Ken Buchanan
@kenrb.bsky.social
Chrome. Passkeys. Miscellaneous. 🇨🇦
Gerson: "What I thought was interesting about that column, is that at no point did you stop to consider whether America is a country worth joining."
Douthat: "That's true. I did not."
The 63-minute podcast should really have been condensed to that 20-second exchange.
Douthat: "That's true. I did not."
The 63-minute podcast should really have been condensed to that 20-second exchange.
November 26, 2025 at 3:58 AM
Gerson: "What I thought was interesting about that column, is that at no point did you stop to consider whether America is a country worth joining."
Douthat: "That's true. I did not."
The 63-minute podcast should really have been condensed to that 20-second exchange.
Douthat: "That's true. I did not."
The 63-minute podcast should really have been condensed to that 20-second exchange.
I appreciate the good work by @dangoodin.bsky.social.
Solid debunking from @dangoodin.bsky.social on the Passkeys “Pwned” thing. arstechnica.com/security/202...
Unpacking Passkeys Pwned: Possibly the most specious research in decades
Researchers take note: When the endpoint is compromised, all bets are off.
arstechnica.com
August 28, 2025 at 6:54 PM
I appreciate the good work by @dangoodin.bsky.social.
Reposted by Ken Buchanan
this also led to Mossad burgling my gran's flat in Coogee.
June 17, 2025 at 8:01 PM
this also led to Mossad burgling my gran's flat in Coogee.
Reposted by Ken Buchanan
Behold my favorite weird Chrome security bug of 2025 so far!
A jaw-dropping URL / omnibox spoof via ligatures, specifically the googlelogo ligature.
issues.chromium.org/issues/39178...
A jaw-dropping URL / omnibox spoof via ligatures, specifically the googlelogo ligature.
issues.chromium.org/issues/39178...
Chromium
issues.chromium.org
May 16, 2025 at 3:16 PM
Behold my favorite weird Chrome security bug of 2025 so far!
A jaw-dropping URL / omnibox spoof via ligatures, specifically the googlelogo ligature.
issues.chromium.org/issues/39178...
A jaw-dropping URL / omnibox spoof via ligatures, specifically the googlelogo ligature.
issues.chromium.org/issues/39178...
One thing about browser notifications is that it was a huge lesson learned by the web platform community. For all the abuse and annoyance, consider that it may have averted worse catastrophes to follow.
April 10, 2025 at 2:28 AM
One thing about browser notifications is that it was a huge lesson learned by the web platform community. For all the abuse and annoyance, consider that it may have averted worse catastrophes to follow.
Feel old time: Blink's fork of WebKit is now as long ago as WebKit's fork of KHTML was before that.
12 years ago today Chrome's rendering engine Blink (forked from WebKit) was announced.
blog.chromium.org/2013/04/blin...
blog.chromium.org/2013/04/blin...
Blink: A rendering engine for the Chromium project
WebKit is a lightweight yet powerful rendering engine that emerged out of KHTML in 2001. Its flexibility, performance and thoughtful desig...
blog.chromium.org
April 3, 2025 at 12:54 PM
Feel old time: Blink's fork of WebKit is now as long ago as WebKit's fork of KHTML was before that.
Reposted by Ken Buchanan
If you're wondering about the vibe in Canada right now, I just got served this ad for a brewhouse that is just a portrait of the White House being burned down. No text, just a bigass picture of the White House burning and a link directly to their menu lolol
March 5, 2025 at 12:21 AM
If you're wondering about the vibe in Canada right now, I just got served this ad for a brewhouse that is just a portrait of the White House being burned down. No text, just a bigass picture of the White House burning and a link directly to their menu lolol
I'm looking for analysis on the possibility of Canada stopping the tariffs through litigation and injunction.
The amount of fentanyl entering from Canada is close to zero, but "cuz fentanyl" is a required justification because POTUS tariff authority is only for emergencies. This is not one.
The amount of fentanyl entering from Canada is close to zero, but "cuz fentanyl" is a required justification because POTUS tariff authority is only for emergencies. This is not one.
March 4, 2025 at 2:49 PM
I'm looking for analysis on the possibility of Canada stopping the tariffs through litigation and injunction.
The amount of fentanyl entering from Canada is close to zero, but "cuz fentanyl" is a required justification because POTUS tariff authority is only for emergencies. This is not one.
The amount of fentanyl entering from Canada is close to zero, but "cuz fentanyl" is a required justification because POTUS tariff authority is only for emergencies. This is not one.
