ericlaw

7 ms·

1.
by ericlaw 1mo ago
Note that I said: "One of my", and Cloudflare has hired a HUGE percentage of the best networking talent I've encountered.
2.
by ericlaw 1mo ago
Fun fact: still can in Chromium-based browsers. https://textslashplain.com/2023/03/22/attack-techniques-spoo...
3.
by ericlaw 11mo ago
The October 2025 Patch Tuesday patches locked down previews of files in the Windows Explorer shell. This post explains why.
4.
by ericlaw 2y ago
Mistakes and Successes in building the Fiddler web debugger
5.
Blocking content in Chrome Manifest v3(textslashplain.com)
6 points by ericlaw 2y ago|0 comments
6.
by ericlaw 3y ago
Almost everybody knows this, yet most of us don't think through the implications, leading to some surprising results.
7.
Beware: URLs Are Pointers to Mutable Entities(textslashplain.com)
3 points by ericlaw 3y ago|1 comments
8.
by ericlaw 3y ago
There is no visible "OK" button on a SmartScreen reputation warning.
9.
by ericlaw 3y ago
.com files still work fine on Windows; Visual Studio installs devenv.com, for example (IIRC, it's there for a somewhat wacky reason. See %PATHEXT%)
10.
by ericlaw 4y ago
Happy to add those, if you can point to some information about actual implementations?
11.
by ericlaw 4y ago
Is your contention here that there's somehow a human male with two Ethernet ports that is manipulating HTTPS traffic and I'm just too "lazy" to admit that? https://blog.cloudflare.com/monsters-in-the-midd
12.
View-Source in Chromium(textslashplain.com)
1 points by ericlaw 5y ago|1 comments
13.
by ericlaw 5y ago
The many many upstart browsers (including mine) that are eager for Chrome to do something so foolish so we can collect all of their irate users?
14.
by ericlaw 5y ago
To answer a few questions here: 1. I landed this fix because there was a policy that did not work properly. We could instead document that the URLBlocklist policy works for every scheme but one, or we could fix it. Fixing it makes more sens
15.
by ericlaw 5y ago
The abstraction leaks because the performance characteristics are inherently impossible to mask from the higher layers. There are other places where the abstraction leaks as well (try to add a file with a Unicode name to a Compressed Folder
16.
by ericlaw 5y ago
As noted in the blog post, he's the author of the Shell Namespace code, but not the ZIP code beneath.
17.
by ericlaw 7y ago
Tracked by https://crbug.com/959839
18.
by ericlaw 7y ago
It certainly appears to be monitoring the entry of passwords into Facebook, but given the stated purpose of the extension ("Record activities undertaken in the content area for later playback") it's not clear to me that this
19.
by ericlaw 8y ago
Many "irrational" decisions are related to interactions with anti-bot/anti-fraud logic. I worked on IE in the days when there were many crazy conspiracy theories about silverlight and IE collaborating to ruin the open web. Th
20.
by ericlaw 8y ago
Thanks! Followup post has a little bit more: https://textslashplain.com/2018/05/07/google-chrome-twoish-y...
21.
by ericlaw 8y ago
A full build of Chrome on local hardware takes a very long time, variable based on the number of CPU cores and their clock speed. Much faster builds are achieved using Goma. https://news.ycombinator.com/item?id=16135596
22.
The Trouble with Magic – Usability vs. Predictability(textslashplain.com)
3 points by ericlaw 10y ago|0 comments
23.
by ericlaw 10y ago
Not anymore, after https://bugs.chromium.org/p/chromium/issues/detail?id=646465 . Hence https://bugs.chromium.org/p/chromium/issues/detail?id=663971
24.
by ericlaw 11y ago
> " it was not really compelling versus LZHAM " For those of us building things on the web, things supported by browsers are far more compelling than those that are not.
25.
by ericlaw 11y ago
They probably would've if they were doing it now.
26.
by ericlaw 11y ago
It doesn't bother to compare LZMA because no major browser is planning to add LZMA.
27.
by ericlaw 11y ago
As it turns out, they made a great offer for me to return in 2014, but they don't allow remote work and we're staying in Austin. I have many friends in IE/Edge and wish them all the best.
28.
by ericlaw 11y ago
Pass the -dpiAware command line argument into Fiddler to have it report that it is DPI aware.