Last Friday, Tavis Ormandy from Google’s Project Zero contacted Cloudflare to report a security problem with our edge servers. He was seeing corrupted web pages being returned by some HTTP requests run through Cloudflare. It turned out that in some unusual circumstances, which I’ll detail below, our edge servers were running past the end of a buffer and returning memory that contained private information...
Microsoft first revealed it was planning two big Windows 10 updates in 2017 back in August, but the company never shared timing details for its second unnamed update. While the Creators Update, which is currently being tested by Windows Insiders, is expected to debut in April, it’s not clear when the second big Windows 10 update will be made available. During a recent session...
A surprisingly large number of antivirus and security products are undermining HTTPS connections and exposing browser users to decryption attacks, according to a study by researchers at Google, Mozilla, Cloudflare, and several US universities. Thanks to a multi-pronged effort to enable HTTPS everywhere, as of January half the world’s traffic on the web is encrypted using the secure TCP/IP HTTPS protocol. However, while HTTPS...
The city of Munich made headlines in 2003 when it announced its intent to switch 14,000 government PCs from Windows to Linux. While the project suffered delays and setbacks, the migration to LiMux (its custom Ubuntu-based distribution) and LibreOffice was completed in late 2013. But now, Windows could be making a comeback. ZDNet reports that the city government’s administrative and personnel committee has recommended...
Google has been ordered to pay $20m damages after its Chrome browser was found to have infringed four anti-malware patents. The verdict [PDF] was handed down on Friday after a jury trial in Marshall, Texas. The patents – including this one – were awarded to former Lucent engineer Allen Rozman, who died aged 52 in 2012, and Alfonso J. Cioffi, both of Texas*, who...
Google has announced that all of Google Chrome older versions will stop being compatible with Gmail by the end of 2017. Google Chrome version 53 and its previous versions will no more be compatible with Gmail in the next coming months as the report has suggested. Starting from the month of February all Google Chrome users of earlier versions will see a statement on...
The next stable version of Chrome (Chrome 57) will not allow users to disable the Widevine DRM plugin anymore, therefore making it an always-on, permanent feature of Chrome. The new version of Chrome will also eliminate the “chrome://plugins” internal URL, which means if you want to disable Flash, you’ll have to do it from the Settings page. How EME Brought Mandatory DRM On The...
It’s supposed to be seamless. So much mobile technology is premised on the idea that moving between networks—cellular to Wi-Fi, Wi-Fi to Wi-Fi, cellular to cellular—is a more or less invisible process. We, as consumers, are then free to interact with the cloud as intended—as an extension of mobile devices that’s all but necessary for them to operate at all. The whole cloud idea...
Play Store and Android apps access on Chromebooks were announced in May of 2016 and in the time since, they have rolled as developer then stable builds to the Asus Chromebook Flip and Acer Chromebook R11 as well as the Google Chromebook Pixel 2. We know that the functionality will be coming to more of the existing Chromebooks down the line, but we didn’t...
Microsoft made a big fuss out of the Windows 10 Creators Update’s gaming features, and it’s nearly ready to start delivering on them… including some that have remained mysterious. The company has revealed that it’ll start trotting out a largely unknown Windows 10 Game Mode as part of Insider previews “this week.” The improvement won’t be fully functional until later releases, but Microsoft has...
Recent Forum Activity