Web Application Security17 August 2026
A New SVG-to-Video Tool Is a Reminder: Rendering Remote SVG Is a Trust Boundary
Simon Willison's markdown-svg-renderer now compiles SVG animations to MP4 in the browser — a good occasion to revisit why rendering someone else's SVG is not the same as rendering your own.
xsssvgbrowser-security
4 min readRead
Browser Extension Security16 August 2026
737 Fake Chrome VPN Extensions Funnel Traffic Through One Proxy
Socket researchers traced 737 free Chrome VPN and proxy extensions — many impersonating brands like NordVPN and ExpressVPN — back to a single operator intercepting browser traffic through one SOCKS5 proxy.
chrome-extensionsvpn-securitybrowser-security
4 min readRead
Browser & AI Security17 July 2026
Puter Ported Firefox to WebAssembly — and Routed Every Byte Through Its Own Server
Puter's proof-of-concept compiles the Firefox/Gecko engine to WebAssembly so it runs inside another browser tab — a striking feat of AI-assisted engineering that also happens to be a live demonstration of what a network trust boundary looks like.
ai-securitybrowser-securitywebassembly
4 min readRead