The Line of Death – text/plain

.entry-header When building applications that display untrusted content, security designers have a major problem— if an attacker has full control of a block of pixels, he can make those pixels look like anything he wants, including the UI of the application itself. He can then induce the user to undertake an unsafe action, and a…

Read More

AMPersand.

If you’ve spent any time looking into Google’s “Accelerated Mobile Pages” (AMP) project, I’m sure you’ll agree: it’s wonderful to hear the AMP team talk about how using their framework (and hosting the output on servers owned or approved by Google) creates faster sites, and happier users. Few corporations have done as much as Google…

Read More