POPULARITY
Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/another-ios-bug-and-edge-chakra-exploitation.html A massive 11,000 byte overflow in WatchGuard, some discussion about lock-related vulnerabilities and analysis, and a look at a ChakraCore exploit dealing with all the mitigations (ASLR, DEP, CFG, ACG,CIG) [00:00:32] Spot the Vuln - The Global Query [00:05:04] Diving Deeper into WatchGuard Pre-Auth RCE [CVE-2022-26318] [00:09:42] HTTP Protocol Stack Remote Code Execution Vulnerability [CVE-2022-21907] [00:18:21] iOS in-the-wild vulnerability in vouchers [CVE-2021-1782] [00:37:06] Microsoft Edge Type Confusion Vulnerability (Part 2) [CVE-2019-0567] The DAY[0] Podcast episodes are streamed live on Twitch (@dayzerosec) twice a week: Mondays at 3:00pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities Tuesdays at 7:00pm Eastern (Boston) we focus on lower-level vulnerabilities and exploits. The Video archive can be found on our Youtube channel: https://www.youtube.com/c/dayzerosec You can also join our discord: https://discord.gg/daTxTK9 Or follow us on Twitter (@dayzerosec) to know when new releases are coming.
In this episode of Syntax, Scott and Wes talk with Tomek Sulkowski about web containers, StackBlitz and more! Freshbooks - Sponsor Get a 30 day free trial of Freshbooks at freshbooks.com/syntax and put SYNTAX in the “How did you hear about us?” section. LogRocket - Sponsor LogRocket lets you replay what users do on your site, helping you reproduce bugs and fix issues faster. It's an exception tracker, a session re-player and a performance monitor. Get 14 days free at logrocket.com/syntax. Linode - Sponsor Whether you're working on a personal project or managing enterprise infrastructure, you deserve simple, affordable, and accessible cloud computing solutions that allow you to take your project to the next level. Simplify your cloud infrastructure with Linode's Linux virtual machines and develop, deploy, and scale your modern applications faster and easier. Get started on Linode today with a $100 in free credit for listeners of Syntax. You can find all the details at linode.com/syntax. Linode has 11 global data centers and provides 24/7/365 human support with no tiers or hand-offs regardless of your plan size. In addition to shared and dedicated compute instances, you can use your $100 in credit on S3-compatible object storage, Managed Kubernetes, and more. Visit linode.com/syntax and click on the “Create Free Account” button to get started. Guests Tomek Sulkowski Show Notes 02:45 - What is StackBlitz? 05:28 - What makes it different? 08:20 - How does offline work? 12:18 - What are web containers? How does this fit in? 17:45 - How does this all work (WASM, Node.js in the browser, etc.)? 21:00 - What does performance look like? 31:06 - What about VS Code extensions? 32:48 - Monorepos? 35:12 - Databases? Sqlite? 35:36 - Are there any limitations? 37:02 - What is Turbo? 40:58 - How is this different from similar apps? Links https://stackblitz.com/ https://jsbin.com/?html,output https://jsfiddle.net/ https://codepen.io/ https://code.visualstudio.com/ Fugu API Tracker (fugu-tracker.web.app) https://www.docker.com/ https://spidermonkey.dev/ https://github.com/chakra-core/ChakraCore https://sli.dev/ https://vscode.dev/ https://codesandbox.io/ https://www.gitpod.io/ ××× SIIIIICK ××× PIIIICKS ××× Scott: HaloLock Universal Ring Wes: Car LED Light Upgrade Tomek: The Dresden Files Shameless Plugs Scott: Astro Course - Sign up for the year and save 25%! Wes: All Courses - Use the coupon code ‘Syntax' for $10 off! Tomek StackBlitz Tweet us your tasty treats! Scott's Instagram LevelUpTutorials Instagram Wes' Instagram Wes' Twitter Wes' Facebook Scott's Twitter Make sure to include @SyntaxFM in your tweets
Guests Chris heilmann and Zohair Ali are developers for Microsoft working on the Edge project. Today they are talking about Edge on Chromium and the future of developer tools. Edge will now be built in Chromium rather than being its own engine, aligning it more with what is being used on the open web right now. The Edge team wanted to seize the opportunity to bring something into the Chromium project based on the needs of real users and contribute to the open source web. Edge on Chromium won’t be limited to Windows 10 either, but will be available on Mac, Windows 7, and Windows 8. This project is still in beta with no set release date, so the Edge team is looking for people to test it out on Mac and tell them how it works. Chris and Zohair talk about the different parts of a web browser and what distinguishes Chrome from Chromium. Chromium is not just a platform, it’s an entire browser that you can install. Google adds a bunch of Google services to Chromium, such as being able to sign into your Google account, and that’s how you get Google Chrome. Similarly, the new Edge adds its own features on top of Chromium, so you can sign into your Microsoft account. By now the browser engines are so similar to each other that the users are looking for the user