ericlaw

Note that I said: "One of my", and Cloudflare has hired a HUGE percentage of the best networking talent I've encountered.

The October 2025 Patch Tuesday patches locked down previews of files in the Windows Explorer shell. This post explains why.

Mistakes and Successes in building the Fiddler web debugger

Almost everybody knows this, yet most of us don't think through the implications, leading to some surprising results.

There is no visible "OK" button on a SmartScreen reputation warning.

.com files still work fine on Windows; Visual Studio installs devenv.com, for example (IIRC, it's there for a somewhat wacky reason. See %PATHEXT%)

Happy to add those, if you can point to some information about actual implementations?

The many many upstart browsers (including mine) that are eager for Chrome to do something so foolish so we can collect all of their irate users?

To answer a few questions here:

1. I landed this fix because there was a policy that did not work properly. We could instead document that the URLBlocklist policy works for every scheme but one, or we could fix it. Fixing it makes more sense.

2. This policy only can be set on managed machines.

3. This policy, in isolation, is trivially circumvented. Managed environments block many things, including many of the proposed circumventions here.

4. I've built one of the world's most popular tools for viewing and modifying web traffic. The narrative that this feature has broad implications for anything is absurd.