| 28. 10. 2024 | Lenovo P1, Gen7 – textslashplain.com
|
| 25. 10. 2024 | Defensive Technology: Antimalware Scan Interface (AMSI) – textslashplain.com
|
| 13. 10. 2024 | Content-Blocking in Manifest v3 – textslashplain.com
|
| 2. 10. 2024 | Attack Techniques: Encrypted Archives – textslashplain.com
|
| 16. 9. 2024 | Welcome to Fall, I guess? – textslashplain.com
|
| 15. 7. 2024 | Browser Features: Find in Page – textslashplain.com
|
| 10. 6. 2024 | Memento Mori – Farewells – textslashplain.com
|
| 5. 6. 2024 | Attack Techniques: PayPal Invoice Scams – textslashplain.com
|
| 4. 6. 2024 | Attack Techniques: Trojaned Clipboard – textslashplain.com
|
| 22. 5. 2024 | Authenticode in 2024 – textslashplain.com
|
| 21. 5. 2024 | Attack Techniques: Remote Control Software – textslashplain.com
|
| 20. 5. 2024 | Attack Techniques: Full-Trust Script Downloads – textslashplain.com
|
| 17. 5. 2024 | Spring 2024 Updates – textslashplain.com
|
| 7. 5. 2024 | ERR_BLOCKED_BY_CLIENT and HTML5 Sandbox – textslashplain.com
|
| 23. 4. 2024 | Mouse Gestures in Edge – textslashplain.com
|
| 21. 4. 2024 | Going Electric – Solar 1 Year Later – textslashplain.com
|
| 10. 4. 2024 | Browser Security Bugs that Aren’t: JavaScript in PDF – textslashplain.com
|
| 9. 4. 2024 | A Slow 10K – textslashplain.com
|
| 27. 3. 2024 | Attacker Techniques: Gesture Jacking – textslashplain.com
|
| 20. 3. 2024 | pushState and URL Blocking – textslashplain.com
|
| 7. 3. 2024 | Browser Extensions: Powerful and Potentially Dangerous – textslashplain.com
|
| 28. 2. 2024 | Second Seaside Half – textslashplain.com
|
| 22. 2. 2024 | The Importance of Feedback Loops – textslashplain.com
|
| 20. 2. 2024 | Cloaking, Detonation, and Client-side Phishing Detection – textslashplain.com
|
| 4. 2. 2024 | x22i Treadmill Review – textslashplain.com
|
| 29. 1. 2024 | How Downloads Work – textslashplain.com
|
| 23. 1. 2024 | A Cold and Slow 3M Half – textslashplain.com
|
| 3. 1. 2024 | The Blind Doorkeeper Problem, or, Why Enclaves are Tricky – textslashplain.com
|
| 2. 1. 2024 | Coding at Google – textslashplain.com
|
| 19. 12. 2023 | Fall 2023 Races – textslashplain.com
|
| 7. 12. 2023 | Defense Techniques: Blocking Protocol Handlers – textslashplain.com
|
| 22. 11. 2023 | Attack Techniques: Steganography – textslashplain.com
|
| 14. 11. 2023 | Troubleshooting Edge (or Chrome) Broken UI – textslashplain.com
|
| 9. 11. 2023 | Troubleshooting Edge (or Chrome) Browser Crashes – textslashplain.com
|
| 24. 10. 2023 | Driving Electric – One Year In – textslashplain.com
|
| 23. 10. 2023 | Protecting Auth Tokens – textslashplain.com
|
| 17. 10. 2023 | ServiceWorkers vs. Network Filtering – textslashplain.com
|
| 16. 10. 2023 | Security: The Impact of Time – textslashplain.com
|
| 13. 10. 2023 | Beware: URLs are Pointers to Mutable Entities – textslashplain.com
|
| 11. 10. 2023 | Email Etiquette: Avoid BCC’ing large distribution lists – textslashplain.com
|
| 5. 10. 2023 | Fiddler Web Debugger Turns 20 – textslashplain.com
|
| 4. 10. 2023 | Security Tradeoffs: Privacy – textslashplain.com
|
| 15. 9. 2023 | Security: Tradeoffs – textslashplain.com
|
| 14. 9. 2023 | Web Platform Weirdness: Babies and Bathwater – textslashplain.com
|
| 14. 9. 2023 | Web Weirdness: Probing Localhost – textslashplain.com
