Adrian Taylor

173 Followers
144 Following
106 Posts
About meChrome Security security bug wrangler. Champion of zapping whole classes of bug too (πŸ¦€). Mountain biker, rock climber, snowboarder. Occasionally plays with model railways and goes gliding. Lives near Cambridge, UK
Quarterly Updates

Using Chrome's accessibility APIs to find security bugs

Posted by Adrian Taylor, Security Engineer, Chrome Chrome’s user interface (UI) code is complex, and sometimes has b...

Google Online Security Blog
Quarterly Updates

Here's what we've been doing in Chrome Security in the first three months of 2024: https://www.chromium.org/Home/chromium-security/quarterly-updates/#q1-2024
Quarterly Updates

In Chrome we've been working on what I think is a pretty cool new web API called DBSC. It'll help mitigate a threat that's actually outside of Chrome's traditional threat model, but one that my team has focused heavily on in recent years -- cookie theft from local malware. DBSC wil let you replace long-lived bearer tokens in cookies with a session that's bound to the device so it can't be stolen.

https://blog.chromium.org/2024/04/fighting-cookie-theft-using-device.html

Fighting cookie theft using device bound sessions

Cookies – small files created by sites you visit – are fundamental to the modern web. They make your online experience easier by saving bro...

Chromium Blog
Quarterly Updates

@parkern I'm delighted you remember that funny little talk!

Thanks to @adetaylor, Comprehensive Rust  now has a course on how to add #rust to #chromium!

You can read the new section here: https://google.github.io/comprehensive-rust/chromium.html

If you do the final exercise, you will end up with a browser that speaks funny! πŸ˜€

Like the Rust in Android course, this is mostly relevant to the engineers who work on Chromium itself. Others are welcome to play along, but you should already know how to build Chromium.

#google #chrome #memorysafety #security #comprehensiverust

Welcome - Comprehensive Rust πŸ¦€