Several months in the life of Project Zero – Part 1: The Chrome bug of suffering
googleprojectzero.blogspot.com
Several months in the life of Project Zero – Part 1: The Chrome bug of suffering
1–10 of 28 posts
Re: Several months in the life of Project Zero – Part 1: The Chrome bug of suffering
#2Google projekt zero website is the ONLY website which frequently get featured on HN that I cannot read on my iphone. Safari, Firefox or Edge are all rendering the page with horizontal scrollbars. I can use 2 finger zoom in and then a third finger to move the content around. At that point I cannot see the screen for my fingers and have problems holding my phone in my hands.
Do they have a bounty program for HTML where one can submit a fix? /s
This is not a new issue. Been like that for a long time
Re: Several months in the life of Project Zero – Part 1: The Chrome bug of suffering
#3Google projekt zero website is the ONLY website which frequently get featured on HN that I cannot read on my iphone. Safari, Firefox or Edge are all rendering the page with horizontal scrollbars. I can use 2 finger zoom in and then a third finger to move the content around. At that point I cannot see the screen for my fingers and have problems holding my phone in my hands. Do they have a bounty program for HTML where…
I'm on Android so I don't have any trouble, but keep in mind that all "browsers" on iOS are just Safari with a skin and a few features bolted onto it. Apple doesn't allow different browser engines on their platform because of various reasons.
Try the non-mobile version: https://googleprojectzero.blogspot.com/2020/02/several-month...
It seems to be using the default simple blogger theme so there's probably no point of contact for the website, it's Google after all. The best chance you have is to submit a bug report with Apple about Safari not rendering the page right.
Re: Several months in the life of Project Zero – Part 1: The Chrome bug of suffering
#4Google projekt zero website is the ONLY website which frequently get featured on HN that I cannot read on my iphone. Safari, Firefox or Edge are all rendering the page with horizontal scrollbars. I can use 2 finger zoom in and then a third finger to move the content around. At that point I cannot see the screen for my fingers and have problems holding my phone in my hands. Do they have a bounty program for HTML where…
I just read both parts without even noticing but you’re right it does. I guess you have a different device/screen size as the position and scale is correct for me. It’s a bug in blogspot itself so far as I can tell.
Re: Several months in the life of Project Zero – Part 1: The Chrome bug of suffering
#5Google projekt zero website is the ONLY website which frequently get featured on HN that I cannot read on my iphone. Safari, Firefox or Edge are all rendering the page with horizontal scrollbars. I can use 2 finger zoom in and then a third finger to move the content around. At that point I cannot see the screen for my fingers and have problems holding my phone in my hands. Do they have a bounty program for HTML where…
Maybe it's a potential vulnerability they have yet to exploit themselves... /sarcasm and also maybe not.
Re: Several months in the life of Project Zero – Part 1: The Chrome bug of suffering
#6> C-style programming in C++ is also a bad sign; the IOBuffer design pattern with separate storage of buffers and their sizes is inherently dangerous.
This the main take away. Even when writing C, just prefer safe libraries to default strings and arrays, when possible.
By the way, MSR is hiring for Checked C.
Re: Several months in the life of Project Zero – Part 1: The Chrome bug of suffering
#7> C-style programming in C++ is also a bad sign; the IOBuffer design pattern with separate storage of buffers and their sizes is inherently dangerous. This the main take away. Even when writing C, just prefer safe libraries to default strings and arrays, when possible. By the way, MSR is hiring for Checked C.
>By the way, MSR is hiring for Checked C
Only internships ATM according to their web page
Re: Several months in the life of Project Zero – Part 1: The Chrome bug of suffering
#8> At this point, we were questioning our decision-making process more thoroughly, and immediately tried reproducing with the same version on a Linux build. I think you, the reader, can imagine how we felt when the issue also reproduced locally with an ASAN Linux build…
This was my very first thought when I read that it occurred on Android, so I know it had to be someone’s first thought working on this. Very unfortunate, but I’m pretty sure we’ve all been there, with a gut feeling we either ignored or outright doubted that could’ve potentially saved months at minimal risk.
Re: Several months in the life of Project Zero – Part 1: The Chrome bug of suffering
#9> C-style programming in C++ is also a bad sign; the IOBuffer design pattern with separate storage of buffers and their sizes is inherently dangerous. This the main take away. Even when writing C, just prefer safe libraries to default strings and arrays, when possible. By the way, MSR is hiring for Checked C.
>By the way, MSR is hiring for Checked C Only internships ATM according to their web page
Internships aren't done for free, so it is still a job.
Re: Several months in the life of Project Zero – Part 1: The Chrome bug of suffering
#10Earlier quoted context omitted.
>By the way, MSR is hiring for Checked C Only internships ATM according to their web page
Internships aren't done for free, so it is still a job.
While that is true, when one says "hiring", it generally refers to a somewhat "tenured" or "continued" position.
At least that's what I understood from your original comment.