Getting shown up in the arena of elite impunity by *the British monarchy* is an incredible “America at 250!” achievement
Andrew Whalley
@arw.me
An Englishman in San Francisco. Director of Security for Google Chrome.
In an ideal world, normal people shouldn't worry about computer security. But for now, people should focus on things that matter — like using MFA and keeping software up to date — not worrying about things like public wifi. Proud to be a signatory of this great initiative by @boblord.bsky.social
Bob Lord@boblord.bsky.social · 8mo ago📢 Announcing hacklore.org 📢 It’s time to retire outdated cyber advice! More than 80 cybersecurity veterans have signed an open letter urging a shift from folklore to guidance that actually helps people avoid the most common attacks. 🔐 Blog: medium.com/@boblord/let... Site: www.hacklore.org
It's time to make HTTPS the web's default, and reap the full security benefit from years worth of HTTPS adoption! security.googleblog.com/2025/10/http...
HTTPS by default
One year from now, with the release of Chrome 154 in October 2026, we will change the default settings of Chrome to enable “Always Use Secu...
security.googleblog.com
Somewhat ironic that this is the week I start VPNing /in/ to the UK so I can listen to BBC Sounds again.
Just posted a deep dive on how Chrome integrates with Advanced Protection Mode on Android. security.googleblog.com/2025/07/adva...
Advancing Protection in Chrome on Android
Posted by David Adrian, Javier Castro & Peter Kotwicz, Chrome Security Team Android recently announced Advanced Protection , which extend...
security.googleblog.com
Another great ancillary benefit of memory safe languages: Cool infrastructure projects remain cooler for longer 😎 Library authors can provide great functionality without implicitly signing up for the slew of security bugs that are sadly the consequence of a large c/c++ project.
Kevin Jones@vcsjones.dev · last yr.Everyone wants to maintain a cool infrastructure library until maintaining a cool infrastructure library is no longer convenient.
Here's something I am very excited about: Photosynthesis! 🌱☀️ A proposal to have CAs run transparency logs and make X.509 certificates out of Merkle Tree inclusion proofs. This is similar to how CT would have worked in an ideal world, and it solves the problem of PQC sizes in logs and handshakes.
[TLS] Photosynthesis, an update to Merkle Tree Certificates
Photosynthesis combines the Static CT API with the ideas in Merkle Tree Certificates.
mailarchive.ietf.org
British Airways, to give a taste of how long a transatlantic flight feels, created BA.com
Behold my favorite weird Chrome security bug of 2025 so far! A jaw-dropping URL / omnibox spoof via ligatures, specifically the googlelogo ligature. issues.chromium.org/issues/39178...
Chromium
issues.chromium.org
Note that you can get a new social security card without that wording when you get a green card. I did so will double check I told them when I became a citizen!
🗽 PSA for naturalised citizens: If you never got a new social security card when you became a citizen, and your existing card has "valid for work only with ins/dns authorization" you are likely still in the Social Security database as a non-citizen.
Just purchased a sledge hammer, and now have Peter Gabriel stuck in my head.
I'm excited about this program! Chromium isn't necessarily easy, but I know there are great engineers out there who would love to get paid for improving it!
Supporters Of Chromium-Based Browsers@socbb.bsky.social · last yr.🚨 Attention Chromium developers! 🚨 The SOCBB Bug Bounty Program is offering up to $10,000 for fixing bugs in Chromium-based browsers like Chrome & Edge! Contribute to repos like chromium, v8, and more. Get paid via GitHub Sponsors! Start fixing: github.com/Supporters-O... #Chromium #OpenSource
Here are the project ideas and info for Chromium:
Chromium GSoC 2025 Project Ideas and Info
Chromium GSoC 2025 Project Ideas and Info
docs.google.com
We are, unequivocally, the Bad Guys. We have been before, and we will be again, no doubt, but this one is particularly repellent.
Daniel Drezner@dandrezner.bsky.social · last yr.This is so goddamn embarrassing. www.axios.com/2025/02/24/u...
I think Swiss Air is saying you can smoke in the toilets, but only if you don’t get caught?
These are unsophisticated actors. They use the wrong fork at dinner.
Am I allowed to feel smug about being all hip and getting the pop culture reference, if I only know about it because of @kenwhite.bsky.social ?
David Shiffman, Ph.D. 🦈@whysharksmatter.bsky.social · last yr.If we’re renaming bodies of water based on petty grievances, I propose that this be renamed the Kendrick Lamar passage.
I wish the Democrats in office demonstrated even 10% of the urgency of their fundraising texts dealing with these genuinely urgent situations.