Sign in

Andrew Whalley

@arw.me
480 followers 391 following 134 posts

An Englishman in San Francisco. Director of Security for Google Chrome.

PostsRepliesMedia
Reposted by Andrew Whalley
Dave Levitan @davelevitan.bsky.social · 19/02/2026
Getting shown up in the arena of elite impunity by *the British monarchy* is an incredible “America at 250!” achievement
125133183405
Andrew Whalley @arw.me · 27/12/2025
A perfect complement to chrome.security !
chrome.security
chrome.security
Chrome Security's mission is to make it safe to click on links.
010
Andrew Whalley @arw.me · 25/11/2025
In an ideal world, normal people shouldn't worry about computer security. But for now, people should focus on things that matter — like using MFA and keeping software up to date — not worrying about things like public wifi. Proud to be a signatory of this great initiative by @boblord.bsky.social
010
Reposted by Andrew Whalley
The Onion @theonion.com · 10/11/2025
Chuck Schumer Helps Pull Democrats Back From Brink Of Courage
Chuck Schumer Helps Pull Democrats Back From Brink Of Courage
370283128651
Andrew Whalley @arw.me · 28/10/2025
It's time to make HTTPS the web's default, and reap the full security benefit from years worth of HTTPS adoption! security.googleblog.com/2025/10/http...
security.googleblog.com
HTTPS by default
One year from now, with the release of Chrome 154 in October 2026, we will change the default settings of Chrome to enable “Always Use Secu...
38926
Andrew Whalley @arw.me · 31/07/2025
BECOME UNOVENABLE 🪿
1221
Andrew Whalley @arw.me · 29/07/2025
Somewhat ironic that this is the week I start VPNing /in/ to the UK so I can listen to BBC Sounds again.
060
Andrew Whalley @arw.me · 12/07/2025
bsky.app/profile/jenn...
010
Reposted by Andrew Whalley
David Adrian @dadrian.io · 08/07/2025
Just posted a deep dive on how Chrome integrates with Advanced Protection Mode on Android. security.googleblog.com/2025/07/adva...
security.googleblog.com
Advancing Protection in Chrome on Android
Posted by David Adrian, Javier Castro & Peter Kotwicz, Chrome Security Team Android recently announced Advanced Protection , which extend...
011
Andrew Whalley @arw.me · 22/06/2025
Another great ancillary benefit of memory safe languages: Cool infrastructure projects remain cooler for longer 😎 Library authors can provide great functionality without implicitly signing up for the slew of security bugs that are sadly the consequence of a large c/c++ project.
041
Reposted by Andrew Whalley
Filippo Valsorda @filippo.abyssdomain.expert · 20/06/2025
Here's something I am very excited about: Photosynthesis! 🌱☀️ A proposal to have CAs run transparency logs and make X.509 certificates out of Merkle Tree inclusion proofs. This is similar to how CT would have worked in an ideal world, and it solves the problem of PQC sizes in logs and handshakes.
mailarchive.ietf.org
[TLS] Photosynthesis, an update to Merkle Tree Certificates
Photosynthesis combines the Static CT API with the ideas in Merkle Tree Certificates.
14012
Andrew Whalley @arw.me · 20/06/2025
Happy solstice! 🌞🌝
141
Andrew Whalley @arw.me · 17/06/2025
British Airways, to give a taste of how long a transatlantic flight feels, created BA.com
220
Reposted by Andrew Whalley
Elizabeth Jacobs, PhD @elizabethjacobs.bsky.social · 01/06/2025
Screenshot of scene from the old game Oregon Trail. There is a green graphic on a black background. The graphic is of an ox pulling a wagon and below it is says YOU HAVE LISTENED TO RFK Jr.