experience, interface, and services around it, so it made more sense for the Edge team to contribute to Chromium than to maintain their own engine and help it improve. Chris and Zohair talk about some of the features in Edge on Chromium. One service they’re particularly excited about is the Collections feature, where you can drag images, text, etc into Collections and export it to Excel or Word. Collections was inspired by what users need, and they talk about some of the different use cases for it. The new Edge on Chromium will also have an IE mode for products that still require IE 11. If you define what services need IE 11, Edge will open an IE 11 tab within the browser so you will not have to jump between browsers. Unfortunately, this feature is only available on Windows. Edge on Chromium will also offer an integration with VS Code, called Elements for VS Code, which takes part of the developer tools from Edge and puts it inside VS Code. Since the tools are based on Chromium, it stays in the same context all the time so you don’t have to jump back and forth, and you can see the changes live in your browser. This feature is in beta right now and they are looking for people to test it. The Edge team talks about their process for creating tools. They are working on putting their tools into other languages so that they are accessible to more people. They talk about how they want to avoid creating Edge specific tools as much as possible because they want to make it better for everybody. One of their biggest struggles is everybody demands developer tools, but nobody wants to contribute, so they don’t have as much feedback and not as much outside contribution. That’s why they keep calling for people to try out the new Edge on Chromium and give them feedback. They want to make that change more transparent so that they build things that people want. They will have to make some of their own tools, but they make sure that they don’t have any third party dependencies. They mention that all Chrome extensions are compatible with Edge, so if it’s available in the Chrome webstore, you can add it to Edge, you just have to be sure to allow it. They talk about some of the testing tools available. The show concludes with a discussion of the fate of Chakra Node. Panelists AJ O’Neal Aimee Knight Dan Shapir Steve Edwards With special guests: Chris Heilmann and Zohair Ali Sponsors Tidelift Sentry use the code “devchat” for 2 months free on Sentry’s small plan Views on Vue Links Chromium Microsoft Edge Insider Microsoft Chakra Core Elements for VS Code MS Edge Driver Puppeteer Follow DevChatTV on Facebook and Twitter Picks Aimee Knight: Cypress testing library Steve Edwards: CSS Tricks Screencast episode 174: Using Local Overrides in Devtools Dan Shapir: The Chronicles of Amber AJ O’Neal: The Legend of Zelda: Oracle of Ages Lover by Taylor Swift Chris Heilmann: The Marvelous Mrs. Maisel TabNine doesthedogdie.com Zohair Ali: Saga graphic novel series
Guests Chris heilmann and Zohair Ali are developers for Microsoft working on the Edge project. Today they are talking about Edge on Chromium and the future of developer tools. Edge will now be built in Chromium rather than being its own engine, aligning it more with what is being used on the open web right now. The Edge team wanted to seize the opportunity to bring something into the Chromium project based on the needs of real users and contribute to the open source web. Edge on Chromium won’t be limited to Windows 10 either, but will be available on Mac, Windows 7, and Windows 8. This project is still in beta with no set release date, so the Edge team is looking for people to test it out on Mac and tell them how it works. Chris and Zohair talk about the different parts of a web browser and what distinguishes Chrome from Chromium. Chromium is not just a platform, it’s an entire browser that you can install. Google adds a bunch of Google services to Chromium, such as being able to sign into your Google account, and that’s how you get Google Chrome. Similarly, the new Edge adds its own features on top of Chromium, so you can sign into your Microsoft account. By now the browser engines are so similar to each other that the users are looking for the user experience, interface, and services around it, so it made more sense for the Edge team to contribute to Chromium than to maintain their own engine and help it improve. Chris and Zohair talk about some of the features in Edge on Chromium. One service they’re particularly excited about is the Collections feature, where you can drag images, text, etc into Collections and export it to Excel or Word. Collections was inspired by what users need, and they talk about some of the different use cases for it. The new Edge on Chromium will also have an IE mode for products that still require IE 11. If you define what services need IE 11, Edge will open an IE 11 tab within the browser so you will not have to jump between browsers. Unfortunately, this feature is only available on Windows. Edge on Chromium will also offer