Reading up on Chromium
10 deep · digging since nov 25, 25
- Inside Muse’s browser stack
Muse’s browser uses near‑stock Chromium driven by an 18 MB Rust broker that provisions warm VM pools, residential IP egress, and accessibility‑tree clicks for reliable automated browsing.
- Closure | Playing whack-a-mole is losing
Security must shift from reactive bug‑fixing to encoding systemic invariants, because whack‑a‑mole—even accelerated by AI—fails to achieve lasting protection overall.
- TLS Fingerprinting: What Websites Know About You Before You Tell Them Anything
TLS Forge captures and replays a real browser’s TLS, HTTP/1.1, HTTP/2, and header profile so automation tools match JA3/JA4 fingerprints and evade bot detection.
- Install web apps with the new HTML install element | Blog
The new HTML `<install>` element lets developers add a browser-trusted install button for web apps without JavaScript, now in origin trial for Chrome and Edge.
- Show HN: X86CSS – An x86 CPU emulator written in CSS
A developer created a fully functional x86 CPU emulator using only CSS, demonstrating Turing completeness of CSS, though it currently only runs in Chromium-based browsers.
- Zero-day CSS: CVE-2026-2441 exists in the wild
Google patched a high-severity use-after-free vulnerability in Chromium's CSS engine exploited in the wild as a zero-day.
- A first look at the Web Install API – Frontend Masters Blog
The Web Install API enters origin trial in Chromium, allowing any website to install a progressive web app with a single button click.
- Google announces experimental ‘Disco’ browser with ‘GenTabs’
Google Labs announces experimental 'Disco' browser on Chromium that uses Gemini 3 to generate interactive GenTabs like trip planners from chat prompts.
- Google unkills JPEG XL?
Google's Chromium team reversed its decision to drop JPEG XL support, now planning to implement it in Blink, which could make it a de facto standard for images.
- Why we forked Chromium
Browserbase forked Chromium and applied patches to remove automation signals and enable long-lived sessions, making headless browsers undetectable and stable for AI agents.