135159703802
Reposted by Andrew Whalley
Amy @amyre.bsky.social · 16/05/2025
Behold my favorite weird Chrome security bug of 2025 so far! A jaw-dropping URL / omnibox spoof via ligatures, specifically the googlelogo ligature. issues.chromium.org/issues/39178...
issues.chromium.org
Chromium
1169
Andrew Whalley @arw.me · 28/04/2025
Ed Balls
030
Reposted by Andrew Whalley
Laurence Rowe @laurencerowe.bsky.social · 20/04/2025
Note that you can get a new social security card without that wording when you get a green card. I did so will double check I told them when I became a citizen!
111
Andrew Whalley @arw.me · 20/04/2025
🗽 PSA for naturalised citizens: If you never got a new social security card when you became a citizen, and your existing card has "valid for work only with ins/dns authorization" you are likely still in the Social Security database as a non-citizen.
22712
Andrew Whalley @arw.me · 13/04/2025
Just purchased a sledge hammer, and now have Peter Gabriel stuck in my head.
040
Reposted by Andrew Whalley
Rick Byers @rbyers.net · 04/04/2025
I'm excited about this program! Chromium isn't necessarily easy, but I know there are great engineers out there who would love to get paid for improving it!
1178
Andrew Whalley @arw.me · 30/03/2025
Postcard from San Francisco
A handwritten sign on a lamppost reading “we will not let Trump dig our grave”
050
Reposted by Andrew Whalley
Annie Sullivan @anniesullie.com · 06/03/2025
Here are the project ideas and info for Chromium:
docs.google.com
Chromium GSoC 2025 Project Ideas and Info
Chromium GSoC 2025 Project Ideas and Info
084
Andrew Whalley @arw.me · 04/03/2025
🥞 Happy Pancake Day! 🥞
030
Reposted by Andrew Whalley
Popehat @kenwhite.bsky.social · 24/02/2025
We are, unequivocally, the Bad Guys. We have been before, and we will be again, no doubt, but this one is particularly repellent.
854122801
Andrew Whalley @arw.me · 24/02/2025
Slava Ukraini 🇺🇦
010
Andrew Whalley @arw.me · 17/02/2025
I think Swiss Air is saying you can smoke in the toilets, but only if you don’t get caught?
050
Reposted by Andrew Whalley
evacide @evacide.bsky.social · 13/02/2025
These are unsophisticated actors. They use the wrong fork at dinner.
161
Andrew Whalley @arw.me · 12/02/2025
Am I allowed to feel smug about being all hip and getting the pop culture reference, if I only know about it because of @kenwhite.bsky.social ?
422912
Reposted by Andrew Whalley
Erika Hall @erikahall.bsky.social · 01/02/2025
I wish the Democrats in office demonstrated even 10% of the urgency of their fundraising texts dealing with these genuinely urgent situations.
532658
Andrew Whalley @arw.me · 29/01/2025
You can increase the protection of Chrome's process isolation by using the chromeenterprise.google/policies/?po... enterprise policy, or the Strict-Origin-Isolation option on chrome://flags/
191
Andrew Whalley @arw.me · 26/01/2025
In case of emergency, please present your yellow-tinted wine glass to have an entire bottle of wine poured directly into it.
A panel from an aircraft safety card showing a deployed oxygen mask being reached for, but rather looking like the text of the post instead. (At least to my jet lagged self)
020
Reposted by Andrew Whalley
Matthew Riley @matt.dev · 25/01/2025
Yesterday Chromium deleted our copy of `libavif` -- the last step of a year-long project replacing it with a new Rust library! :) chromium-review.googlesource.com/c/chromium/s...
chromium-review.googlesource.com
Gerrit Code Review
2356
Reposted by Andrew Whalley
Ciaran Martin @ciaranm.bsky.social · 24/01/2025
This is not an easy discussion to have against such a horrific backdrop. But online age restrictions on commonly available goods are unlikely to make any difference & such measures are not cost free Hope the gov’t: - focuses on real security improvements; - has a coherent approach to tech 2/2
1102
Andrew Whalley @arw.me · 17/01/2025
This is excellent news! Enigma is excellent and well worth your time.
