Sign in

Andrew Whalley

@arw.me
480 followers 391 following 134 posts

An Englishman in San Francisco. Director of Security for Google Chrome.

PostsRepliesMedia
Andrew Whalley @arw.me · 17/05/2026
Oh yes! goodness!
130
Andrew Whalley @arw.me · 17/05/2026
Afraid not, but I saw them at The Warfield last year and had a blast. You’re in for a treat. Enjoy!
110
Reposted by Andrew Whalley
Dave Levitan @davelevitan.bsky.social · 19/02/2026
Getting shown up in the arena of elite impunity by *the British monarchy* is an incredible “America at 250!” achievement
125133183405
Andrew Whalley @arw.me · 27/12/2025
A perfect complement to chrome.security !
chrome.security
chrome.security
Chrome Security's mission is to make it safe to click on links.
010
Andrew Whalley @arw.me · 24/12/2025
It's been a while since I listened to it so I can't recall I'd they cover usage, but this podcast covers their form: 99percentinvisible.org/episode/futu...
99percentinvisible.org
Future Screens are Mostly Blue - 99% Invisible
We have seen the future, and the future is mostly blue. Or, put another way: in our representations of the future in science fiction movies, blue seems to be the dominant color of our interfaces with ...
130
Andrew Whalley @arw.me · 02/12/2025
I wasn’t involved in either, but my wild guess is we didn’t want to repeat the same mistake in the new API 😅
120
Andrew Whalley @arw.me · 02/12/2025
Some discussion about it here: issues.chromium.org/issues/36375...
issues.chromium.org
Chromium
120
Andrew Whalley @arw.me · 29/11/2025
Meanwhile in California…
A hand holds a can of Golden Road Pacific Blonde ale in the foreground, framed by a stunningly clear blue sky and calm, reflective water in a marina. The perfect weather is highlighted by the brilliant sunshine illuminating the boats and calm water under a cloudless expanse.
030
Andrew Whalley @arw.me · 25/11/2025
In an ideal world, normal people shouldn't worry about computer security. But for now, people should focus on things that matter — like using MFA and keeping software up to date — not worrying about things like public wifi. Proud to be a signatory of this great initiative by @boblord.bsky.social
010
Reposted by Andrew Whalley
The Onion @theonion.com · 10/11/2025
Chuck Schumer Helps Pull Democrats Back From Brink Of Courage
Chuck Schumer Helps Pull Democrats Back From Brink Of Courage
370283068650
Andrew Whalley @arw.me · 10/11/2025
You are an embarrassment.
000
Andrew Whalley @arw.me · 08/11/2025
Cc @portablesound.bsky.social
010
Andrew Whalley @arw.me · 28/10/2025
It's time to make HTTPS the web's default, and reap the full security benefit from years worth of HTTPS adoption! security.googleblog.com/2025/10/http...
security.googleblog.com
HTTPS by default
One year from now, with the release of Chrome 154 in October 2026, we will change the default settings of Chrome to enable “Always Use Secu...
38926
Andrew Whalley @arw.me · 08/08/2025
I do! Two actually. It's utterly silly and utterly delightful. This review sums it up well: youtu.be/8pPCMjqI_uw?...
000
Andrew Whalley @arw.me · 31/07/2025
BECOME UNOVENABLE 🪿
1221
Andrew Whalley @arw.me · 29/07/2025
Somewhat ironic that this is the week I start VPNing /in/ to the UK so I can listen to BBC Sounds again.
060
Andrew Whalley @arw.me · 27/07/2025
I’d love to get the web platform primitives in place so they could have a web app. Maybe one day.
030
Andrew Whalley @arw.me · 15/07/2025
Congratulations!?
130
Andrew Whalley @arw.me · 14/07/2025
Do you recommend reading them in order?
000
Andrew Whalley @arw.me · 12/07/2025
bsky.app/profile/jenn...
010
Reposted by Andrew Whalley
David Adrian @dadrian.io · 08/07/2025
Just posted a deep dive on how Chrome integrates with Advanced Protection Mode on Android. security.googleblog.com/2025/07/adva...
security.googleblog.com
Advancing Protection in Chrome on Android
Posted by David Adrian, Javier Castro & Peter Kotwicz, Chrome Security Team Android recently announced Advanced Protection , which extend...
011
Andrew Whalley @arw.me · 22/06/2025
/sub :-)
010
Andrew Whalley @arw.me · 22/06/2025
Another great ancillary benefit of memory safe languages: Cool infrastructure projects remain cooler for longer 😎 Library authors can provide great functionality without implicitly signing up for the slew of security bugs that are sadly the consequence of a large c/c++ project.
041
