News for hackers. Stuff that matters.

mikeecb

I changed the Chromium browser (as a masters project) to intercept suspicious extension actions like inserting elements etc and to alert users of what the extension is attempting to do. Using this proof-of-concept browser would have helped you debug your ad injection problem!

https://cypher.codes/writing/intercepting-suspicious-chrome-...

- Note: my project specifically tries to protect users from Facebook hijacking and ad injection attacks - the two most common attacks on the CWS!

They've made efforts to make it more isolated though [1]. It seems like Firefox isn't going in this direction.

[1]: https://www.chromium.org/developers/design-documents/site-is...

One of the reasons the Chrome browser uses one process per tab is so that memory between web-pages is isolated. By doing this, an attacker in control of a renderer process cannot read data from another renderer process (web-page).

It seems like Firefox has made a security / memory tradeoff here since renderer processes can render multiple (4 by default) web-pages at a time.

Re:Pinboard Acquires Delicious on Thursday June 01, 2017 @01:42PM (#14462569)
The website claims to have 25k users [1].

[1]: https://pinboard.in/tour/

Re:Unix Cheatsheet on Friday August 14, 2015 @08:50AM (#10059830)
"rm -rf / - make computer faster" - so evil
Re:Ask HN: Starting a company for new app on Thursday January 29, 2015 @07:05AM (#8965610)
But the cost of incorporating is really tiny isn't it (£15 in the UK where I live)? And I'm thinking about what users think seeing an app created by a person vs a company

Ask HN: Not requiring users to sign up

I'm building a website and want to get around the issue of requiring users to sign up/ register with a username + password combo.A while back I read an article on HN about giving users their own domain for their social accounts and I was wondering if anyone else has implemented anything similar. The alternative is just to use sign in with Facebook / Twitter / Google etc but I want to keep it as...

( Read More... | 1 comment | 3 points | on HN )