Viewing profile — devinl

It wouldn't always be a mistake. Moderna stock is significantly lower than it was in 2021 so the CEO could be harvesting losses.

I've been on hundreds of calls for both and have personally had far more issues with zoom than google. I also prefer Google's UI and security model, and Google's pricing is better …

Google's advanced security is a good example of an actual implementation of fido2 where they've had to deal with real world threats and device usage. They require multiple fido2 de…

Looks exciting! It is kind of disappointing the AI generated main example on their home page has what appears to be a url encoding bug in it though (in text=${text}, text should be…

~1/5 of Apple's Services revenue comes from having google be the default search ($9-10B per year), so I wonder if this new search will coincide with them ramping up their own searc…

This seems to predate FIDO2. https://solokeys.com/ would be a better option if you prefer separate keys for each site (via FIDO2) and open source hardware.

I agree that short term providers will likely take in less money with a "Medicare for all" solution, but I think the problem presented by this blog post is overstated/misrepresente…

ITP 2.1 also already says it will block cookies of this type if it matches Safari's completely non-transparent ML model for "tracking cookies". Also Chrome pushed back the release …

Apple's search ads are projected to be one of the largest online advertisers in terms of ads revenue in 2020 (they have larger advertising revenue projections than both snap and tw…

Do economic experts still think trickle down/supply side economics are a good idea? It seemed to be a controversial issue among economists in the 70s and 80s. From what I could fin…

It's a bit disappointing their demo doesn't appear to leverage certificate transparency logs as a source of truth for which certs are out there and instead relies on pinging the se…

In the technical details, he has a link to the open source on github. Here's the js that's actually doing the preloading: https://github.com/instantpage/instant.page/blob/master/in…

Prepared statements tend to be the best answer for most cases which is similar to the approach you describe but is natively supported by most SQL dialects and also improves perform…

There is a huge monetary and PR incentive for the fossil fuel industry to publish research that proves "there is no issue" in regards to climate change. The energy industry is wher…

Seems like a bit of an oversight that they are including third party tracking scripts like googletagmanager.com in the same context as the javascript doing encryption. If you need …

The "generic NFC" support you refer to is read only which means that protocols like U2F still don't work so usability of U2F for iPhone users is still not there (without bluetooth …

No this is an issue with Newegg. They had the option to either "Begin collecting sales tax from Connecticut customers going forward and send that money to the state, or turn over t…

Do you have any more details around such an attack? The only HSTS bypasses I am aware of that were possible with control over DNS were dependent on browser vulnerabilities that hav…

Android: https://source.android.com/security/

Chrome is listed as impacted due to javascript being able to read memory from outside the browser sandbox. "In addition to violating process isolation boundaries using native code,…

Some interesting arguments suggesting what he is saying is at least partially wrong: https://www.reddit.com/r/AskHistorians/comments/74penu/walki...

So from reading this over it sounds like you are enabling an endpoint on your site with both CSRF protection enabled that also sends CORS headers to allow for cross origin ajax cal…

As stated in the article, they need to reach 11 billion miles to get the confidence level they are looking for. So extrapolating this, it would take 5500 cars a decade of round the…

One thing that is kind of unique about this vulnerability is that users can actually prevent attacks from happening by checking the permissions on an untrustworthy app because goog…