Viewing profile — justinschuh

This argument is false on its face. There's overwhelming evidence in the Crowdstrike releases prior to the election[1]. And there's far more from them and at least half a dozen res…

> The network stack has been out of the content process for a super long time, it is not a new thing. FWIW, Chrome's network stack doesn't live in the content process either. It's …

I don't keep up too much on Safari these days, so congrats on moving the network stack out of the content process. But looking at the current WebProcess seat-belt policy and what g…

Indeed. Fixed now, and thanks for letting me know.

Just to add some context, on macOS you can look at the seat-belt policy as a rough analog of for basic sandboxing guarantees, where the fewer exceptions you have the stronger your …

So, the thing we call "win32k lockdown" on Chrome is just a term for the various things we had to do to enable ProcessSystemCallDisablePolicy on our sandboxed renderer processes (t…

Yup. Our only closed source bits at this point are Flash and the Widevine CDM (DRM), both of which can be disabled from: Settings -> Content Settings.

There's no reason for FUD. We've always listed all potential data transmission or collection in this regularly updated whitepaper: https://www.google.com/chrome/browser/privacy/whi…

Please don't spread misinformation. Here are the facts: 1. While the Hotword module was downloaded at startup, the feature was not activated without the user explicitly enabling it…

Really? Repeatedly? So, I'm sure you can produce a citation to this effect?

> when riseup.net got an NSL to give access to the email accounts This is simply not true. An NSL cannot be used to compel access to any communication content—and certainly not con…

No worries. :)

I think you may be confused about who you're replying to and what subject you're replying on.

I think we've seen it once so far, for a Flash exploit that didn't have a sandbox escape in Chrome.

Obama's first term was a firehose of this kind of hate from Beck: http://www.cbsnews.com/news/beck-compares-obama-to-the-nazis... I actually watch Fox with some regularity and foll…

No, all we have right now are projections, which put Clinton at ~2% lead in the popular vote. We won't have final vote counts until probably December, because many millions of outs…

I wonder whether you actually read the article you linked, because here's how he tries to shift the blame and deny his own accountability: >Now, I’ve got people on the left accusin…

A non-free pass would mean Beck actually took responsibility for his actions and apologized rather than than attempt to excuse himself with false equivalence. Let's be clear, he ba…

That video was posted back in March, during the Republican primaries. I have no idea why you think it's related to the protests this week.

Mentioning BadUSB very much implies confusion about the threat models at play. That is, the threat model for BadUSB is a malicious device that attacks the host OS, drivers, or appl…

This response just doesn't make sense given that modern OSes expose USB through much higher-level device management and communication APIs. Those are the APIs browsers use, and I'v…

Sorry, you seem to have misread my statement. Everything you just listed are devices that the OS already natively binds. I'm not aware of anyone considering WebUSB implementations …

Sorry, but I'm at a loss for what you believe you're responding to here. I made a clear, factual statement regarding the handling of bound USB devices for known devices and classes…

That's not at all an accurate framing. I'm not aware of any implementation that plans to allow access to HID devices (keyboard, mouse, etc.) or other device classes that are alread…

This particular restriction is intended to address things like authentication devices (e.g. gnubby) where you basically destroy the entire security model if a user accidentally all…