an integration with VS Code, called Elements for VS Code, which takes part of the developer tools from Edge and puts it inside VS Code. Since the tools are based on Chromium, it stays in the same context all the time so you don’t have to jump back and forth, and you can see the changes live in your browser. This feature is in beta right now and they are looking for people to test it. The Edge team talks about their process for creating tools. They are working on putting their tools into other languages so that they are accessible to more people. They talk about how they want to avoid creating Edge specific tools as much as possible because they want to make it better for everybody. One of their biggest struggles is everybody demands developer tools, but nobody wants to contribute, so they don’t have as much feedback and not as much outside contribution. That’s why they keep calling for people to try out the new Edge on Chromium and give them feedback. They want to make that change more transparent so that they build things that people want. They will have to make some of their own tools, but they make sure that they don’t have any third party dependencies. They mention that all Chrome extensions are compatible with Edge, so if it’s available in the Chrome webstore, you can add it to Edge, you just have to be sure to allow it. They talk about some of the testing tools available. The show concludes with a discussion of the fate of Chakra Node. Panelists AJ O’Neal Aimee Knight Dan Shapir Steve Edwards With special guests: Chris Heilmann and Zohair Ali Sponsors Tidelift Sentry use the code “devchat” for 2 months free on Sentry’s small plan Views on Vue Links Chromium Microsoft Edge Insider Microsoft Chakra Core Elements for VS Code MS Edge Driver Puppeteer Follow DevChatTV on Facebook and Twitter Picks Aimee Knight: Cypress testing library Steve Edwards: CSS Tricks Screencast episode 174: Using Local Overrides in Devtools Dan Shapir: The Chronicles of Amber AJ O’Neal: The Legend of Zelda: Oracle of Ages Lover by Taylor Swift Chris Heilmann: The Marvelous Mrs. Maisel TabNine doesthedogdie.com Zohair Ali: Saga graphic novel series
Guests Chris heilmann and Zohair Ali are developers for Microsoft working on the Edge project. Today they are talking about Edge on Chromium and the future of developer tools. Edge will now be built in Chromium rather than being its own engine, aligning it more with what is being used on the open web right now. The Edge team wanted to seize the opportunity to bring something into the Chromium project based on the needs of real users and contribute to the open source web. Edge on Chromium won’t be limited to Windows 10 either, but will be available on Mac, Windows 7, and Windows 8. This project is still in beta with no set release date, so the Edge team is looking for people to test it out on Mac and tell them how it works. Chris and Zohair talk about the different parts of a web browser and what distinguishes Chrome from Chromium. Chromium is not just a platform, it’s an entire browser that you can install. Google adds a bunch of Google services to Chromium, such as being able to sign into your Google account, and that’s how you get Google Chrome. Similarly, the new Edge adds its own features on top of Chromium, so you can sign into your Microsoft account. By now the browser engines are so similar to each other that the users are looking for the user experience, interface, and services around it, so it made more sense for the Edge team to contribute to Chromium than to maintain their own engine and help it improve. Chris and Zohair talk about some of the features in Edge on Chromium. One service they’re particularly excited about is the Collections feature, where you can drag images, text, etc into Collections and export it to Excel or Word. Collections was inspired by what users need, and they talk about some of the different use cases for it. The new Edge on Chromium will also have an IE mode for products that still require IE 11. If you define what services need IE 11, Edge will open an IE 11 tab within the browser so you will not have to jump between browsers. Unfortunately, this feature is only available on Windows. Edge on Chromium will also offer an integration with VS Code, called Elements for VS Code, which takes part of the developer tools from Edge and puts it inside VS Code. Since the tools are based on Chromium, it stays in the same context all the time so you don’t have to jump back and forth, and you can see the changes live in your browser. This feature is in beta right now and they are looking for people to test it. The Edge team talks about their process for creating tools. They are working on putting their tools into other languages so that they are accessible to more people. They talk about how they want to avoid creating Edge specific tools as much as possible because they want to make it better for everybody. One of their biggest struggles is everybody demands developer tools, but nobody wants to contribute, so they don’t have