla later using Anthropic's Mythos Preview to find 423 bug fixes in April and over 100 bugs from Claude Opus 4.6 in two weeks for Firefox 150's 271-vulnerability release.
- Android becomes a first-class battleground for the same strategy, with Mozilla ultimately shipping its own engine via GeckoView rather than riding WebViews — control of the stack following from control of the protection layer.
The trend: Browsers are evolving from feature-delivery vehicles into security and privacy infrastructure, with AI-assisted vulnerability discovery increasingly setting the pace.