Tag Archives: chromium

CloudFlare 也要提供 Certificate Transparency 的 Log 伺服器了...

看到 CloudFlare 請求加入 Chromium (Google Chrome) 的伺服器列表:「Certificate Transparency - Cloudflare "nimbus2017" Log Server Inclusion Request」。 對照之前的「Chromium 內提案移除 HPKP (HTTP Public Key Pinning)」以及「Let's Encrypt 的 Embed SCT 支援」,這樣看起來是瀏覽器內會有一份白名單,只有在這白名單上的 Embed SCT 才會被信任... 但弄到這樣的話,log server 是不是也要有稽核機制? 好像哪邊搞錯了方向啊...

Posted in Computer, Murmuring, Network, Privacy, Security, Service, WWW|Tagged , , , , , , , , , , , , , , |Leave a comment

Chromium 內提案移除 HPKP (HTTP Public Key Pinning)

Twitter 上看到這則 tweet,提到要移除 HPKP (HTTP Public Key Pinning): Intent To Deprecate And Remove: Public Key Pinning (in Chromium) https://t.co/agS3fll7eR — Adam Langley (@agl__) October 27, 2017 blink-dev 上的討論可以參考「Intent To Deprecate And Remove: Public Key Pinning」(就是上面那個連結,只是拉出來)。 這個提案大概可以推敲出理由... 目前的作法必須寫進瀏覽器內,這樣明顯會有 scale 問題,而且這個作法本身就很 workaround,只能保護所謂「高價值」的 … Continue reading

Posted in Browser, Computer, DNS, GoogleChrome, Network, Security, Software, WWW|Tagged , , , , , , , , , , , , , , , , , , , |2 Comments

GitHub 引入 Code Owner 的概念

GitHub 推出了 Code Owner 的概念:「Introducing code owners」。也很直接說這個能是向 Chromium「致敬」出來的: The code owners feature was inspired by Chromium's use of OWNERS files. 檔案名稱是 CODEOWNERS,可以放在根目錄或是 .github/ 下,可以針對不同的目錄設不同的人: To specify code owners, create a file named CODEOWNERS in the repository's root directory (or in … Continue reading

Posted in Computer, Murmuring, Programming|Tagged , , , , , , , , , , |Leave a comment

利用 Unicode Domain 釣魚,以及 Chrome 與 Firefox 的解法

一個多禮拜前引起蠻多討論的一篇文章,利用 Unicode Domain 釣魚的方法:「Phishing with Unicode Domains」。 由於這是幾乎完美的攻擊,所以被提出來後 (Security: Whole-script confusable domain label spoofing) 有不少討論: This bug was reported to Chrome and Firefox on January 20, 2017 and was fixed in the Chrome trunk on March 24. The fix is … Continue reading

Posted in Browser, Computer, DNS, Firefox, Murmuring, Network, Security, Software, WWW|Tagged , , , , , , , , , , , , , , , |Leave a comment

Google Chrome 的 Headless 模式與 PhantomJS 的歷史

瀏覽器的 headless 模式讓開發者可以透過 command line 或是 API 界面操作,對於自動化開發測試很有用。而 Google Chrome 將在 59 版 (目前 57 版) 引入 headless 模式:「Headless mode」。 Headless mode allows running Chromium in a headless/server environment. Expected use cases include loading web pages, extracting metadata (e.g., the … Continue reading

Posted in Browser, Computer, GoogleChrome, Murmuring, Network, Programming, Software, WWW|Tagged , , , , , , , |Leave a comment

Google Chrome 停用平滑捲動

因為把 JavaScript 開回來了,所以有這個困擾... :( Google Chrome 的平滑捲動可以透過 chrome://flags 裡面的設定關閉 (OS X 上則是透過系統設定關閉),但就是有不少網站會很雞婆,用 JavaScript 模擬平滑捲動,所以就花了時間把 extension 寫出來:「Stop Smooth Scrolling」。 由於大多數平滑捲動的作法都是透過對 document 或是 window 上掛上與平滑捲動相關事件做到的,所以我是透過 addEventListener() 與 useCapture flags,然後再用 preventDefault() 擋下後續的處理。 這樣做會有一些問題,其中比較明顯的是地圖類功能的滾輪會失效,這個部分我先放進預設的白名單了,如果有其他的問題,除了可以自己加以外,也可以開 ticket 讓我加進預設清單 :o 實際運作起來大概是這樣: Anyway,寫這個還蠻有趣的,玩了不少新東西: 第一次在 Google Chrome Extension 上寫 … Continue reading

Posted in Browser, Computer, GoogleChrome, Murmuring, Network, Programming, Software, WWW|Tagged , , , , , , , , , , , , , , , , |Leave a comment

Headless Chromium 已經可以用了...

兩個禮拜前提到的「Headless Chrome」,在剛剛已經看到有人提到 source tree 裡面有「Headless Chromium」了: Headless Chromium is a library for running Chromium in a headless/server environment. Expected use cases include loading web pages, extracting metadata (e.g., the DOM) and generating bitmaps from page contents -- using all the … Continue reading

Posted in Browser, Computer, GoogleChrome, Murmuring, Network, Software, WWW|Tagged , , , |Leave a comment

Headless Chrome

看到 Chromium 將會推出 Headless 模式: Headless Chrome is coming so soon ?!!! Say goodbye to the myriad of hacks to run Chrome and phantom on CI. ?https://t.co/ucDBbgpBO0 — Sam Saccone (@samccone) June 4, 2016 可以在「Implement a headless mode for Chrome」看到從去年開始一直實作,雖然還沒做完,但看起來還算活躍,之後可以更接近實際環境測試了...

Posted in Browser, Computer, GoogleChrome, Murmuring, Network, Software, WWW|Tagged , , , , |1 Comment

Google Chrome 右上角超醜的 Profile Button 關不掉了...

可以看 Reddit 上的「--disable-new-avatar-menu no longer working for chrome 47?:chrome」這個: I had to reinstall chrome today and it just happens that they pushed out v47 today. I can't seem to get the workaround to work anymore 對應的 bug report 是「Add an … Continue reading

Posted in Browser, Computer, GoogleChrome, Murmuring, Network, Software, WWW|Tagged , , |Leave a comment

Google Chrome 將在明年三月停止 32bits Linux 版本支援

在「Google ends 32-bit Linux support for Chrome」這邊看到新聞,引用自「Updates to Google Chrome Linux support」這邊的消息: To provide the best experience for the most-used Linux versions, we will end support for Google Chrome on 32-bit Linux, Ubuntu Precise (12.04), and Debian 7 (wheezy) in … Continue reading

Posted in Browser, Computer, GoogleChrome, Murmuring, Network, Software, WWW|Tagged , , , , , , , , , , |Leave a comment