1
The Line of Death
When building applications that display untrusted content, security designers have a major problem— if an attacker has full control of a block of pixels, he can make those pixels look like anything…
Eric Lawrence
ericlaw talks about security, the web, and software in general
- Popular posts
- 8
- Total points
- 2,229
- HN comments
- 863
- Rank
- #720 personal
Visit textslashplain.com → RSS feedOn Hacker News Dec 2015 – Aug 2026
Web & Frontend 5Security & Privacy 5Systems & Performance 2Software Engineering 1Networking & Internet 1History & Retro Computing 1
2
Spying on HTTPS
When I launched Chrome on Thursday, I saw something unexpected: While most users probably would have no idea what to make of this, I happened to know what it means– Chrome is warning me that …
3
DLL Hijacking Just Won’t Die
The folks that build the NSIS Installer have released updates to mitigate a serious security bug related to DLL loading. (v2.5 and v3.0b3 include the fixes). To make a long and complicate…
4
Web Security is Too Hard
It started innocently enough. I saw a tweet about a new product offering from one of my favorite companies, Cloudflare. Neat! I clicked through to the site and there it is: And huzzah!, my preferre…
5
Certified Malice
One unfortunate (albeit entirely predictable) consequence of making HTTPS certificates “fast, open, automated, and free” is that both good guys and bad guys alike will take advantage of the offer a…