logo
episode-header-image
Aug 2020
8m 49s

Chrome Blocks Downloads For Files Hosted...

Hussein Nasser
About this episode

A great change by Chrome team, downloading files on HTTP insecure channels is insecure. Let us discuss  Resource  https://www.zdnet.com/article/google-to-block-some-http-file-downloads-starting-with-chrome-83/

Up next
Nov 24
CPU and Kernel Page Faults
<p>Page faults occurs when the process tries to access a memory that isn’t backed by a physical page kernel raises a fault which loads a page. It happens on first access, stack expansion, COW, swap and much more. However it comes with a cost. </p><p><br /></p><p>In this episode o ... Show More
48m 37s
Oct 31
Amazon US-EAST-1 Outage in Details
On October 19 2025 AWS experienced an outage that lasted over a day, 10 days later we finally got the root cause analysis and we know exactly what caused the DNS to fail0:00 Summary 5:30 How did Dynamo lost its DNS?13:41 EC2 Errors 16:16 Network Load Balancer ErrorsRCA here https ... Show More
24m 26s
Oct 17
Graceful shutdown in HTTP
There are cases where the backend may need to close the connection to prevent unexpected situations, prevent bad actors or simply just free up resources. Closing a connection gracefully allows clients and backends to clean up and finish any pending requests. In this episode of th ... Show More
25m 49s
Recommended Episodes
Apr 2024
Chrome bientôt en version payante ?
<p>Google vient d’annoncer qu’une version payante de son célèbre navigateur Chrome verra le jour d’ici peu. Mais ne vous inquiétez pas, cela ne vous concerne pas… du moins pas encore. Car ce Chrome payant sera essentiellement réservé aux professionnels, d’où son nom assez clair&n ... Show More
2 m
Nov 2020
HTTP Archive's 10th Anniversary
(November 19, 2020) Rick meets with Steve Souders, who created the HTTP Archive project 10 years ago this month, to talk about its origins and reflect on it's growth. They're also joined by Patrick Meenan, creator of WebPageTest and maintainer of HTTP Archive, along with Paul Cal ... Show More
48m 46s
Apr 2020
JavaScript Vulnerabilities with Tim Kadlec - The State of the Web
<p><span style="font-weight: 400;">(Originally aired on YouTube on May 30, 2018)</span></p> <p><span style="font-weight: 400;">Rick and Tim talk about how insecure much of the web really is, the various vulnerabilities in web security that can leave you open to attack, the challe ... Show More
12m 32s
May 2024
SN 976: The 50 Gigabyte Privacy Bomb - Google AI Workarounds, Microsoft Recall
The bigger problem with AI Overview https://udm14.com/ -and- https://tenbluelinks.org/ The horses have left the barn VPNs and Firewalls Email @ GRC Extension to fix Google search Passwords and SPAM Fixing motherboard components Vertical tabs in Firefox FritzBox routers Too many P ... Show More
2h 13m
Mar 2023
Files stolen from a sneaky SymStealer. [Research Saturday]
Ron Masas of Imperva discusses their work, the "Google Chrome “SymStealer” Vulnerability. How to Protect Your Files from Being Stolen." By reviewing the ways the browser handles file systems, specifically searching for common vulnerabilities relating to how browsers process symli ... Show More
13m 35s
Mar 2024
Episode 64: .NET Remoting, CDN Attack Surface, and Recon vs Main App
Episode 64: In this episode of Critical Thinking - Bug Bounty Podcast we talk about Justin and Joel delve into .NET remoting and how it can be exploited, a recent bypass in the Dom Purify library and some interesting functionality in the Cloudflare CDN-CGI endpoint. They also tou ... Show More
1h 8m
Feb 2022
Google Opens Early Access to Chrome OS Flex - DTH
<p>Google opens early access to Chrome OS Flex, Twitter expands Safety Mode into beta, and Google plans to bring Privacy Sandbox to Android.</p><br><p>Get the show notes <a href="https://docs.google.com/spreadsheets/d/e/2PACX-1vT2uK52XEryOkhioIsOB6-Y-pw3m83Op5l8Dee2fruRj06sspEyuj ... Show More
5m 52s
Mar 2023
New exploits are tricking Chrome. [Research Saturday]
Dor Zvi, Co-Founder and CEO from Red Access to discuss their work on "New Chrome Exploit Lets Attackers Completely Disable Browser Extensions." A recently patched exploit is tricking Chrome browsers on all popular OSs to not only give attackers visibility of their targets’ browse ... Show More
15m 33s
Mar 2024
Linux Kernel Scheduler Developer | David Vernet
<p>The linux kernel is something we all use but have you ever thought about what goes into it, well today we&#39;ve got David Vernet on the show who has spent quite a bit of time focusing on one aspect, that being the scheduler.</p> <p>=========Guest Links==========</p> <p>Twitch ... Show More
1h 55m
Feb 2023
Episode 7: PortSwigger Top 10, TruffleSecurity Drama, and More!
Episode 7: In this episode of Critical Thinking - Bug Bounty Podcast we talk about PortSwigger's Top 10 Web Hacking Techniques of 2022 (link below), some drama surrounding TruffleSecurity's XSS Hunter, and, as always, some great bug bounty tips.Sorry if the audio is a little roug ... Show More
56m 39s