BCharlie

5 ms·

1.
Democracy and Mass Skepticism of Science(papers.ssrn.com)
1 points by BCharlie 5y ago|1 comments
2.
Security Bug Hunting with Proxies(nullsweep.com)
1 points by BCharlie 6y ago|0 comments
3.
NoSQLi – A Fast NoSQL Injection Framework Written in Go(nullsweep.com)
3 points by BCharlie 6y ago|0 comments
4.
by BCharlie 6y ago
I mention that the data that appears to be used for those purposes is sent again in a separate request to a separate end point, so we have two types of requests: last read location, and reading analytics. Sorry it wasn't clear, I'
5.
by BCharlie 6y ago
That's a great idea! It looks like the 'bad' stuff goes to unagi-na.amazon.com
6.
by BCharlie 6y ago
Though I haven't analyzed other devices (because I don't own them), they could easily have similar issues. I personally really want an open e-ink device, but I haven't seen one for sale unfortunately. For now, I do Calibre OD
7.
Kindle collects a surprisingly large amount of data(nullsweep.com)
545 points by BCharlie 6y ago|379 comments
8.
Defcon 2020 Live Notes(nullsweep.com)
1 points by BCharlie 6y ago|0 comments
9.
Secrets Management for Developers(nullsweep.com)
1 points by BCharlie 6y ago|0 comments
10.
Government Surveillance of Protestors(nullsweep.com)
1 points by BCharlie 6y ago|0 comments
11.
by BCharlie 6y ago
Yikes! Maybe that's the next thing I will take a look at...
12.
by BCharlie 6y ago
That makes a lot of sense. I assumed it was somehow for anti-fraud, though I still don't like it.
13.
Why Is This Website Port Scanning Me?(nullsweep.com)
1294 points by BCharlie 6y ago|430 comments
14.
My Favorite InfoSec Learning Resources(nullsweep.com)
2 points by BCharlie 6y ago|0 comments
15.
by BCharlie 7y ago
Perhaps calling it an heroic effort would suit your taste more? "Those teams rebuilt around 4,000 servers and 45,000 PCs and other devices" over 10 days (according to another article), while the company "ground to a halt&quot
16.
by BCharlie 7y ago
I completely agree. I was only pointing out that even extreme cases don't seem to lead to proper valuations. Many companies do things in a way where miracles aren't required - but the values perceived by those departments still do
17.
by BCharlie 7y ago
I wish I knew of some way to change this paradigm. I have repeatedly seen IT/Engineering teams pull out miracles that save a business, or deliver the critical edge for growth, only to have the business value that same team close to zer
18.
A Better Way to SSH in AWS(nullsweep.com)
3 points by BCharlie 7y ago|0 comments
19.
Subdomain Reconnaissance(nullsweep.com)
2 points by BCharlie 7y ago|0 comments
20.
Deploying Docker Securely(nullsweep.com)
2 points by BCharlie 7y ago|0 comments
21.
A NoSQL Injection Primer (With Mongo)(nullsweep.com)
2 points by BCharlie 7y ago|0 comments
22.
by BCharlie 7y ago
Thanks for this response - lot's of new information here that I'll have to read up on!
23.
by BCharlie 7y ago
You are right on this - I thought you could set multiple sites by setting multiple headers, but it doesn't work that way, which I should have known because headers don't work that way in general... The recommended way to do multip
24.
by BCharlie 7y ago
Thanks for the feedback! I did link the official site, but it's kinda buried in the paragraph and maybe not obvious. I added some text to the x-frame-options to note the CSP rules - it's a great addition.
25.
by BCharlie 7y ago
Great point! I added a sentence to say that the default is all that's needed.
26.
by BCharlie 7y ago
That is true! I do set frame-ancestors in the sample CSP for this reason. I could probably do a dedicated post on CSP to do it justice, but don't want to overwhelm anyone who just wants to start setting headers. One good reason to set
27.
by BCharlie 7y ago
I think it's a good point which is why I set the time low, even though many other resources set it to a week or longer. I just don't like very long cache times for anything that can break, so that site owners have a little more fl
28.
HTTP Security Headers – A Complete Guide(nullsweep.com)
709 points by BCharlie 7y ago|78 comments
29.
Show HN: Firefox Plugin Privacy Test Database(nullsweep.com)
10 points by BCharlie 7y ago|0 comments
30.
Digging Through Someones Past Using Osint(nullsweep.com)
3 points by BCharlie 8y ago|1 comments

More ›