|
| 12. 9. 2023 | Attack Techniques: Fullscreen Abuse – textslashplain.com
|
| 11. 9. 2023 | The Challenge of IP Reputation – textslashplain.com
|
| 11. 9. 2023 | Defensive Techniques: Application Guard – textslashplain.com
|
| 2. 9. 2023 | Kilimanjaro – To Exit Gate & Home – textslashplain.com
|
| 2. 9. 2023 | Kilimanjaro – Descent to Mweka – textslashplain.com
|
| 2. 9. 2023 | Kilimanjaro – To Summit – textslashplain.com
|
| 2. 9. 2023 | Kilimanjaro – To Kosovo/Respicius Camp – textslashplain.com
|
| 2. 9. 2023 | Kilimanjaro – Up Barranco Wall to Karanga Camp – textslashplain.com
|
| 1. 9. 2023 | Kilimanjaro – To Lava Tower and Barranco Camp – textslashplain.com
|
| 31. 8. 2023 | Kilimanjaro – To Shira 2 Camp – textslashplain.com
|
| 30. 8. 2023 | Kilimanjaro – To Shira 1 Camp – textslashplain.com
|
| 29. 8. 2023 | Kilimanjaro – Trailhead to Forest Camp – textslashplain.com
|
| 25. 8. 2023 | Kilimanjaro – Meet the Team; To Ndarakwai Lodge – textslashplain.com
|
| 24. 8. 2023 | Kilimanjaro – Mini Safari – textslashplain.com
|
| 23. 8. 2023 | SmartScreen Application Reputation, In Pictures – textslashplain.com
|
| 23. 8. 2023 | Divorce – 18 Months In – textslashplain.com
|
| 23. 8. 2023 | Kilimanjaro – Coffee Tour – textslashplain.com
|
| 18. 8. 2023 | Attack Techniques: QR Codes – textslashplain.com
|
| 14. 8. 2023 | Enforcing SmartScreen with Policy – textslashplain.com
|
| 12. 8. 2023 | Attack Techniques: SMS Gift Card Scams – textslashplain.com
|
| 4. 8. 2023 | Kilimanjaro – Getting There – textslashplain.com
|
| 4. 8. 2023 | Kilimanjaro – Journal – textslashplain.com
|
| 2. 8. 2023 | Kilimanjaro – Gear – textslashplain.com
|
| 27. 7. 2023 | Kilimanjaro – Overview – textslashplain.com
|
| 22. 6. 2023 | Browser SSO / Automatic Signin – textslashplain.com
|
| 31. 5. 2023 | Improving the Microsoft Defender Browser Protection Extension – textslashplain.com
|
| 16. 5. 2023 | How do Random Credentials Mysteriously Appear? – textslashplain.com
|
| 15. 5. 2023 | Detecting When the User is Offline – textslashplain.com
|
| 13. 5. 2023 | New TLDs: Not Bad, Actually – textslashplain.com
|
| 16. 4. 2023 | A Beautiful 10K – textslashplain.com
|
| 14. 4. 2023 | (The Futility of) Keeping Secrets from Yourself – textslashplain.com
|
| 12. 4. 2023 | Auth Flows in a Partitioned World – textslashplain.com
|
| 5. 4. 2023 | Explainer: File Types – textslashplain.com
|
| 25. 3. 2023 | How Microsoft Edge Updates – textslashplain.com
|
| 22. 3. 2023 | Attack Techniques: Spoofing via UserInfo – textslashplain.com
|
| 20. 3. 2023 | Going Electric – Solar – textslashplain.com
|
| 16. 3. 2023 | Improving Native Message Host Reliability on Windows – textslashplain.com
|
| 16. 3. 2023 | Attack Techniques: Open Redirectors, CAPTCHAs, Site Proxies, and IPFS, oh my – textslashplain.com
|
| 1. 3. 2023 | Slow Seaside Half – textslashplain.com
|
| 10. 2. 2023 | Q: “Remember this Device, Doesn’t?!?” – textslashplain.com
|
| 9. 2. 2023 | Attack Techniques: Blended Attacks via Phone – textslashplain.com
|
| 6. 2. 2023 | A New Era: PM -> SWE – textslashplain.com
|
| 4. 2. 2023 | A Year of Intention – textslashplain.com
|
| 23. 1. 2023 | Couch to Half Marathon: Closing My First Year of Running – textslashplain.com
|
| 19. 1. 2023 | Defense Techniques: Reporting Phish – textslashplain.com
