165 Followers
149 Following
166 Posts
Chrome Security Improver. Antarctican. Kiwi. Cyberblah. ACSC(J) survivor.
All opinions mine or 3x your money back.
@SteveSyfuhs it would be rad if there was a process mitigation that let processes opt out

V8 Security is hiring in Munich, Germany: https://www.google.com/about/careers/applications/jobs/results/96463411851731654-software-engineer-iii-v8-security

Great opportunity to work on some really hard and interesting problems in the security space!

Software Engineer III, V8 Security — Google Careers

My team in Chrome Platform Security is hiring for a senior Android security expert - if you're into syscalls, binder, processes and other low level stuff you'd be perfect - I do this but for Windows and didn't know Chrome or much C++ when I started.

The ad is generic but feel free to ask questions - https://www.google.com/about/careers/applications/jobs/results/104891950447895238 - you'll be a part of a wider security team that works on lots of cool stuff and protects billions of people - https://www.chromium.org/Home/chromium-security/quarterly-updates/

Senior Software Engineer, Chrome — Google Careers

@tiraniddo ah yes the completely unexplained size parameter is indeed 0x10000000
@sereeena I'll be doing a specimen low effort talk on Wednesday if I don't write it tomorrow...
@lcamtuf solid steampunk erasure
@mjg59 this is the way
Effective Fuzzing: A Dav1d Case Study

Guest post by Nick Galloway, Senior Security Engineer, 20% time on Project Zero Late in 2023, while working on a 20% project with Projec...

Thinking about which bugs are useful to attackers, and recognizing that not every mitigation needs to be perfect to help protect some of the people using Chrome.
https://security.googleblog.com/2024/10/evaluating-mitigations-vulnerabilities.html?m=1
Evaluating Mitigations & Vulnerabilities in Chrome

Posted by Alex Gough, Chrome Security Team The Chrome Security Team is constantly striving to make it safer to browse the web. We invest ...

Google Online Security Blog
Can't believe I went a whole day yesterday not being aware about cyber security