Adrian Taylor
adehohum.bsky.social
Adrian Taylor
@adehohum.bsky.social
Browser security bug wrangler. C++, Python, Rust, kids, mountain biking, snowboarding, gliding & climbing. Cambridge, UK. Opinions my own.
Reposted by Adrian Taylor
As Apple expands its bug bounty, I spoke with VP Ivan Krstić about the significance + recent big swings like Memory Integrity Enforcement. These steps protect all users, but particularly those targeted by spyware: “We feel a great moral obligation to defend those users” www.wired.com/story/apple-...
Apple Announces $2 Million Bug Bounty Reward for the Most Dangerous Exploits
With the mercenary spyware industry booming, Apple VP Ivan Krstić tells WIRED that the company is also offering bonuses that could bring the max total reward for iPhone exploits to $5 million.
www.wired.com
October 10, 2025 at 1:06 PM
Reposted by Adrian Taylor
OK, I love this. tl;dr using knowledge of your allocator, speed up linked list traversal by adding a branch that guesses where the next linked list element is and pre-populates the "next" variable to eliminate stalls if the allocations are well-behaved.
September 28, 2025 at 1:31 AM
Reposted by Adrian Taylor
If you appreciate the Liam Neeson line: “What I have is a very particular set of skills, skills I have acquired over a very long career. Skills that make me a nightmare for people like you”, you will love this post from @mjg59.bsky.social

mjg59.dreamwidth.org/73317.html
September 27, 2025 at 3:51 AM
www.camgliding.uk/journey-to-b... Journey to becoming a basic instructor – Cambridge Gliding Centre
Journey to becoming a basic instructor
About a year ago, one of our professional instructors David Williams planted a seed in my brain - perhaps I should aim to become an instructor myself. At tha
www.camgliding.uk
July 19, 2025 at 1:09 PM
Reposted by Adrian Taylor
Did you know? 100 years ago today, the BBC broadcast the #ShippingForecast for the very first time, produced by the Met Office for the Maritime and Coastguard Agency.

More than just a lifesaver, it’s become a beloved part of Britain’s cultural identity. Learn more: bit.ly/4kg877D 🛳️🌊
July 4, 2025 at 12:37 PM
“Whenever I see a bagel, I think ooh it’s a donut, and then I get closer and see it’s only a bagel“ - Eddie
June 24, 2025 at 9:14 PM
Reposted by Adrian Taylor
🎶 Ther ys a place biyonde the wyrmhole
A place onlye to loveres knowne -
The brave, the hopeful, the lost, the worthye,
Peraventure me and thee!
Will not thou wende wyth these fooles and dreameres
To the planete we calle home?
We hope we wil greete thee soone
On Sanctuarye Moone 🎶
June 20, 2025 at 4:57 PM
Reposted by Adrian Taylor
Behold my favorite weird Chrome security bug of 2025 so far!

A jaw-dropping URL / omnibox spoof via ligatures, specifically the googlelogo ligature.

issues.chromium.org/issues/39178...
Chromium
issues.chromium.org
May 16, 2025 at 3:16 PM
www.camgliding.uk/sightseeing-... - I didn’t mention how proud I am of overcoming my fear of weeing in a glider
Sightseeing tour of Cambridge – Cambridge Gliding Centre
www.camgliding.uk
April 29, 2025 at 8:37 AM
Reposted by Adrian Taylor
April 26, 2025 at 7:42 PM
Reposted by Adrian Taylor
I'm excited about this program! Chromium isn't necessarily easy, but I know there are great engineers out there who would love to get paid for improving it!
🚨 Attention Chromium developers! 🚨

The SOCBB Bug Bounty Program is offering up to $10,000 for fixing bugs in Chromium-based browsers like Chrome & Edge! Contribute to repos like chromium, v8, and more.

Get paid via GitHub Sponsors! Start fixing: github.com/Supporters-O...

#Chromium #OpenSource
April 4, 2025 at 2:52 AM
Reposted by Adrian Taylor
We will have memory safety… it will take many steps forward, over the long haul. Here’s an update from Chrome on replacing FreeType with a Rust based alternative. developer.chrome.com/blog/memory-...
Memory safety for web fonts  |  Blog  |  Chrome for Developers
Learn how and why the Chrome team has replaced FreeType with Skrifa.
developer.chrome.com
March 20, 2025 at 4:06 AM
Reposted by Adrian Taylor
New blog post up on the Rust font loader now shipping in Chrome. I only had a small part in this personally but am proud of the team's work. developer.chrome.com/blog/memory-...
Memory safety for web fonts  |  Blog  |  Chrome for Developers
Learn how and why the Chrome team has replaced FreeType with Skrifa.
developer.chrome.com
March 19, 2025 at 3:15 PM
Did my first half marathon today. I enjoyed it, which I'd never thought would be possible. It helps that it was ridiculously sunny.
March 9, 2025 at 4:12 PM
Reposted by Adrian Taylor
Come join my team…literally.
Product Security is a small sub-team in Chrome Security.

We’re hiring a mid-level Security Engineer to lead wrangling of our security reviews process && pitch in on some other security work. Role is in-office/hybrid, based in SF.

www.google.com/about/career...
Security Engineer, Chrome Product Security — Google Careers
www.google.com
March 7, 2025 at 9:33 PM
An absurdly pretty weekend climbing in Dorset. Portland specifically.
March 3, 2025 at 6:14 PM
Reposted by Adrian Taylor
MORSE is continuing to grow it's UK team. If you're interested in Windows Security and breaking things.. this is remote work within the UK. jobs.careers.microsoft.com/global/en/jo...
Search Jobs | Microsoft Careers
jobs.careers.microsoft.com
February 10, 2025 at 7:25 PM
Here's what I was doing last week: www.camgliding.uk/lleweni-parc...
Lleweni Parc Expedition Report – Cambridge Gliding Centre
www.camgliding.uk
January 13, 2025 at 4:48 PM
New autocxx release, absorbing bindgen fixes for issues with modern OS X: github.com/google/autoc... (thanks to the various contributors to autocxx and bindgen)
Release 0.27.1 · google/autocxx
The big change here is a roll to a more recent version of bindgen which understands inline namespaces, and thus resolves issues with the latest headers on OS X. What's Changed Convert to arbitrary...
github.com
January 8, 2025 at 11:26 PM
Ridge soaring around Yr Wyddfa (aka Snowdon)
January 8, 2025 at 11:25 PM
A bit of a review of autocxx here: fishshell.com/blog/rustport/ "autocxx isn’t the easiest to work with. It is absolutely magical that it works at all, and it enabled us to do this port, but it has a hard task to perform and isn’t perfect at it." I think that's a great summary. PS I use fish!
Fish 4.0: The Fish Of Theseus
A smart and user-friendly command line shell
fishshell.com
January 8, 2025 at 11:23 PM
Gliding above the Clywdian range in North Wales
January 7, 2025 at 11:02 PM