Security Software – An Overview 🔗
I’ve spent nearly my entire professional career in software security: designing software to prevent abuse by bad actors. I’ve been battling the bad gu [...]
text/plain
Posts
Best Practices for SmartScreen AppRep 🔗
Last year, I wrote about how Windows integrates SmartScreen Application Reputation to help ensure users have a secure and smooth experience when runni [...]
Defensive Technology: Controlled Folder Access 🔗
Most client software’s threat models (e.g. Edge, Chrome) explicitly exclude threats where the local computer was compromised by malware. That’s becaus [...]
On Politics 🔗
I do not come from an especially political family. One parent has not voted in decades, and the other votes regularly, but is not an enthusiast and va [...]
Lenovo P1, Gen7: Meh 🔗
I’ve been a loyal user of Thinkpads for over twenty-five years now, and I currently own four (with another on loan from Microsoft). In July, the scree [...]
Defensive Technology: Antimalware Scan Interface (AMSI) 🔗
Endpoint security software faces a tough challenge — it needs to be able to rapidly distinguish between desired and unwanted behavior with few false p [...]
Content-Blocking in Manifest v3 🔗
I’ve written about selectively blocking content in browsers several times over the last two decades. In this post, I don’t aim to convince you that ad [...]
Attack Techniques: Encrypted Archives 🔗
Tricking a user into downloading and opening malware is a common attack technique, and defenders have introduced security scanners to many layers of t [...]
Welcome to Fall, I guess? 🔗
Two months without a blog post? Sheesh. A lot has happened in two months, although perhaps nothing especially interesting. I splurged on a new laptop, [...]
Browser Features: Find in Page 🔗
For busy web users, the humble Find-in-Page feature in the browser is one of the most important features available. While Google or Bing can get you t [...]