Reposted by Ken Buchanan
Trudeau invites Zelensky to friendly pick-your-brain coffee chat about being invaded by warmongering neighbour
Trudeau invites Zelensky to friendly pick-your-brain coffee chat about being invaded by warmongering neighbour
KYIV, UKRAINE - Citing a desire to “connect face to face”, Canadian Prime Minister Justin Trudeau recently reached out to Ukrainian President Volodymyr Zelenskyy with an aim to “share some insights” a...
www.thebeaverton.com
February 24, 2025 at 3:15 PM
Trudeau invites Zelensky to friendly pick-your-brain coffee chat about being invaded by warmongering neighbour
I bet high school students would take more history classes if we renamed them all to "lore".
December 18, 2024 at 12:00 AM
I bet high school students would take more history classes if we renamed them all to "lore".
Et tu, Bidoof?
Pokemon Go players have been unwittingly mapping the entire world to train a geospatial AI model whose most obvious use cases are for robotic navigation and possibly the military
www.404media.co/pokemon-go-p...
www.404media.co/pokemon-go-p...
Pokémon Go Players Have Unwittingly Trained AI to Navigate the World
Niantic says it is using data generated by Pokémon Go players to create a “Large Geospatial Model” that can navigate the real world and power robots.
www.404media.co
November 19, 2024 at 11:11 PM
Et tu, Bidoof?
Some places have used internet naming contests to name snowplows, which might be the only thing that they are actually suited to. Other jurisdictions that enjoy wintery weather have used:
The Big Leplowski
Yer a Blizzard, Harry
Han Snowlo
Snowba Fett
Sled Zeppelin
Better Call Salt
The Big Leplowski
Yer a Blizzard, Harry
Han Snowlo
Snowba Fett
Sled Zeppelin
Better Call Salt
New names for Vermont snow plows 2024, selected by Vermont schoolchildren. Some selections...
Skibidi Scooper
No More Mr. Ice Guy
The Snowy Pl-Owl
Clearopathra
Snoah Kahan
Salt-O-Saurus
vtrans.vermont.gov/name-a-plow
Skibidi Scooper
No More Mr. Ice Guy
The Snowy Pl-Owl
Clearopathra
Snoah Kahan
Salt-O-Saurus
vtrans.vermont.gov/name-a-plow
November 17, 2024 at 7:10 PM
Some places have used internet naming contests to name snowplows, which might be the only thing that they are actually suited to. Other jurisdictions that enjoy wintery weather have used:
The Big Leplowski
Yer a Blizzard, Harry
Han Snowlo
Snowba Fett
Sled Zeppelin
Better Call Salt
The Big Leplowski
Yer a Blizzard, Harry
Han Snowlo
Snowba Fett
Sled Zeppelin
Better Call Salt
Reposted by Ken Buchanan
As a new blueskyer, I don’t have a lot of followers here, but posting here anyway (if you build it, they will come?).
Today we’ve expanded the scope and rewards for the Chrome VRP V8 sandbox bypass rewards to include any demonstrated memory corruption outside the sandbox.
g.co/chrome/vrp#v...
Today we’ve expanded the scope and rewards for the Chrome VRP V8 sandbox bypass rewards to include any demonstrated memory corruption outside the sandbox.
g.co/chrome/vrp#v...
November 13, 2024 at 6:09 PM
As a new blueskyer, I don’t have a lot of followers here, but posting here anyway (if you build it, they will come?).
Today we’ve expanded the scope and rewards for the Chrome VRP V8 sandbox bypass rewards to include any demonstrated memory corruption outside the sandbox.
g.co/chrome/vrp#v...
Today we’ve expanded the scope and rewards for the Chrome VRP V8 sandbox bypass rewards to include any demonstrated memory corruption outside the sandbox.
g.co/chrome/vrp#v...
Reposted by Ken Buchanan
Keep seeing versions of this take, “Trump voters had concerns, legitimate or not, about their feet being grabbed by a ‘freaky arm’ if they dangled them over the edge of the bed at night. Harris appeared weak on the spooky limb issue and the Dem’s sole response was to turn the lights on and check.”
November 10, 2024 at 1:09 AM
Keep seeing versions of this take, “Trump voters had concerns, legitimate or not, about their feet being grabbed by a ‘freaky arm’ if they dangled them over the edge of the bed at night. Harris appeared weak on the spooky limb issue and the Dem’s sole response was to turn the lights on and check.”
Reposted by Ken Buchanan
Canada turns off all lights in hopes US will think we're not home
www.thebeaverton.com/2024/11/cana...
www.thebeaverton.com/2024/11/cana...