|
| 12. 1. 2023 | SlickRun – textslashplain.com
|
| 12. 1. 2023 | 2022 EOY Fitness Summary – textslashplain.com
|
| 11. 1. 2023 | Attack Techniques: Priming Attacks on Legitimate Sites – textslashplain.com
|
| 11. 1. 2023 | Attack Techniques: Phishing via Mailto – textslashplain.com
|
| 11. 1. 2023 | Attack Techniques: Phishing via Local Files – textslashplain.com
|
| 17. 12. 2022 | ProjectK.commit() – textslashplain.com
|
| 16. 12. 2022 | Missed Half – textslashplain.com
|
| 6. 12. 2022 | TLS Certificate Verification Changes in Edge – textslashplain.com
|
| 2. 12. 2022 | Mark-of-the-Web: Additional Guidance – textslashplain.com
|
| 27. 11. 2022 | Q4 Races – textslashplain.com
|
| 18. 11. 2022 | Driving Electric – textslashplain.com
|
| 17. 11. 2022 | Thoughts on Twitter – textslashplain.com
|
| 16. 11. 2022 | “Not Secure” Warning for IE Mode – textslashplain.com
|
| 21. 10. 2022 | Microsoft Employee’s Guide to Maximizing Donations – textslashplain.com
|
| 13. 10. 2022 | Q: Why do tabs sometimes show an orange dot? – textslashplain.com
|
| 12. 10. 2022 | Capturing Logs for Debugging SmartScreen – textslashplain.com
|
| 1. 10. 2022 | Cruising Alaska – textslashplain.com
|
| 30. 9. 2022 | HTTPS Goofs: Forgetting the Bare Domain – textslashplain.com
|
| 30. 9. 2022 | Best Practice: Post-Mortems – textslashplain.com
|
| 28. 9. 2022 | Badware Techniques: Notification Spam – textslashplain.com
|
| 12. 9. 2022 | Edge’s Super-Res Image Enhancement – textslashplain.com
|
| 1. 9. 2022 | QuickFix: Trivial Chrome Extensions – textslashplain.com
|
| 5. 8. 2022 | Passkeys – textslashplain.com
|
| 4. 8. 2022 | Understanding Browser Channels – textslashplain.com
|
| 1. 8. 2022 | Certificate Revocation in Microsoft Edge – textslashplain.com
|
| 28. 7. 2022 | New Recipes for 3rd Party Cookies – textslashplain.com
|
| 22. 7. 2022 | My Next Opportunity – textslashplain.com
|
| 19. 7. 2022 | Edge URL Schemes – textslashplain.com
|
| 28. 6. 2022 | End of Q2 Check-in – textslashplain.com
|
| 24. 6. 2022 | Captive Portals – textslashplain.com
|
| 24. 6. 2022 | Extending Fiddler’s ImageView – textslashplain.com
|
| 17. 6. 2022 | “Batteries-Included” vs “Bloated” – textslashplain.com
|
| 15. 6. 2022 | Chromium Startup – textslashplain.com
|
| 3. 6. 2022 | Microsoft Edge Tips and Tricks – textslashplain.com
|
| 27. 5. 2022 | Losing your cookies – textslashplain.com
|
| 18. 5. 2022 | Thoughts on Impact – textslashplain.com
|
| 17. 5. 2022 | Unexpectedly HTTPS? – textslashplain.com
|
| 3. 5. 2022 | Chromium Internals: PAK Files – textslashplain.com
|
| 11. 4. 2022 | Real-World Running – textslashplain.com
|
| 2. 4. 2022 | End of Q1 Check-in – textslashplain.com
|
| 1. 4. 2022 | Chromium’s DNS Cache – textslashplain.com
|
| 31. 3. 2022 | The “Magical” Back Button – textslashplain.com
|
| 22. 3. 2022 | Edge/Chrome Policy Registry Entries – textslashplain.com
|
| 15. 2. 2022 | Smarter Defaults by Paying Attention – textslashplain.com
|
| 14. 2. 2022 | Mid-February Checkin – textslashplain.com
|
| 9. 2. 2022 | MHTML in Chromium – textslashplain.com
|
| 21. 1. 2022 | Adding Protocol Schemes to Chromium – textslashplain.com
|
| 20. 1. 2022 | Debugging Compatibility in Edge – textslashplain.com
|
| 14. 1. 2022 | Recognizing Edge Windows – textslashplain.com
