Big day! With today’s releases of macOS Ventura and iPadOS 16, passkeys are now available on iOS, iPadOS, and macOS. Safari 16.1 for macOS Monterey and Big Sur, also out today, bring support for passkeys to those operating systems. (edited; kept other tweet up)
Join me tomorrow for a trip around web privacy! You'll learn:
✅ Tips to improve privacy *and* UX in your web app
✅ A story about boats, timezones, and why steam trains are scary
🕰 Friday 9am
📍 Titan room
À demain!
#DevFestNantes#DevFest2022@devfestnantes
High schoolers, lawyers, IT professionals, hobbyists — meet our bug hunters. Their backgrounds vary, but their job is the same: find undiscovered vulnerabilities by trying to hack Google. Watch EP004 of the HACKING GOOGLE series ↓ https://t.co/jr9EPwatZF
Assessing browser security by CVE counts is 💩 & headlines I’ve seen are ridiculous clickbait. Chrome is proud to report & fix security bugs on behalf of the ENTIRE chromium-based browser community. (2/4)
Nice introduction to the Web APIs for passkeys. I especially like the fact that it's straightforward to upgrade an existing username / password flow to use passkeys.
@ElliottZ I get what you're saying, but it also can't be more fine grained the SOP because that would just be meaningless. And I believe that sharing an origin is scary enough to by and large keep apps on different domains.
On video calls, #Chrome Senior UX Writer @meggawat uses the lock icon to stay in control of her settings. By clicking into the icon, she can check and update site permissions for her camera and microphone.
Learn about her tip and more from Chrome experts: https://t.co/X9QY0vQWPE
Check out this in-depth blog post about the latest mitigations against use after free bugs in Chrome:
"We anticipate that this meaningfully reduces the browser process attack surface of Chrome"
Also interesting to read about the trade-offs between mitigation strategies and perf
Chrome folks continue publishing about the work we do, the challenges we face, and the approaches we take to solve problems. Most current blog post on the topic of security is on MiraclePtr - work towards mitigating use-after-free bugs.
https://t.co/xXMvIpB7Rn
Jump into the technical deep end of JavaScriptCore’s Garbage Collection algorithm in the “Understanding GC in JSC From Scratch” post on the WebKit blog. https://t.co/cVnWKWhMQa
Google Password Manager makes online security more convenient — and consistent — across #Chrome and @Android.
Learn how upcoming updates, like Password Checkup for weak and reused passwords, offer a safe, seamless login experience from anywhere → https://t.co/T9ZKCWjjJx
Make the right privacy choices for you with the Privacy Guide on #Chrome.
It’s a step-by-step guided tour of key privacy and security controls — so you can quickly and easily customize your settings. Learn how it works: https://t.co/mHrCn8cNpB
Excited to share some new @googlechrome themes designed by amazing LGBTQ+ artists Carlos Aponte, Derek Abella, @sup_world, @sofiebirkin & Tallulah Fontaine, in celeration of #PrideMonth!🌈🎨🏳️🌈
More about each artist's perspective at https://t.co/260hlaVQa9
If you're feeling adventurous on #WorldPasswordDay, you can give our new on-device encryption feature for the Google Password Manager a try: https://t.co/2x2C3LSzPF
Exciting announcement by the @FIDOAlliance about the passwordless future for #WorldPasswordDay. This has the potential to put more secure and private ways of authenticating into the hands of almost everybody: https://t.co/Mqzhusy8lE
Meanwhile, if you're using @googlechrome, to celebrate the password day, go to chrome://settings/privacy, run the safety check, and change some of the leaked or weak passwords identified.