It's time to make HTTPS the web's default, and reap the full security benefit from years worth of HTTPS adoption! security.googleblog.com/2025/10/http...

BECOME UNOVENABLE 🪿

Somewhat ironic that this is the week I start VPNing /in/ to the UK so I can listen to BBC Sounds again.

Just posted a deep dive on how Chrome integrates with Advanced Protection Mode on Android. security.googleblog.com/2025/07/adva...

Another great ancillary benefit of memory safe languages: Cool infrastructure projects remain cooler for longer 😎 Library authors can provide great functionality without implicitly signing up for the slew of security bugs that are sadly the consequence of a large c/c++ project.

Here's something I am very excited about: Photosynthesis! 🌱☀️ A proposal to have CAs run transparency logs and make X.509 certificates out of Merkle Tree inclusion proofs. This is similar to how CT would have worked in an ideal world, and it solves the problem of PQC sizes in logs and handshakes.

Happy solstice! 🌞🌝

British Airways, to give a taste of how long a transatlantic flight feels, created BA.com

Behold my favorite weird Chrome security bug of 2025 so far! A jaw-dropping URL / omnibox spoof via ligatures, specifically the googlelogo ligature. issues.chromium.org/issues/39178...

Ed Balls

Note that you can get a new social security card without that wording when you get a green card. I did so will double check I told them when I became a citizen!

🗽 PSA for naturalised citizens: If you never got a new social security card when you became a citizen, and your existing card has "valid for work only with ins/dns authorization" you are likely still in the Social Security database as a non-citizen.

Just purchased a sledge hammer, and now have Peter Gabriel stuck in my head.

I'm excited about this program! Chromium isn't necessarily easy, but I know there are great engineers out there who would love to get paid for improving it!

Postcard from San Francisco

Here are the project ideas and info for Chromium:

🥞 Happy Pancake Day! 🥞

We are, unequivocally, the Bad Guys. We have been before, and we will be again, no doubt, but this one is particularly repellent.

Slava Ukraini 🇺🇦

I think Swiss Air is saying you can smoke in the toilets, but only if you don’t get caught?

These are unsophisticated actors. They use the wrong fork at dinner.

Am I allowed to feel smug about being all hip and getting the pop culture reference, if I only know about it because of @kenwhite.bsky.social ?

I wish the Democrats in office demonstrated even 10% of the urgency of their fundraising texts dealing with these genuinely urgent situations.

You can increase the protection of Chrome's process isolation by using the chromeenterprise.google/policies/?po... enterprise policy, or the Strict-Origin-Isolation option on chrome://flags/

In case of emergency, please present your yellow-tinted wine glass to have an entire bottle of wine poured directly into it.

Yesterday Chromium deleted our copy of `libavif` -- the last step of a year-long project replacing it with a new Rust library! :) chromium-review.googlesource.com/c/chromium/s...

This is not an easy discussion to have against such a horrific backdrop. But online age restrictions on commonly available goods are unlikely to make any difference & such measures are not cost free Hope the gov’t: - focuses on real security improvements; - has a coherent approach to tech 2/2

This is excellent news! Enigma is excellent and well worth your time.

I’ve lived in California a long time, but I’ve never got used to the fact that hummingbirds aren’t just on TV nature documentaries, but also “a few feet over there”

Need to check if you've got IPv6 connectivity? Love dancing turtles and 27 year old web pages? www.kame.net is for you.

Thoroughly enjoyed my first ride on a new electric Caltrain! Though slightly alarmed to see a Chrome error message that's not been shipping since 2015! I hope the systems running your infoscreens aren't connected to anything important, @gocaltrain.bsky.social ...

Happy Christmas from Felicity.

To those of you who use a consumer VPN for "security" reasons, what specific technical improvements in your browser or OS would make you change your mind and uninstall the VPN? Please be technical.

Christmas came early.

On first glance, the C++ 23 “assume” keyword is the craziest thing I’ve ever seen. bsky.app/profile/feli...

Giving Tuesday idea: Do you have an Amazon credit card and a decent amount of cash back? Why not convert it into real impact and warm fuzzies by buying things off amazon wish lists. e.g. see #clearthelist for those of teachers. (It's sad it's needed for classroom supplies, but here we are)

Precision potatoes

> The Android team has observed that the rollback rate of Rust changes is less than half that of C++ This is a sleeper hit of a quote.

First in, first out :-)

OMG Private Network Access is finally shipping in Chrome 123. That's just shy of a decade for something I'd honestly expected to have shipped in more like a year. But I'm glad to see finally it's moving forward and the other browsers are supportive. www.bleepingcomputer.com/news/google/...

I get a lot of scam victims as clients and they often feel humiliated and really angry at themselves. This is what I tell them: you got taken by a professional. That’s like getting beaten up by a professional MMA fighter. It’s no reflection on you. Pros are very good at what they do.

Ron DeSantis should be forced to carry his Presidential campaign to term.

The scale of climate change can be a bit mind-boggling at times. For example, the Greenland ice sheet has lost over 6 trillion metric tons of ice since 1970 – or more than 700 tonnes lost per person for every person on the planet today: www.carbonbrief.org/state-of-the...

"may you live in interesting times" "may your problem be compared to PKI"

"I could still tell you scary stories about a future ravaged by climate change, and they’d be true, at least on the trajectory we’re currently on. But it’s also true that we have a once-in-human-history chance... but to make the world better right now."

Johns Hopkins University launches a new school: The School of Government and Policy - The school will hire 35 full-time faculty. - will serve 200-250 graduate students - will offer coursework for undergraduate students - housed at 555 Penn Ave., two blocks from the Capitol

Anyone wanna help me crack NIST Elliptic Curve seeds to get $36,000 to Trevor Project (trevorproject.com)? Looking for GPUs and anyone who wants to craft the hashcat config with me. (thanks @durumcrustulum.com for the tip on SCW, @soatok.bsky.social for donating!) words.filippo.io/dispatches/s...