miniblog.

← Back to all posts
Sep 3, 2019 at 17:06
Firefox 69 is shipping with protection from cryptocurrency mining running without the user's knowledge: https://venturebeat.com/2019/04/09/firefox-will-now-let-you-block-fingerprint-tracking-and-cryptojacking/ I know CI services like Travis have to worry about this, but I wouldn't have thought JS mining would be anywhere near worthwhile.
Vercel Security Checkpoint

Related Posts

Nov 6, 2015 at 18:26
In the DOM, no one will hear you scream https://www.slideshare.net/x00mario/in-the-dom-no-one-will-hear-you-scream (argues that perfect server-side XSS protection is impossible!)
In the DOM, no one will hear you scream
In the DOM, no one will hear you scream
The document discusses the history and development of the Document Object Model (DOM) from its early implementations in 1995 to modern standards. It outlines key milestones like DOM Level 1 in 1998, the rise of JavaScript frameworks like Prototype, jQuery and MooTools in 2005-2006, and ongoing work by the W3C and WHATWG. The talk will explore security issues that can arise from the DOM's ability to convert strings to executable code and demonstrate an attack technique called DOM clobbering. - Download as a PDF, PPTX or view online for free
Jun 27, 2013 at 20:06
Putting my email (with reCAPTCHA protection from harvesting) online was a great decision. Interesting people sometimes reach out to me.
Mar 11, 2013 at 10:27
VP8 has patent protection from Google and MPEG-LA. Even Adobe are talking about adding it to Flash. Looks like it might win the format wars.