<?xml version="1.0" encoding="UTF-8"?><!-- generator="WordPress/2.9.2" -->
<rss version="0.92">
<channel>
	<title>Larholm.com</title>
	<link>http://larholm.com</link>
	<description>Me, myself and I</description>
	<lastBuildDate>Tue, 06 Apr 2010 12:32:26 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	
	<item>
		<title>Looking into Chrome</title>
		<description><![CDATA[I am currently trying to setup a proper build environment for Google Chrome, so that I can test some crashes in more details.
It seems amazing that a brief line of Javascript code is able to completely freeze the Chrome process and all its threads, but I am guessing it is a synchronization issue when talking [...]]]></description>
		<link>http://larholm.com/2010/04/06/looking-into-chrome/</link>
			</item>
	<item>
		<title>Community Day 10 in Copenhagen</title>
		<description><![CDATA[Community Day is back again this year in Copenhagen.
If you like free tech-talks, networking and beer then reserve May 27 for Community Day ‘10.
There will be some 20 sessions on four concurrent tracks, with 45 minutes of presentation time and 30 minutes for Q&#38;A.
Most of the session titles are already set, ranging from HTML5 to [...]]]></description>
		<link>http://larholm.com/2010/04/06/community-day-10-in-copenhagen/</link>
			</item>
	<item>
		<title>Internet Explorer 9 at MIX &#8211; and Windows Phone 7 IE</title>
		<description><![CDATA[I am currently at MIX 10 in Las Vegas together with Mads Kristensen and Kenneth Auchenberg.
The IE9 keynote was great and revealed many new facets of the upcoming Internet Explorer 9. There will be a new Jscript engine, codenamed &#8220;Chakra&#8221;, lots of HTML 5 support and hardware acceleration of almost all rendering aspects &#8211; not [...]]]></description>
		<link>http://larholm.com/2010/03/16/internet-explorer-9-at-mix-and-windows-phone-7-ie/</link>
			</item>
	<item>
		<title>Long time no see, hello Chrome</title>
		<description><![CDATA[Well it&#8217;s been a long time since I last wrote any entries here. What, almost a year.. time flies by when you&#8217;re having fun   especially when you&#8217;re working a lot.
Just wanted to give a quick heads-up that I will start posting again. And what better way to celebrate that than by expanding on [...]]]></description>
		<link>http://larholm.com/2008/09/09/long-time-no-see-hello-chrome/</link>
			</item>
	<item>
		<title>QuickTime qtnext 0day for IE</title>
		<description><![CDATA[Last Wednesday, pdp published a 0day exploit for the Quicktime plugin in Firefox that allowed you to instantiate a separate Firefox instance with arbitrary command line arguments. Since Firefox has published a remedy for this in the form of Firefox 2.0.0.7 I thought I would detail how you can accomplish the same with Internet Explorer [...]]]></description>
		<link>http://larholm.com/2007/09/19/quicktime-qtnext-0day-for-ie/</link>
			</item>
	<item>
		<title>Silverlight 1.0 Release Candidate</title>
		<description><![CDATA[Yesterday I was at a Silverlight conference in Copenhagen which was actually quite interesting. For those of you who might not know what Silverlight is, it is a Flash competitor developed by Microsoft based on Windows Presentation Foundation and XAML. If you are not interested in Silverlight development in general then jump straight to the [...]]]></description>
		<link>http://larholm.com/2007/08/31/silverlight-10-release-candidate/</link>
			</item>
	<item>
		<title>Remote variable leakage</title>
		<description><![CDATA[The summer is officially over and I hope yours has been as fun as mine. I didn&#8217;t go to Blackhat or DefCon this year, so I hope the rest of you had a good time for me. As for this site, it&#8217;s time to start writing some articles again  
Ronald van den Heetkamp has [...]]]></description>
		<link>http://larholm.com/2007/08/14/remote-variable-leakage/</link>
			</item>
	<item>
		<title>Thunderbird 1.5 has not been patched with osint</title>
		<description><![CDATA[In my previous post I detailed how the Mozilla suite has an unpatched input validation vulnerability in how it handles URL protocol handlers. Together with this I detailed several XPI exploits that could be used to target Thunderbird 2.0.0.4.
I detailed my reason for publishing this vulnerability report in my Bugtraq post.
 Thunderbird 2.0.0.5 was released [...]]]></description>
		<link>http://larholm.com/2007/07/26/thunderbird-15-has-not-been-patched-with-osint/</link>
			</item>
	<item>
		<title>Mozilla Protocol Abuse</title>
		<description><![CDATA[This is the vulnerability report that I promised in &#8220;Handling URL protocol handlers&#8220;. You can download the entire report together with the XPI exploits at http://larholm.com/media/2007/7/mozillaprotocolabuse.zip. The exploits have been successfully tested with Firefox 2.0.0.5 and Thunderbird 2.0.0.4, Thunderbird 2.0.0.5 is not vulnerable due to the &#8220;osint&#8221; flag.

Mozilla Protocol Abuse
Cross-application URL handler command injection
Firefox and [...]]]></description>
		<link>http://larholm.com/2007/07/25/mozilla-protocol-abuse/</link>
			</item>
	<item>
		<title>Handling URL protocol handlers</title>
		<description><![CDATA[There is a lot of talk about how an application should handle URL protocol handlers. Jesper Johanson has expressed his thoughts, as has David LeBlanc, Billy Rios, Window Snyder and pdp. Billy Rios just detailed yet another potential attack vector for protocol abuse.
I don&#8217;t think it is the responsibility of the calling application to perform [...]]]></description>
		<link>http://larholm.com/2007/07/25/handling-url-protocol-handlers/</link>
			</item>
</channel>
</rss>

<!-- Dynamic Page Served (once) in 1.150 seconds -->
