Chrome distrusted Symantec certs when 70 got pushed to stable (at the end of October)[1]. Digg shows NET::ERR_CERT_SYMANTEC_LEGACY error when I navigate to it. Firefox was supposed to remove the Symantec certs in 63 (also to be released at the end of October) but I guess they pushed it back a version[2].

All major browser coordinated to distrust the certs at the same time.

[1] https://security.googleblog.com/2017/09/chromes-plan-to-dist...

[2] https://blog.mozilla.org/security/2018/07/30/update-on-the-d...

Although the rendering may still be done in kernel mode the parsing is now done in a usermode sandbox[1] which significantly reduces risks from handling untrusted fonts.

[1] https://blogs.technet.microsoft.com/secguide/2017/06/15/drop...

uBlock Origin + Google's Safe Browsing (or SmartScreen if you're an Edge user) should be enough for just about anyone. Furthermore one of the strengths of uBO is the ability to use dynamic filtering[1] which bypasses the filter list problem entirely.

[1] https://github.com/gorhill/uBlock/wiki/Blocking-mode:-medium...

There's also ytdl integration in mpv[1]. The excellent open source media player. So anything you can download with ytdl you can stream in mpv.

[1] https://mpv.io

MPC-BE has Youtube-dl integration aswell

https://sourceforge.net/projects/mpcbe/

uBlock Origin has an option to do it[1].

[1] https://github.com/gorhill/uBlock/wiki/Prevent-WebRTC-from-l...

Never used it before but will do so now, Thank you!

It should unless this is something new? I'm not sure why this is really news. We've known about this problem with WebRTC for quite some time now.

They changed it in Windows 10 (RS1 IIRC)[1].

[1] http://www.alex-ionescu.com/?p=323

The tl;dr is that they're still using the self-referential page table trick, however the PTE_BASE is now randomised at runtime with dynamic fixups.

If an attacker can’t find it by probing the smallish number of choices using one of many MMU layout fixes, I’d be quite surprised.

Enabling blogblog and blogger should do it. This is par for the course with the blogger sites.

Just enabling dynamic filtering doesn't do anything as far as blocking is concerned. You'll still have to set up how you want to handle it.

I would recommend "Medium mode"[1] as defined in the uBlock wiki.

[1] https://github.com/gorhill/uBlock/wiki/Blocking-mode:-medium...

If you're using uBlock Origin or uMatrix to block third party scripts it won't matter. That's what makes using the dynamic filtering in uBlock Origin so powerful. Easily the best bang for your buck ad blocking that you can do.