HNHacker News
TopNewBestAskShowJobs

wfh

81 karma · joined June 3, 2014

Chrome Windows Security

@parityzero on twitter @wfh on infosec mastadon

submissionscomments
wfh··on The desperation of NYTimes
I emailed them about this and they said they would consider removing it. But need more people to complain. If you are a paying subscriber please let them know! There is power in your voice.
wfh··on Tell HN: Help restore the tax deduction for software dev in the US (Section 174)
Has this tax change been mentioned in any earnings calls as a reason for layoffs. Perhaps if that evidence could be found it would bolster the argument being made here. Didn't someone have all earnings call transcripts in a large database - perhaps an AI can find evidence of this?
wfh··on TikTok preparing for U.S. shut-off on Sunday
I just installed tiktok for the first time on my Android device and it asked for no permissions and even let me use it without creating an account. How is it getting photos and videos on my device?
wfh··on Google paid $10M in bug bounty rewards last year
Original blog post that the article was seemingly based on https://security.googleblog.com/2024/03/vulnerability-reward...
wfh··on New U.S. immigration rules spur more visa approvals for STEM workers
If you mean the existing H-1B lottery, see sibling comment linking the Forbes article which says "However, attorneys say attempting to reorder the H-1B lottery from highest to lowest salary by regulation, as the administration has discussed, would be unlikely to survive a legal challenge."
wfh··on Stop Worrying About Deepfakes
I don't think this article will age well.
wfh··on Third-party Reddit apps are being crushed by price increases
Remains one of my proudest contributions to Chromium https://chromium-review.googlesource.com/c/chromium/src/+/25...
wfh··on Apple’s fight against iPhone sideloading was pointless at best, harmful at worst
The lasting legacy will be persuading everyone that installing apps should have its own scary word like "sideloading" rather than just "installing".
wfh··on Windows needs to stop showing tabloid news
I think you're talking about Chromebooks.
wfh··on All 1,400 Google Chrome CLI flags
Can't wait for hacker news to find out about --enable-features and --disable-features.
wfh··on All 1,400 Google Chrome CLI flags
Sure, you can use the enterprise policy:

https://chromeenterprise.google/policies/#DefaultJavaScriptJ...

And this existed before SDSM... in fact SDSM depends on the code landed in Chrome that backs this policy.

wfh··on Why fusion will never happen (2012)
Agree with the article but, to me, demonstrates the reason why governments and regulators (and taxation authorities) make a difference here. E.g. if fossil fuels get a 200% tax then maybe nuclear/fusion (fission now) becomes more viable.

Have to concede that wind and solar seem pretty good now, if combined with good grid-wide battery technology.

wfh··on Zuckerberg's leaked email on VR strategy (2015)
Loading this page with JavaScript disabled is a very bizarre experience!
wfh··on Stadia died because no one trusts Google
I use my Stadia controller over a USB-C cable to my PC. Plays Elden Ring fine :)
wfh··on Confess your love with zero-knowledge
Reminds me a paper I co-authored all the way back in 2000! https://www.cl.cam.ac.uk/~fms27/papers/2000-StajanoHar-roman... wow that's a long time ago!
wfh··on Implementing Global Injection and Hooking in Windows
Code injection like this is why we have historically been unable to enable stronger process mitigations for Chrome that might improve security and stability. It's a real pity :(

https://bugs.chromium.org/p/chromium/issues/detail?id=851565...

The flag we (still) can't enable by default is

--enable-features=BrowserDynamicCodeDisabled

wfh··on JPMorgan hit with $200M in fines for letting employees use WhatsApp
(do not work in finance so excuse the dumb question but) if there is this requirement for all employee communications to be tracked for compliance purposes, how are/were face to face meetings recorded? Or just chatting in the corridor? Is that not allowed?
wfh··on WebAssembly and Back Again: Fine-Grained Sandboxing in Firefox 95
How does this compare with https://chromium-review.googlesource.com/c/chromium/src/+/27... ?
wfh··on US seeks answers from Tesla over no recall
NHTSA should change the name of the term. With more and more vehicles supporting over-the-air updates, using a word like "recall" which implies you have to drive your car to a garage and have them fix it in person is just confusing.
wfh··on Yuri Gagarin: Sixty years since the first man went into space [video]
BBC Radio 4 also presented a good hour-long segment on Gagarin last weekend https://www.bbc.co.uk/programmes/m000v24g
wfh··on How to liberate a Chromebook
Does GalliumOS auto-update, including security updates for all packages?
wfh··on First-party isolation in Firefox: what breaks if you enable it?
have you considered using multiple profiles/containers in one browser e.g. Firefox supports containers, and Chrome supports profiles?
wfh··on An Update on Our Plans to Restrict Data Access on Facebook
Anyone else find the font being used on that page incredibly hard to read?
wfh··on MobileCoin: A New Cryptocurrency from Moxie Marlinspike
Do you have link to the proposed text for this bill?
wfh··on Ask HN: One thing you wish would happen in the next 10 years?
Reliable, widespread, cost effective, nuclear fusion based power generation.
wfh··on Chrome Won
file a bug - https://new.crbug.com or is there an existing one?
wfh··on Why the bounce rate of AMP pages is so high
Not familiar with tracking metrics but what is "bounce rate"?
wfh··on I’ll never bring my phone on an international flight again. Neither should you
>"The border is technically outside of US jurisdiction"

IANAL but reading other articles on this topic I don't think this is true - I think it's just that the 4th amendment rights that all searches and seizes have to be with done with warrant or probable cause are suspended at border due to doctrine of "border search exception".

wfh··on Hollywood as We Know It Is Over
I actually find the opposite - when I am out at a movie there seems to always be someone rustling chocolate or whispering loudly to their neighbour, or someone has brought overly boisterous children, who normally don't really want to be there, to the screening.

At home, I can dim the lights and really get into a movie without any distractions.

wfh··on What I Wish I'd Known About Equity Before Joining a Unicorn
I lived and worked in the UK for decades and never did my own tax return. When I moved to the US, the UK taxman spotted this, calculated that I had overpaid my taxes for that year and sent me a refund automatically.

I guess the reason why it's not done this way in the US is a combination of the general mistrust of government, and the lobbying from companies like Intuit to keep the tax system as complex as it is now.

Page 1 of 2Next →