HNHacker News
TopNewBestAskShowJobs

wfh

81 karma · joined June 3, 2014

Chrome Windows Security

@parityzero on twitter @wfh on infosec mastadon

submissionscomments
wfh··on “AV is my single biggest impediment to shipping a secure browser.”
Contact me if you want to collaborate on this.
wfh··on “AV is my single biggest impediment to shipping a secure browser.”
Chrome Dev here. Still trying, and currently failing, to ship App Container (Low Box Token) for renderer processes.

We strongly suspect AV is tampering with renderer process startup causing our attempts to set the low box token to fail (the token manipulation has to occur while the process is suspended, and we suspect AV is injecting threads at this point).

Either that or AV is just crashing the process because it does not expect its calls to fail inside the sandbox.

Very frustrating. Glad jschuh has come out and said what we all believe.

wfh··on Toronto convicts first Airbnb owner over zoning violation
Zoning isn't there to prevent the coal fired power plant from being built next to your house, it's to make it less bureaucratic to build in zoned areas - no need to get individual "planning permission" for any new permitted structure.

Countries that don't use zoning would still prevent the scenario you envisage.

wfh··on Microsoft Edge: Building a safer browser
This is not just "delay free", which is already in IE?

http://blog.trendmicro.com/trendlabs-security-intelligence/m...

wfh··on Fast integer overflow detection (2012)
Chromium has implmenented a safe numerics library for overflow detection - see:

https://code.google.com/p/chromium/codesearch#chromium/src/b...

← PreviousPage 2 of 2