Don't do that do this

Oh hey. We announced *when* we're disabling NTLM by default. Hint: soon.

You'll work in some of the most remote and beautiful places on Earth, build lifelong friendships, and contribute to vital science about our changing world. 🗓️ Contracts run from six to 18 months 💸 Salaries start at £30,244 per annum ✅ You need to have the right to work in the UK (sorry)

Today, Project Zero released a 0-click exploit chain for the Pixel 9. While it targets the Pixel, the 0-click bug and exploit techniques we used apply to most other Android devices. projectzero.google/2026/01/pixe...

Oh you hate to see that happen to Rodgers

RIP Bobby Weir. His legacy will be seen in the support he gave to generations of bands that follow, recreating moments of music and joy every time they play.

Oh this is devilish…a game where you have make to 45 groups of 45 items each by matching two at a time. Must take hours? (Where’s the multiplayer option when you need it?) [thomaswc.com]

Enjoyed Song Sung Blue but it's lucky that family didn't have a dog for the filmmakers to draw into their emotional manipulation.

Yesss everyone in tech needs to watch this one specifically youtube.com/watch?v=g3M7...

My talk about responding to an ITW bug in Chrome from Kawaiicon youtu.be/mxN8puPTLCs?...

Never follow a hippy to a second location

I AM ON A TRAIN

Happy Cisco Day everyone may your bubbles be exciting as the dot com boom.

what is the franklin’s tower of house music

AI safety/security Senior PM role in Chrome Security www.google.com/about/career... - help make AI features safe and use AI to promote safety in the rest of Chrome

Going to start all my blogs with "The issue was not caused, directly or indirectly, by a cyber attack or malicious activity of any kind."

Good news #Kawaiicon friends! Slides are now up on my site: garden.errbufferoverfl.me/soapbox/bull... Keep your eyes out for raw data, zines and recordings! Which should be there 🔜

It's con week! Ahh! Whether you have been coming since we were Kiwicon, or are a hacker con newbie, there's probs new stuff happening around the venue that you haven't heard of. Take a look! 🧵

We derestricted crbug.com/382005099 today which might just be my favorite bug of the last few years: bad interaction between WebAudio changing the CPU's handling of floats and V8 not expecting that. See crbug.com/382005099#co... for a PoC exploit. Also affected other browsers

My sexy baked potato costume just got a whole lot sexier

Ah! A house of heavenly peace!

Hollywood Nights & Don't Stop Believing must occupy the same cinematic universe

Come help Chrome security do the best security for several billion people through operational excellence

You've got four more hours to see The Visitors at SF MOMA if you're at a lose end today

Attention Wellington: I am doing a talking!

I’m really enjoying Silksong so far but I won’t give my final verdict until I’m clear on what political system the game is endorsing

⌨️ Comin’ in hot on a Friday afternoon with a Web Discourse blog post! XSLT, Google, and… flame wars? meyerweb.com/eric/thought...

ok so the times witnessed reporters receiving cash from Adams people three times at mayoral events and sat on it for over a month but couldn’t pass up a hot tip from a neonazi about Mamdani’s unsuccessful college application for long enough to check if the neonazi had already been identified

In other great news untappd unfucked my login so I could check in a "Johnny Utah" and a "Bodhizafa"

Funniest moment of the weekend was the very wasted guy that dropped ten bucks on a balloon of nitrous then immediately tripped and popped it like Piglet. Immaculate vibes.

Great day checking out the wildlife of San Francisco. Harbor seals, pelicans, cormorants and sixty thousand deadheads.

Walk towards the light...

Now I've heard there was a secret chord That David played and it pleased the Lord But you don't really care for music, do you? It goes like this, the fourth, the fifth The minor falls, the major lifts The baffled king composing Where’s me jumper Where's me jumper Where's me jumper Where's me jumper

I have the honor of setting down a few thoughts in words about one of the most important musical figures in my life. May he rest in the knowledge that he gave voice to sentiments many struggle to express.

LLMs need a Security Architecture - I've been trying to articulate a version of this rule and Simon's is a nice approach

www.gov.ca.gov/2025/06/07/1... I expect a lot more from Newsom than this limp tissue of an acknowledgement

Disassociate to music

It's "how do the digestive organs of the centaur man parts and horse parts interconnect" o'clock

My team has an opening for a mid career Mac security role on-site in our New York office. Work on the sandbox and low level OS security for Chrome on MacOS. www.google.com/about/career...

Behold my favorite weird Chrome security bug of 2025 so far! A jaw-dropping URL / omnibox spoof via ligatures, specifically the googlelogo ligature. issues.chromium.org/issues/39178...

if you like Google Advanced Protection Program and run Android, get excited for Android 16: security.googleblog.com/2025/05/adva...

Jokes on them. I did not, in fact, "do it later".

The SSA had my middle name as part of my first name so I went in to tidy that up. They're not sending me a new card as what's on the card hasn't changed.

Sad that The Beths have scheduled The Fillmore in SF at the same time as kawaiicon in NZ.

Hey DFIR Peeps! I am hiring incident responders in two locations - Boulder, CO and Sunnyvale, CA. It'd be hard to find a bigger CSIRT with more scope and more interesting stuff to do than this one. :D SVL: www.google.com/about... BLD: www.google.com/about...

Marlon Williams' Te Whare Tīwekaweka is so great

Oh no the database entry for the thing I already fixed and rolled out to a billion people won't get into your expensive database anymore oh booo.