Viewing profile — jbroman

I believe you can purchase a GameBoy cartridge reader.

This is an improvement to that feature which allows you to modify the response headers in addition to the response body.

Sure, but a credentialed person is more likely to be familiar with other research in the area and have expertise with state of the art techniques in the field. So an uninformed rea…

The alternatives would seem to be "data center powered by non-renewable energy" and "no data center", no?

Kinda specific, but breakdancing: https://www.youtube.com/watch?v=AIDaadRNPpg

The very first sentence points to a PZ blog post about the Chrome sandbox.

The more recent weakrefs addition does allow you to observe finalization: https://v8.dev/features/weak-references

Because by doing this you have misrepresented the truth in order to extract more money from your employer than you agreed (presumably, in your employment contract). (As I commented…

It seems pretty unwise to defraud your employer like that.

This is consistent with what major tech companies do today when an employee relocates (or are simply hired in a less pricey region). Whether or not you agree that employees should …

Have you tried making an installable PWA? This should allow you to get an icon, notifications, and a separate window.

It's uses gn, a build system developed for Chromium. That said, on an Ubuntu system the steps to build Chromium are fairly well-documented and straightforward, as long as you have …

Executing JavaScript every frame is not that heavy, but if the main thread is blocked because of something that is , which may even be in another tab, the animation will stutter. T…

Specifically, the new version is at https://source.chromium.org/ , and the Android counterpart is https://cs.android.com/ .

Something running with your privileges could similarly use your existing sudo ticket, or manipulate the memory of your terminal emulator, or modify your shell to grab your credenti…

Most desktop OSes aren't designed to defend applications run by the same user from one another. As a consequence an attacker running unsandboxed code with your user privileges is a…

If you can run code with the same privileges as Chrome (under an authenticated user account), then on most desktop OSes, you can do whatever Chrome can do, including access the pas…

If you're on Linux >= 3.10, I believe Chrome should use the namespaces sandbox rather than the (privileged) setuid sandbox. https://chromium.googlesource.com/chromium/src/+/master/…

> Maybe browsers could do some static analysis for the simple cases? The risk here is that you end up where cases where non-obvious changes cause the static analysis to no longer w…

Presumably https://www.google.com/webmasters/tools/mobile-friendly/ See also http://googlewebmastercentral.blogspot.com/2014/11/helping-u... and http://googlewebmastercentral.blogs…

It's somewhat complicated. The changes to Chromium itself are here: https://chromium.googlesource.com/chromium/src/+log/37.0.206... But this is more likely to be a result of one of…

This has been fixed. Thanks for reporting.

I don't mean to put down Twitter's contribution to open source – which is substantial – but I think you're underestimating Google and Facebook's contributions when you suggest that…

Not sure if this is serious or snark, but...no, you use the card number, of course. Similarly, the magnetic stripe is not typically used in online transactions either. The question…

I believe Chrome apps can use Native Client, if you want to message between a C/C++ module and your web application. And of course there are increasingly mature tools for compiling…