https://kacigaya.github.io/blog/Technical notes on browser security, automation, and reverse engineering.https://kacigaya.github.io/blog/google-tv-volume-popup-workaround/https://kacigaya.github.io/blog/google-tv-volume-popup-workaround/Fri, 18 Sep 2026 00:00:00 GMTChromecast passthrough Toast traced to com.droidlogic AudioSystemCmdService, stopped with encoded_surround_output PCM setting, verified across reboot.https://kacigaya.github.io/blog/vivaldi-autohide-fix/https://kacigaya.github.io/blog/vivaldi-autohide-fix/Tue, 15 Sep 2026 00:00:00 GMTAn experimental local patch for stuck auto-hide sidebars in macOS Vivaldi 8.2.4133.52, with bundle checks, a backup, and restoration.https://kacigaya.github.io/blog/fix-missing-gmail-notifications-android/https://kacigaya.github.io/blog/fix-missing-gmail-notifications-android/Thu, 10 Sep 2026 00:00:00 GMTA practical checklist for restoring Gmail alerts on Android, including notification channels, sound settings, Gmail sync, and an ADB fix for inconsistent permissions.https://kacigaya.github.io/blog/brave-origin-credential-summary-no-key-pinning/https://kacigaya.github.io/blog/brave-origin-credential-summary-no-key-pinning/Tue, 30 Jun 2026 00:00:00 GMTThe Android Origin gate verifies subscription credentials against a public key the server hands back, with no issuer pinning. A local policy path never redeems them, so a forged credential is enough.https://kacigaya.github.io/blog/patchright-fingerprint-stats-webrtc/https://kacigaya.github.io/blog/patchright-fingerprint-stats-webrtc/Sun, 07 Jun 2026 00:00:00 GMTWhy AmiUnique and WebRTC leak tests need a different approach than bot-detection demos, and how WebSkrap handles them with native Chromium flags and opt-in context metadata instead of JavaScript spoofing.https://kacigaya.github.io/blog/headless-chrome-bot-detection-stealth/https://kacigaya.github.io/blog/headless-chrome-bot-detection-stealth/Wed, 03 Jun 2026 00:00:00 GMTMaking headless Chromium clear the same bot-detection suite as headed mode with a simulated screen and a masked user agent, no JavaScript spoofing.https://kacigaya.github.io/blog/teensy-reverse-shell-poc/https://kacigaya.github.io/blog/teensy-reverse-shell-poc/Thu, 07 May 2026 00:00:00 GMTHID keyboard injection on a Teensy 3.2 chains into a fileless PowerShell reverse shell on Windows.https://kacigaya.github.io/blog/skia-graphite-chromium-macos/https://kacigaya.github.io/blog/skia-graphite-chromium-macos/Wed, 06 May 2026 00:00:00 GMTA GPU rendering synchronization bug causing visual corruption on macOS, and how to fix it.