|
| 10. 1. 2022 | Trim Your Whitespace – textslashplain.com
|
| 9. 1. 2022 | Debug Native Messaging – textslashplain.com
|
| 7. 1. 2022 | Lock down web browsing using Kiosk Mode – textslashplain.com
|
| 6. 1. 2022 | getaddrinfo(2022) – textslashplain.com
|
| 5. 1. 2022 | Edge Command Line Arguments – textslashplain.com
|
| 31. 12. 2021 | Cruising Solo – textslashplain.com
|
| 1. 12. 2021 | Microsoft Edge’s Many Processes – textslashplain.com
|
| 1. 12. 2021 | Great Bug Reports via “Recreate My Problem” in Microsoft Edge – textslashplain.com
|
| 11. 11. 2021 | View-Source – textslashplain.com
|
| 17. 10. 2021 | Spooky: Enhancing Dark Mode in Chromium – textslashplain.com
|
| 15. 10. 2021 | MoarTLS: Non-Secure Download Blocking – textslashplain.com
|
| 13. 10. 2021 | Accessibility (UIA) Troubleshooting – textslashplain.com
|
| 1. 10. 2021 | Practical Time Machines – textslashplain.com
|
| 21. 9. 2021 | Determining OS Platform Version – textslashplain.com
|
| 3. 8. 2021 | Inspecting Certificates in Edge – textslashplain.com
|
| 2. 6. 2021 | Leaky Abstractions – textslashplain.com
|
| 25. 5. 2021 | Offline NetLog Viewing – textslashplain.com
|
| 20. 5. 2021 | Download Blocking by File Type – textslashplain.com
|
| 30. 3. 2021 | Per-Site Permissions in Edge – textslashplain.com
|
| 30. 3. 2021 | Specifying Per-Site Policy with Chromium’s URL Filter Format – textslashplain.com
|
| 12. 2. 2021 | Web Proxy Authentication – textslashplain.com
|
| 5. 2. 2021 | window.close() Restrictions – textslashplain.com
|
| 7. 1. 2021 | Sandboxing vs. Elevated Browsing (As Administrator) – textslashplain.com
|
| 17. 11. 2020 | Objectively, the best cat – textslashplain.com
|
| 27. 10. 2020 | Simply Making Simple Fixes Simple for Chromium – textslashplain.com
|
| 20. 10. 2020 | Client Certificates and Logout – textslashplain.com
|
| 9. 10. 2020 | Web “Sessions” in Private Mode – textslashplain.com
|
| 5. 10. 2020 | Images Keeping You Awake? – textslashplain.com
|
| 30. 9. 2020 | Debugging Browsers – Tools and Techniques – textslashplain.com
|
| 28. 9. 2020 | Local Data Encryption in Chromium – textslashplain.com
|
| 25. 9. 2020 | Web Debugging: Watching Element Changes – textslashplain.com
|
| 16. 9. 2020 | Browser Memory Limits – textslashplain.com
|
| 4. 9. 2020 | Web-to-App Communication: The Native Messaging API – textslashplain.com
|
| 2. 9. 2020 | Font Smoothing in Edge – textslashplain.com
|
| 24. 8. 2020 | Managing Edge via Policy – textslashplain.com
|
| 17. 8. 2020 | Seamless Single Sign-On – textslashplain.com
|
| 11. 8. 2020 | Beating Private Mode Blockers with an Ephemeral Profile – textslashplain.com
|
| 29. 7. 2020 | Revealing Passwords – textslashplain.com
|
| 14. 7. 2020 | Web Proxy Auto Discovery – textslashplain.com
|
| 4. 6. 2020 | Same Origin Policy & CORS – textslashplain.com
|
| 3. 6. 2020 | Avoiding Unexpected Navigation – textslashplain.com
|
| 19. 5. 2020 | Browser Basics: User Gestures – textslashplain.com
|
| 18. 5. 2020 | A bit of GREASE keeps the web moving – textslashplain.com
|
| 15. 5. 2020 | META CHARSET – textslashplain.com
|
| 4. 5. 2020 | Client Certificate Authentication – textslashplain.com
|
| 8. 4. 2020 | Analyzing Network Traffic Logs (NetLog json) – textslashplain.com
|