Reposted by Andrew Whalley
Filippo Valsorda @filippo.abyssdomain.expert · 20/06/2025
Here's something I am very excited about: Photosynthesis! 🌱☀️ A proposal to have CAs run transparency logs and make X.509 certificates out of Merkle Tree inclusion proofs. This is similar to how CT would have worked in an ideal world, and it solves the problem of PQC sizes in logs and handshakes.
mailarchive.ietf.org
[TLS] Photosynthesis, an update to Merkle Tree Certificates
Photosynthesis combines the Static CT API with the ideas in Merkle Tree Certificates.
14012
Andrew Whalley @arw.me · 20/06/2025
Happy solstice! 🌞🌝
141
Andrew Whalley @arw.me · 17/06/2025
Oh no! *hug* !
020
Andrew Whalley @arw.me · 17/06/2025
True, and I have an embarrassment of passports
110
Andrew Whalley @arw.me · 17/06/2025
British Airways, to give a taste of how long a transatlantic flight feels, created BA.com
220
Andrew Whalley @arw.me · 14/06/2025
I once managed to get a lovely rack of xserves and xserve raids for running malware analysis infra, with the justification that windows malware didn’t run well on PowerPC :-)
050
Andrew Whalley @arw.me · 05/06/2025
Congratulations!
020
Andrew Whalley @arw.me · 01/06/2025
i pretend to be a music geek by listening to strongsongspodcast.com, and enjoyed learning about each of the final 13 minutes of the first moon landing www.bbc.co.uk/programmes/p...
strongsongspodcast.com
Episodes
Music: It's good. On each episode of Strong Songs, host Kirk Hamilton takes listeners inside a piece of music, breaking it down and figuring out what makes it work.
000
Reposted by Andrew Whalley
Elizabeth Jacobs, PhD @elizabethjacobs.bsky.social · 01/06/2025
Screenshot of scene from the old game Oregon Trail. There is a green graphic on a black background. The graphic is of an ox pulling a wagon and below it is says YOU HAVE LISTENED TO RFK Jr.
135159693802
Andrew Whalley @arw.me · 30/05/2025
Really excellent deck! cc @rusi.bsky.social - might be of interest to your members.
020
Andrew Whalley @arw.me · 20/05/2025
Whoever it was should be in a pennitentiary
010
Reposted by Andrew Whalley
Amy @amyre.bsky.social · 16/05/2025
Behold my favorite weird Chrome security bug of 2025 so far! A jaw-dropping URL / omnibox spoof via ligatures, specifically the googlelogo ligature. issues.chromium.org/issues/39178...
issues.chromium.org
Chromium
1169
Andrew Whalley @arw.me · 17/05/2025
Though once you learn, you never forget. It's just like riding a cymbal.
030
Andrew Whalley @arw.me · 17/05/2025
nooo!
110
Andrew Whalley @arw.me · 28/04/2025
Ed Balls
030
Andrew Whalley @arw.me · 21/04/2025
*hug*
020
Reposted by Andrew Whalley
Laurence Rowe @laurencerowe.bsky.social · 20/04/2025
Note that you can get a new social security card without that wording when you get a green card. I did so will double check I told them when I became a citizen!
111
Andrew Whalley @arw.me · 20/04/2025
You'll need to show your passport or naturalisation certificate at an SSA office. Start the process here: ssa.gov/ssncard-apply
ssa.gov
Social Security
030
Andrew Whalley @arw.me · 20/04/2025
🗽 PSA for naturalised citizens: If you never got a new social security card when you became a citizen, and your existing card has "valid for work only with ins/dns authorization" you are likely still in the Social Security database as a non-citizen.
22712
Andrew Whalley @arw.me · 13/04/2025
Just purchased a sledge hammer, and now have Peter Gabriel stuck in my head.
040
Reposted by Andrew Whalley
Rick Byers @rbyers.net · 04/04/2025
I'm excited about this program! Chromium isn't necessarily easy, but I know there are great engineers out there who would love to get paid for improving it!
1178
Andrew Whalley @arw.me · 30/03/2025
Postcard from San Francisco
A handwritten sign on a lamppost reading “we will not let Trump dig our grave”
050
Andrew Whalley @arw.me · 29/03/2025
Yes!
010
Andrew Whalley @arw.me · 29/03/2025
Stunning!!
110
Andrew Whalley @arw.me · 08/03/2025
I hope you get a massive turnout. I can't be there I'm afraid, but I've just looked up how much flights and a hotel would be, and donated that amount to war.ukraine.ua.
war.ukraine.ua
Russia’s war in Ukraine: official website | MFA of Ukraine
On 24 February 2022 Russia attacked Ukraine. This website provides verified information and updates about Russia's invasion of Ukraine.
050
Andrew Whalley @arw.me · 07/03/2025
BoredSSL
150