Joe DeBlasio (@[email protected])

Securing @GoogleChrome's series of tubes.

HTTPS, CT, HSTS, usable security, Chrome's VRP, and more. He/him.

[Google VRP (Google Bug Hunters) @GoogleVRP]

Until 1 December 2023, the first report of a functional full chain exploit in Chrome Browser is eligible for the Full Chain Exploit bonus – TRIPLE the FULL reward amount.
Not the first? Any following eligible full chain exploit receives DOUBLE rewards! https://t.co/M0sHJy0l0V

[Joe DeBlasio (@[email protected]) @deblasioj]

@PorterValdez Walkability was a first-tier consideration when we moved recently and I was a second guessing prioritizing it a bit before we moved in because it limited our options.

Now that I'm here, I'm so grateful we are someplace walkable. It's great.

[Joe DeBlasio (@[email protected]) @deblasioj]

@parkernate I bet only like 20% of those are necessary for their things to actually function!

[Ariana Mirian (@[email protected]) @arimirian]

This app lives to see another day! So while it is up, let me expand.

I am defending and looking for industry positions! I’m planning to graduate in April 2023 and looking for jobs starting after. West coast or remote. RTs deeply appreciated while this network still exists!! 1/

[Joe DeBlasio (@[email protected]) @deblasioj]

Hire her! Your org will be better because of it!

[Ariana Mirian (@[email protected]) @arimirian]

I was relying on this app to publicize that I am defending in April! And looking for 2023 jobs! Guess I'll used...LinkedIn...now?

TL;DR If you want to understand/improve security processes using data and research science methods, shoot me a note. I'll post more later if I can

[Joe DeBlasio (@[email protected]) @deblasioj]

Understatement

[Joe DeBlasio (@[email protected]) @deblasioj]

@hankgreen I used to sit on an "academic integrity review board" that looked at evidence of students accused of cheating on their university homework and tests.

Chegg was where more than half of the folks accused were getting their answers, and that was five-ish years ago.

[Joe DeBlasio (@[email protected]) @deblasioj]

@dadrian what have we done

[Joe DeBlasio (@[email protected]) @deblasioj]

@arimirian Yes

[Joe DeBlasio (@[email protected]) @deblasioj]

@dadrian Congratulations to you both! 🙂🎉

[Joe DeBlasio (@[email protected]) @deblasioj]

@paul_pearce @ncweaver I also always have to take it out of my bag. I've just grown accustomed to questions from coworkers.

[Ryan Dickson @ryancdickson]

Let’s work together to make the web a safer place!

https://t.co/c8df4r3S3Z

#chrome #security #webpki #rootprogram #google

[Nasko Oskov @nasko]

Updating software is essential to security. We (Chrome team) get asked at times why updates are necessary. @dadrian helped put together some answers for such folks - https://t.co/aX81KZ9h04.

[Joe DeBlasio (@[email protected]) @deblasioj]

@lmanul I already take careful notes. Those are easier to skim and lets us omit stuff as appropriate. Recording feels like it doesn't add much, but might make folks feel like I'm keeping a record For Official Purposes. That makes rapport and trust harder to build.

[Joe DeBlasio (@[email protected]) @deblasioj]

@PorterValdez

[Joe DeBlasio (@[email protected]) @deblasioj]

@PorterValdez Some of us are bad at it forever, but hopefully not quite that bad.

[Joe DeBlasio (@[email protected]) @deblasioj]

@amyexp It's truly awful. I literally have a corp phone so that I can tether in a pinch.

[Joe DeBlasio (@[email protected]) @deblasioj]

@paul_pearce That sounds like a bug. Wanna file a bug at https://t.co/hwXH8hMqbo ? I'd love to dig into that.

[Maddie Stone @maddiestone]

On Monday, Chrome patched an in-the-wild 0-day, CVE-2022-2294, a buffer overflow in WebRTC. Reported by Avast #itw0days

Kudos to the Chrome and WebRTC teams for a 3 day turnaround over a US holiday weekend 👏🏽

https://t.co/aWcX0Mavcz