| 25. 3. 2020 | Debugging Proxy Configuration Scripts in the new Edge – textslashplain.com
|
| 12. 3. 2020 | Celebrating Fifteen Years – textslashplain.com
|
| 11. 3. 2020 | Enigma Conference 2020 – Browser Privacy Panel – textslashplain.com
|
| 26. 2. 2020 | "Can I… in the new Edge?" – textslashplain.com
|
| 20. 2. 2020 | Bypassing AppProtocol Prompts – textslashplain.com
|
| 11. 2. 2020 | Browser Password Managers: Threat Models – textslashplain.com
|
| 9. 2. 2020 | Demystifying Browsers – textslashplain.com
|
| 6. 2. 2020 | App-to-Web Communication: Launching Web Apps – textslashplain.com
|
| 3. 2. 2020 | Microsoft's Three Browsers – textslashplain.com
|
| 3. 2. 2020 | My New Chromium Build PC – textslashplain.com
|
| 31. 1. 2020 | Security Zones in Edge – textslashplain.com
|
| 20. 1. 2020 | Retiring Internet Explorer – textslashplain.com
|
| 17. 1. 2020 | Capture Network Logs from Edge and Chrome – textslashplain.com
|
| 12. 12. 2019 | WebOCs and HTTP/2 – textslashplain.com
|
| 4. 12. 2019 | The Pitfalls of EventSource over HTTP/1.1 – textslashplain.com
|
| 21. 11. 2019 | Web-to-WebApp Communication: Custom Scheme Handlers – textslashplain.com
|
| 6. 11. 2019 | Thoughts on DNS-over-HTTPS – textslashplain.com
|
| 4. 11. 2019 | bye: FTP Support Is Going Away – textslashplain.com
|
| 16. 10. 2019 | Improving Privacy by Limiting Referrers – textslashplain.com
|
| 9. 10. 2019 | Navigating to File Urls – textslashplain.com
|
| 30. 9. 2019 | Same-Site Cookies By Default – textslashplain.com
|
| 27. 9. 2019 | Aw, snap! What if Every Tab Crashes? – textslashplain.com
|
| 26. 9. 2019 | Web-to-App Communication: DirectInvoke – textslashplain.com
|
| 3. 9. 2019 | Livin’ on the Edge: Root Causing Regressions – textslashplain.com
|
| 29. 8. 2019 | Web-to-App Communication: App Protocols – textslashplain.com
|
| 28. 8. 2019 | Browser Architecture: Web-to-App Communication Overview – textslashplain.com
|
| 11. 8. 2019 | Spying on HTTPS – textslashplain.com
|
| 8. 8. 2019 | Livin’ on the Edge: Dude Where’s My Fix?!? (Redux) – textslashplain.com
|
| 17. 7. 2019 | Livin’ on the Edge: Dude Where’s My Fix?!? – textslashplain.com
|
| 17. 7. 2019 | Great Product Support – textslashplain.com
|
| 16. 7. 2019 | Updating Browsers Quickly: Flags, Respins, and Components – textslashplain.com
|
| 5. 7. 2019 | Challenges with Federated Identity in modern browsers – textslashplain.com
|
| 24. 6. 2019 | Surprise: Undead Session Cookies – textslashplain.com
|
| 1. 5. 2019 | Edge76 vs. Edge18 vs. Chrome – textslashplain.com
|
| 1. 5. 2019 | Protect Your Google Account – textslashplain.com
|
| 29. 4. 2019 | Delete Cookies for a Single Site – textslashplain.com
|
| 11. 1. 2019 | Securely Displaying URLs – textslashplain.com
|
| 3. 1. 2019 | Demystifying ClickOnce – textslashplain.com
|
| 15. 11. 2018 | Private Mode Browsers – textslashplain.com
|
| 6. 11. 2018 | An Update on the Edge XSS Filter – textslashplain.com
|
| 15. 10. 2018 | Streaming Audio in Edge – textslashplain.com
|
| 11. 10. 2018 | ShellExecute Doesn’t – textslashplain.com
|
| 9. 10. 2018 | Cookie Limits – textslashplain.com
|
| 3. 10. 2018 | Cookie Controls, Revisited – textslashplain.com
|
| 28. 9. 2018 | Firefox and Fiddler – Easier than Ever – textslashplain.com
|
| 24. 9. 2018 | Chrome Sync – textslashplain.com |