Choosing the right browser is crucial for your security, privacy, and overall experience on the web. This is especially important now that Chrome is dropping support for the popular uBlock Origin adblocker browser extension. I have evaluated the security, privacy, extensibility, and ethical alignment of today s most popular browsers in order to determine which is [ ]
Link fraud is increasingly undermining trust in major online platforms, including Google, Bing, and X (Twitter). These platforms allow advertisers to spoof links with unverified vanity URLs , laundering trust in their systems, while simultaneously deflecting blame onto advertisers when these mechanisms are exploited for fraudulent purposes. I believe that this status quo must be abolished. [ ]
🤯 Favioli is a productivity extension that makes it easier to recognize tabs within Chrome. Favioli was originally inspired by two things. The first thing that spurred the idea was Eli Grey s personal site and its use of Emoji Favicon Toolkit to make randomized emoji favicons. The favicon of their site shows different emoji on-load [ ]
We are announcing Zerodrop, an open-source stealth URL toolkit optimized for bypassing censorship filters and dropping malware. Zerodrop is written in Go and features a powerful web UI that supports geofencing, datacenter IP filtering, blocklist training, manual blocklisting/allowlisting, and advanced payload configuration! Zerodrop can help you elude the detection of the automatic URL scanners…
On May 4th, 2017 I discovered and privately reported a recipient spoofing vulnerability in Google Inbox. I noticed that the composition box always hid the email addresses of named recipients without providing a way to inspect the actual email address, and figured out how to abuse this with mailto: links containing named recipients. The link [ ]
Opera users were vulnerable to a publicly-disclosed UXSS exploit for most of 2010-2012. I privately disclosed a UXSS vulnerability (complete SOP bypass) to Opera Software in April 2010, and recently discovered that Opera suffered a regression of this issue and continued to be vulnerable for over two years after disclosure. The vulnerability was that data: [ ]
Some time between Aug 27, 2012 and May 3, 2014, the Macmillan Publishers subsidiary Bedford/St. Martin s suffered a data breach that leaked the unique email address that I provided to them. I have previously informed them of the breach and it appears that they do not care to investigate. I don t appreciate large companies getting [ ]
(Update) Standardization I have standardized navigator.cores as navigator.hardwareConcurrency, and it is now supported natively in Chrome, Safari, Firefox, and Opera. Our polyfill has renamed the APIs accordingly. Since the initial blog post, Core Estimator has been updated to estimate much faster and now has instant estimation in Chrome through PNaCl. navigator.cores So you just built some [ ]
Have you ever wanted to add a Save as button to a webapp? Whether you re making an advanced WebGL-powered CAD webapp and want to save 3D object files or you just want to save plain text files in a simple Markdown text editor, saving files in the browser has always been a tricky business. Usually [ ]
I recently discovered a method to title image files in Opera. I was experimenting with CSS generated content in regards to the title element in various browsers, and discovered that as long as the head and title elements are not display: none, generated content applied before and after the title element is added to the [ ]