Browser Security Bugs that Aren’t: JavaScript in PDF A fairly common security bug report is of the form: “I can put JavaScript insid... 2024-4-11 04:45:11 | 阅读: 14 | 收藏 | text/plain - textslashplain.com security chrome pdfs describes excitedly

A Slow 10K I “ran” the Capitol 10K for a third time on Sunday. It did not go well, but not... 2024-4-10 01:39:10 | 阅读: 11 | 收藏 | text/plain - textslashplain.com mi slower 10k pace sped

Attacker Techniques: Gesture Jacking A few years back, I wrote a short explainer about User Gestures, a web platform concept whereby... 2024-3-28 01:24:3 | 阅读: 10 | 收藏 | text/plain - textslashplain.com crbug security victim popup fragment

pushState and URL Blocking The Web Platform offers a handy API called pushState that allows a website’s JavaScript to chang... 2024-3-21 01:36:29 | 阅读: 8 | 收藏 | text/plain - textslashplain.com pushstate security network navigation inbox

Browser Extensions: Powerful and Potentially Dangerous Regular readers of my blogs know that I love browser extensions. Extensions can... 2024-3-8 04:55:2 | 阅读: 10 | 收藏 | text/plain - textslashplain.com security chrome dad microsoft

Second Seaside Half I ran my second Galveston Half Marathon on Sunday, February 25th.The course... 2024-2-29 07:24:8 | 阅读: 8 | 收藏 | text/plain - textslashplain.com pace mile miles frustrated headed

The Importance of Feedback Loops This morning, I found myself once again thinking about the critical importance... 2024-2-23 05:4:32 | 阅读: 10 | 收藏 | text/plain - textslashplain.com stimulus microsoft petty outbreak continental

Cloaking, Detonation, and Client-side Phishing Detection Today, most browsers integrate security services that attempt to protect users from phishing att... 2024-2-21 01:49:35 | 阅读: 11 | 收藏 | text/plain - textslashplain.com phishing client attacker attackers reputation

x22i Treadmill Review I love my treadmill, but two years in, I cannot recommend it.On New Year’s Day 2022 I bought... 2024-2-4 10:33:7 | 阅读: 11 | 收藏 | text/plain - textslashplain.com treadmill treadmills kilimanjaro circuit incline

How Downloads Work Skip to contenttext/plainericlaw talks about security, the web, and software in... 2024-1-30 02:44:59 | 阅读: 7 | 收藏 | text/plain - textslashplain.com microsoft ericlaw defender speaker slickrun

A Cold and Slow 3M Half My second run of the 3M Half Marathon was Sunday January 21, 2024. My first half-marathon last y... 2024-1-24 00:51:22 | 阅读: 7 | 收藏 | text/plain - textslashplain.com mile pace miles cold felt

The Blind Doorkeeper Problem, or, Why Enclaves are Tricky When trying to protect a secret on a client device, there are many strategies, but most of them... 2024-1-4 05:51:45 | 阅读: 7 | 收藏 | text/plain - textslashplain.com enclave security memory enclaves vtl0

Coding at Google I wrote this a few years back, but I’ve had occasion to cite it yet again when... 2024-1-3 05:36:42 | 阅读: 6 | 收藏 | text/plain - textslashplain.com chrome development tooling similarly cloud

Fall Races While I’ve been running less, I haven’t completely fallen out of the habit, and I still find spe... 2023-12-19 22:23:19 | 阅读: 8 | 收藏 | text/plain - textslashplain.com pace 5k treadmill mile miles

Defense Techniques: Blocking Protocol Handlers Application Protocols represent a compelling attack vector because they’re the... 2023-12-8 03:4:45 | 阅读: 6 | 收藏 | text/plain - textslashplain.com microsoft chrome windows

Attack Techniques: Steganography Attackers are incentivized to cloak their attacks to avoid detection, keep atta... 2023-11-23 05:30:7 | 阅读: 12 | 收藏 | text/plain - textslashplain.com malicious attackers attacker stage bother

Troubleshooting Edge (or Chrome) Broken UI Last time, we looked at how to troubleshoot browser crashes. However, not all b... 2023-11-14 23:51:17 | 阅读: 13 | 收藏 | text/plain - textslashplain.com developer devtools f12 hubs microsoft

Troubleshooting Edge (or Chrome) Browser Crashes In the modern browser world, there are two types of crashes: browser crashes and renderer crashe... 2023-11-9 22:46:37 | 阅读: 14 | 收藏 | text/plain - textslashplain.com crash tabs chrome software

Driving Electric – One Year In One year ago, I brought home a new 2023 Nissan Leaf. I didn’t really need a car... 2023-10-24 23:30:24 | 阅读: 5 | 收藏 | text/plain - textslashplain.com leaf charger miles cx wallbox

Protecting Auth Tokens Authenticating to websites in browsers is complicated: there are numerous different schemes, ran... 2023-10-24 03:44:52 | 阅读: 8 | 收藏 | text/plain - textslashplain.com client attacker chromium victim