020
Andrew Whalley @arw.me · 05/01/2025
I’ve lived in California a long time, but I’ve never got used to the fact that hummingbirds aren’t just on TV nature documentaries, but also “a few feet over there”
An Anna’s Hummingbird drinking from a feeder
050
Andrew Whalley @arw.me · 05/01/2025
Need to check if you've got IPv6 connectivity? Love dancing turtles and 27 year old web pages? www.kame.net is for you.
kame.net
The KAME project
010
Andrew Whalley @arw.me · 27/12/2024
Thoroughly enjoyed my first ride on a new electric Caltrain! Though slightly alarmed to see a Chrome error message that's not been shipping since 2015! I hope the systems running your infoscreens aren't connected to anything important, @gocaltrain.bsky.social ...
A Chrome error page showing a dead tab icon and the text "He's dead, Jim! Either Chrome ran out of memory or the process for the webpage was terminated for some other reason. To continue, reload or go to another page."
2122
Andrew Whalley @arw.me · 25/12/2024
Happy Christmas from Felicity.
A cat with a Father Christmas hat placed on top of her. She doesn’t look overly thrilled about it.
280
Reposted by Andrew Whalley
Bob Lord @boblord.bsky.social · 19/12/2024
To those of you who use a consumer VPN for "security" reasons, what specific technical improvements in your browser or OS would make you change your mind and uninstall the VPN? Please be technical.
7121
Andrew Whalley @arw.me · 08/12/2024
Christmas came early.
0102
Reposted by Andrew Whalley
Matthew Green @matthewdgreen.bsky.social · 06/12/2024
On first glance, the C++ 23 “assume” keyword is the craziest thing I’ve ever seen. bsky.app/profile/feli...
5539
Andrew Whalley @arw.me · 04/12/2024
Giving Tuesday idea: Do you have an Amazon credit card and a decent amount of cash back? Why not convert it into real impact and warm fuzzies by buying things off amazon wish lists. e.g. see #clearthelist for those of teachers. (It's sad it's needed for classroom supplies, but here we are)
010
Andrew Whalley @arw.me · 29/11/2024
Precision potatoes
An electronic measuring caliper measuring the thickness of a slice of potato at exactly ⅛ of an inch (it was an American recipe)
3161
Reposted by Andrew Whalley
James Munns @jamesmunns.com · 25/09/2024
> The Android team has observed that the rollback rate of Rust changes is less than half that of C++ This is a sleeper hit of a quote.
13010
Andrew Whalley @arw.me · 30/09/2024
First in, first out :-)
040
Reposted by Andrew Whalley
Justin Schuh @justinschuh.com · 17/02/2024
OMG Private Network Access is finally shipping in Chrome 123. That's just shy of a decade for something I'd honestly expected to have shipped in more like a year. But I'm glad to see finally it's moving forward and the other browsers are supportive. www.bleepingcomputer.com/news/google/...
bleepingcomputer.com
New Google Chrome feature blocks attacks against home networks
Google is testing a new feature to prevent malicious public websites from pivoting through a user's browser to attack devices and services on internal, private networks.
272
Reposted by Andrew Whalley
Popehat @kenwhite.bsky.social · 05/02/2024
I get a lot of scam victims as clients and they often feel humiliated and really angry at themselves. This is what I tell them: you got taken by a professional. That’s like getting beaten up by a professional MMA fighter. It’s no reflection on you. Pros are very good at what they do.
311230297
Reposted by Andrew Whalley
Melanie D’Arrigo @darrigomelanie.bsky.social · 21/01/2024
Ron DeSantis should be forced to carry his Presidential campaign to term.
362296569
Reposted by Andrew Whalley
Zeke Hausfather @zekehausfather.com · 18/01/2024
The scale of climate change can be a bit mind-boggling at times. For example, the Greenland ice sheet has lost over 6 trillion metric tons of ice since 1970 – or more than 700 tonnes lost per person for every person on the planet today: www.carbonbrief.org/state-of-the...
35328