Viewing profile — ericlaw

Note that I said: "One of my", and Cloudflare has hired a HUGE percentage of the best networking talent I've encountered.

Fun fact: still can in Chromium-based browsers. https://textslashplain.com/2023/03/22/attack-techniques-spoo...

The October 2025 Patch Tuesday patches locked down previews of files in the Windows Explorer shell. This post explains why.

Mistakes and Successes in building the Fiddler web debugger

Almost everybody knows this, yet most of us don't think through the implications, leading to some surprising results.

There is no visible "OK" button on a SmartScreen reputation warning.

.com files still work fine on Windows; Visual Studio installs devenv.com, for example (IIRC, it's there for a somewhat wacky reason. See %PATHEXT%)

Happy to add those, if you can point to some information about actual implementations?

Is your contention here that there's somehow a human male with two Ethernet ports that is manipulating HTTPS traffic and I'm just too "lazy" to admit that? https://blog.cloudflare.…

The many many upstart browsers (including mine) that are eager for Chrome to do something so foolish so we can collect all of their irate users?

To answer a few questions here: 1. I landed this fix because there was a policy that did not work properly. We could instead document that the URLBlocklist policy works for every s…

The abstraction leaks because the performance characteristics are inherently impossible to mask from the higher layers. There are other places where the abstraction leaks as well (…

As noted in the blog post, he's the author of the Shell Namespace code, but not the ZIP code beneath.

Tracked by https://crbug.com/959839

It certainly appears to be monitoring the entry of passwords into Facebook, but given the stated purpose of the extension ("Record activities undertaken in the content area for lat…

Many "irrational" decisions are related to interactions with anti-bot/anti-fraud logic. I worked on IE in the days when there were many crazy conspiracy theories about silverlight …

Thanks! Followup post has a little bit more: https://textslashplain.com/2018/05/07/google-chrome-twoish-y...

A full build of Chrome on local hardware takes a very long time, variable based on the number of CPU cores and their clock speed. Much faster builds are achieved using Goma. https:…

Not anymore, after https://bugs.chromium.org/p/chromium/issues/detail?id=646465 . Hence https://bugs.chromium.org/p/chromium/issues/detail?id=663971

> " it was not really compelling versus LZHAM " For those of us building things on the web, things supported by browsers are far more compelling than those that are not.