Canada turns off all lights in hopes US will think we're not home
OTTAWA - With Americans voting today to determine the next President of the United States, every single Canadian has announced plans to keep their lights shut off in hopes that they will not get drawn...
www.thebeaverton.com
November 5, 2024 at 5:12 PM
Canada turns off all lights in hopes US will think we're not home
www.thebeaverton.com/2024/11/cana...
www.thebeaverton.com/2024/11/cana...
This is a feature I've been working on over the last year or so, with a few other members of the Chrome WebAuthn team. It makes passkeys a lot more convenient to use if you have an Android phone and use Chrome on a desktop machine.
developer.chrome.com/blog/passkey...
developer.chrome.com/blog/passkey...
Chrome to sync passkeys on Google Password Manager between desktop and Android | Blog | Chrome for Developers
Chrome on desktop will soon be able to create passkeys in Google Password Manager (GPM) and synchronize them across those platforms in addition to Android.
developer.chrome.com
September 20, 2024 at 12:15 PM
This is a feature I've been working on over the last year or so, with a few other members of the Chrome WebAuthn team. It makes passkeys a lot more convenient to use if you have an Android phone and use Chrome on a desktop machine.
developer.chrome.com/blog/passkey...
developer.chrome.com/blog/passkey...
Reposted by Ken Buchanan
in the same vein, implementation of HTTPS everywhere was a quiet social revolution that will go unheralded because the actual very dire collective action problem never fully surfaced
September 11, 2024 at 8:24 PM
in the same vein, implementation of HTTPS everywhere was a quiet social revolution that will go unheralded because the actual very dire collective action problem never fully surfaced
A story by @dougsaunders.bsky.social that gets everything right about Julian Assange. (gift link)
www.theglobeandmail.com/gift/0597199...
www.theglobeandmail.com/gift/0597199...
Julian Assange was never a journalist or a whistle-blower. But they’re right to free him
The WikiLeaks founder’s guilty plea for stealing government secrets gives him too much credit for his middleman role
www.theglobeandmail.com
June 26, 2024 at 1:46 AM
A story by @dougsaunders.bsky.social that gets everything right about Julian Assange. (gift link)
www.theglobeandmail.com/gift/0597199...
www.theglobeandmail.com/gift/0597199...
Make a movie milder:
All the Secretary of Agriculture's Men
All the Secretary of Agriculture's Men
Make a movie milder:
Indiana Jones and the Temple of Inconvenience
Indiana Jones and the Temple of Inconvenience
Make a movie milder:
Journeymen of the Universe
Journeymen of the Universe
June 12, 2024 at 5:16 AM
Make a movie milder:
All the Secretary of Agriculture's Men
All the Secretary of Agriculture's Men
Reposted by Ken Buchanan
sick of normal things being given grandiose epithets? you might be part of the great oh fuck off now
May 26, 2024 at 1:24 PM
sick of normal things being given grandiose epithets? you might be part of the great oh fuck off now
<The next person is checking out the book>
Librarian <intense gaze>: Are you sure you're ready for this?
Librarian <intense gaze>: Are you sure you're ready for this?
In 1987, someone checked out the book "Psychedelics" from a library in Colorado.
37 years later, the book was returned with its original library checkout card, and a yellow post-it note that read, "Sorry so late!! It's been a long strange trip!!"
37 years later, the book was returned with its original library checkout card, and a yellow post-it note that read, "Sorry so late!! It's been a long strange trip!!"
Overdue book returned to Colorado library 37 years later
www.axios.com
March 21, 2024 at 5:34 PM
<The next person is checking out the book>
Librarian <intense gaze>: Are you sure you're ready for this?
Librarian <intense gaze>: Are you sure you're ready for this?
Reposted by Ken Buchanan
reading online discussions about git is always really funny because 50% of the people are like "i don't understand git" and the other 50% say “no you just have to understand git is a directed acyclic graph where branches are pointers to commits" and nobody learns anything
November 23, 2023 at 6:55 PM
reading online discussions about git is always really funny because 50% of the people are like "i don't understand git" and the other 50% say “no you just have to understand git is a directed acyclic graph where branches are pointers to commits" and nobody learns anything
Reposted by Ken Buchanan
HTTPS encryption for EU residents is at risk, as the soon-to-be-passed Article 45 removes browsers’ control over security for their users.
Article 45 Will Roll Back Web Security by 12 Years
The EU is poised to pass a sweeping new regulation, eIDAS 2.0. Buried deep in the text is Article 45, which returns us to the dark ages of 2011, when certificate authorities (CAs) could collaborate
www.eff.org
November 7, 2023 at 6:29 PM
HTTPS encryption for EU residents is at risk, as the soon-to-be-passed Article 45 removes browsers’ control over security for their users.