Jochen Eisinger

Director of Engineering @googlechrome Trust & Safety. Sometimes pretends to be a software engineer. He, him.

[maudnals @maudnals]

UX and privacy tips for the web in my slides from DevFest!
https://t.co/9lRrpnoxjs
~ 🎬 Recording coming soon ~

#DevFest2022 #DevFest

[Ricky Mondello @rmondello]

Big day! With today’s releases of macOS Ventura and iPadOS 16, passkeys are now available on iOS, iPadOS, and macOS. Safari 16.1 for macOS Monterey and Big Sur, also out today, bring support for passkeys to those operating systems. (edited; kept other tweet up)

[Chrome @googlechrome]

Who will win? Watch Lando Norris use @Google #Chrome Password Manager to race against his own pit crew in under 3 seconds. 🏁🎉#USGP

[maudnals @maudnals]

Join me tomorrow for a trip around web privacy! You'll learn:
✅ Tips to improve privacy *and* UX in your web app
✅ A story about boats, timezones, and why steam trains are scary

🕰 Friday 9am
📍 Titan room
À demain!
#DevFestNantes #DevFest2022 @devfestnantes

[Google @Google]

High schoolers, lawyers, IT professionals, hobbyists — meet our bug hunters. Their backgrounds vary, but their job is the same: find undiscovered vulnerabilities by trying to hack Google. Watch EP004 of the HACKING GOOGLE series ↓ https://t.co/jr9EPwatZF

[mark risher @mrisher]

Today we're also releasing passkey support @FIDOAlliance for developers on @Android & @googlechrome. This is on the heels of the #passwordless announcement we made earlier this year and in celebration of #CybersecurityAwarenessMonth https://t.co/FhwHVw9OEi

[Jochen Eisinger @jochen_e]

this

[Parisa Tabriz @laparisa]

Assessing browser security by CVE counts is 💩 & headlines I’ve seen are ridiculous clickbait. Chrome is proud to report & fix security bugs on behalf of the ENTIRE chromium-based browser community. (2/4)

[Heather Adkins - Ꜻ - Spes consilium non est @argvee]

Challenge starts now. The best way to stop a hacker is to think like one. https://t.co/tRFebpVYQt

[Jochen Eisinger @jochen_e]

Nice introduction to the Web APIs for passkeys. I especially like the fact that it's straightforward to upgrade an existing username / password flow to use passkeys.

[Adam Langley @agl__]

Libraries might be the best answer for many, but passkeys on the web are simple enough that you could build support yourself: https://t.co/eEAclUOjQe

[Jochen Eisinger @jochen_e]

@ElliottZ I get what you're saying, but it also can't be more fine grained the SOP because that would just be meaningless. And I believe that sharing an origin is scary enough to by and large keep apps on different domains.

[Jochen Eisinger @jochen_e]

Hidden gem behind the lock icon.

Guess it's about time to replace it with something more clickable :)

[Chrome @googlechrome]

On video calls, #Chrome Senior UX Writer @meggawat uses the lock icon to stay in control of her settings. By clicking into the icon, she can check and update site permissions for her camera and microphone.

Learn about her tip and more from Chrome experts: https://t.co/X9QY0vQWPE

[Jochen Eisinger @jochen_e]

Check out this in-depth blog post about the latest mitigations against use after free bugs in Chrome:

"We anticipate that this meaningfully reduces the browser process attack surface of Chrome"

Also interesting to read about the trade-offs between mitigation strategies and perf

[Nasko Oskov @nasko]

Chrome folks continue publishing about the work we do, the challenges we face, and the approaches we take to solve problems. Most current blog post on the topic of security is on MiraclePtr - work towards mitigating use-after-free bugs.
https://t.co/xXMvIpB7Rn

[WebKit @webkit]

Jump into the technical deep end of JavaScriptCore’s Garbage Collection algorithm in the “Understanding GC in JSC From Scratch” post on the WebKit blog. https://t.co/cVnWKWhMQa

[Jochen Eisinger @jochen_e]

Use a password manager.

Also check out those sweet updates to the Google Password Manager if you're still searching for one.

[Chrome @googlechrome]

Google Password Manager makes online security more convenient — and consistent — across #Chrome and @Android.

Learn how upcoming updates, like Password Checkup for weak and reused passwords, offer a safe, seamless login experience from anywhere → https://t.co/T9ZKCWjjJx

[Chrome @googlechrome]

Make the right privacy choices for you with the Privacy Guide on #Chrome.

It’s a step-by-step guided tour of key privacy and security controls — so you can quickly and easily customize your settings. Learn how it works: https://t.co/mHrCn8cNpB

[Jochen Eisinger @jochen_e]

The feeling when you sit next to somebody using Chrome with a glaring red update notification...

[Parisa Tabriz @laparisa]

Excited to share some new @googlechrome themes designed by amazing LGBTQ+ artists Carlos Aponte, Derek Abella, @sup_world, @sofiebirkin & Tallulah Fontaine, in celeration of #PrideMonth!🌈🎨🏳️‍🌈

More about each artist's perspective at https://t.co/260hlaVQa9

[Jochen Eisinger @jochen_e]

If you're feeling adventurous on #WorldPasswordDay, you can give our new on-device encryption feature for the Google Password Manager a try: https://t.co/2x2C3LSzPF

[Jochen Eisinger @jochen_e]

https://t.co/T474ANyHaB

[Jochen Eisinger @jochen_e]

Exciting announcement by the @FIDOAlliance about the passwordless future for #WorldPasswordDay. This has the potential to put more secure and private ways of authenticating into the hands of almost everybody: https://t.co/Mqzhusy8lE

[Jochen Eisinger @jochen_e]

Meanwhile, if you're using @googlechrome, to celebrate the password day, go to chrome://settings/privacy, run the safety check, and change some of the leaked or weak passwords identified.