as much feedback and not as much outside contribution. That’s why they keep calling for people to try out the new Edge on Chromium and give them feedback. They want to make that change more transparent so that they build things that people want. They will have to make some of their own tools, but they make sure that they don’t have any third party dependencies. They mention that all Chrome extensions are compatible with Edge, so if it’s available in the Chrome webstore, you can add it to Edge, you just have to be sure to allow it. They talk about some of the testing tools available. The show concludes with a discussion of the fate of Chakra Node. Panelists AJ O’Neal Aimee Knight Dan Shapir Steve Edwards With special guests: Chris Heilmann and Zohair Ali Sponsors Tidelift Sentry use the code “devchat” for 2 months free on Sentry’s small plan Views on Vue Links Chromium Microsoft Edge Insider Microsoft Chakra Core Elements for VS Code MS Edge Driver Puppeteer Follow DevChatTV on Facebook and Twitter Picks Aimee Knight: Cypress testing library Steve Edwards: CSS Tricks Screencast episode 174: Using Local Overrides in Devtools Dan Shapir: The Chronicles of Amber AJ O’Neal: The Legend of Zelda: Oracle of Ages Lover by Taylor Swift Chris Heilmann: The Marvelous Mrs. Maisel TabNine doesthedogdie.com Zohair Ali: Saga graphic novel series
Basuke Suzuki さんをゲストに迎えて、iPad Pro, Google Fi, Edge, C++, DJI Osmo Pocket などについて話しました。 Show Notes Coronado Brewing Company | Stay Coastal Rebuild: 221: Something's Plugged Into His iPad (basuke) Here’s how Google Fi will work with iPhones Google Fi OneNote Notion nativefier: Make any web page a desktop application Microsoft's Edge to morph into a Chromium-based, cross-platform browser Goodbye, EdgeHTML - The Mozilla Blog ChakraCore is the core part of the Chakra JavaScript engine that powers Microsoft Edge WebCore Rendering I – The Basics | WebKit On Switching from an iPad Pro and a Macbook to a Pixelbook GWT Google denies altering YouTube code to break Microsoft Edge Letter from Tim Cook to Apple investors - Apple Compare career levels across companies with Levels.fyi Creative Selection Netflix tests a bypass of iTunes billing in 33 markets 平成ネット史(仮) - NHK 「関心空間」10月末に終了 15年の歴史に幕 海外のゲーム・エンジン開発者の間で、Modern C++ がゲーム開発のニーズに応えられていないという議論 DJI OSMO POCKET A Programmer's Introduction to Mathematics 鈴木貫太郎 - YouTube 素数の音楽 | マーカス デュ・ソートイ フェルマーの最終定理 | サイモン・シン Perfume とライゾマティクスの新たな試みを支える Google の機械学習 神田松之丞問わず語りの松之丞
In this episode of The Future of Node series recorded at Node Interactive 2016 Adam talked with Gaurav Seth (Lead Program Manager of Chakra & TypeScript) and Arunesh Chandra (Program Manager of ChakraCore) about the backstory of Node at Microsoft, their polite fork of Node to introduce the community to ChakraCore (the high-performance JavaScript engine that powers Microsoft Edge), why Microsoft is so interested in Node, the future of Chakra and ChakraCore, VM neutrality, and more.
In this episode of The Future of Node series recorded at Node Interactive 2016 Adam talked with Gaurav Seth (Lead Program Manager of Chakra & TypeScript) and Arunesh Chandra (Program Manager of ChakraCore) about the backstory of Node at Microsoft, their polite fork of Node to introduce the community to ChakraCore (the high-performance JavaScript engine that powers Microsoft Edge), why Microsoft is so interested in Node, the future of Chakra and ChakraCore, VM neutrality, and more.
This episode was recorded live from The Microsoft Build Conference 2016. In this episode we chatted with Gaurav Seth of Microsoft about ChakraCore. You can follow him on Twitter, or check out what he’s done over on GitHub. Picks TypeScript (Gaurav) Richard Campbell and Carl Franklin from .NETRocks
This episode was recorded live from The Microsoft Build Conference 2016. In this episode we chatted with Gaurav Seth of Microsoft about ChakraCore. You can follow him on Twitter, or check out what he’s done over on GitHub. Picks TypeScript (Gaurav) Richard Campbell and Carl Franklin from .NETRocks
This episode was recorded live from The Microsoft Build Conference 2016. In this episode we chatted with Gaurav Seth of Microsoft about ChakraCore. You can follow him on Twitter, or check out what he’s done over on GitHub. Picks TypeScript (Gaurav) Richard Campbell and Carl Franklin from .NETRocks
Hajime Morita さんをゲストに迎えて、f.lux, Michael Stonebraker, GitHub, JIRA, 高速化などについて話しました。 Show Notes Facebook admits that its app is draining your iPhone's battery 意見を持つ iOS 9.3 f.lux Sherlock Twilight Night Light mode in Google Play Books Readings in Database Systems, 5th Edition Michael Stonebraker dear-github: An open letter to GitHub from the maintainers of open source projects JIRA vs GitHub issues Python Dev Moving to GitHub Performance is a Feature John Rauser, "Investigating Anomalies" The Tail at Scale Accidentally Quadratic 開発環境のデータをできるだけ本番に近づける - クックパッド開発者ブログ Fastly | Real-time CDN Velocity 2011: Artur Bergman Systrace | Android Developers Dianne Hackborn (Architect of Android platfrom) ChakraCore/perftest.pl