ShaneWilton

14 ms·

1. 91.▲
   by ShaneWilton 11y ago

   I'm not terribly familiar with ship.io, but we use CircleCI at Tinfoil Security, and it's an excellent product. If you're looking for a replacement to ship.io, it's definitely worth investigating. Their support is excell
2. 92.▲
   by ShaneWilton 11y ago

   seccomp is a really exciting feature that I haven't seen talked about too often. It actually played a fairly large role in CTFs this year, being used by LegitBS in the DEFCON Finals. Since we didn't have access to a lot of the sys
3. 93.▲
   NSA Codebreaker Challenge 2015(codebreaker.ltsnet.net)

   1 points by ShaneWilton 11y ago|0 comments
4. 94.▲
   Writing Beautiful Code(youtube.com)

   3 points by ShaneWilton 11y ago|0 comments
5. 95.▲
   Writing Beautiful Code(youtube.com)

   4 points by ShaneWilton 11y ago|0 comments
6. 96.▲
   by ShaneWilton 11y ago

   I hadn't heard of SafeStack, but it sounds like very cool research. Thanks for sharing! I'm by no means an expert on binary exploitation, so I don't feel qualified to answer your question. That being said, SafeStack sounds ve
7. 97.▲
   by ShaneWilton 11y ago

   Hammer is a nifty parser combinator library from the people behind Language-Theoretic Security [1]. Their goal is to promote the use of context-free formats and protocols, to avoid falling into the trap of trying to parse recursively-enumer
8. 98.▲
   Hammer: Parser Combinators for C(github.com)

   56 points by ShaneWilton 11y ago|20 comments
9. 99.▲
   by ShaneWilton 11y ago

   The slides [1] and overview, with supplementary software [2], are also available online. [1] http://www.scs.stanford.edu/brop/bittau-brop-slides.pdf [2] http://www.scs.stanford.edu/brop/
10. 100.▲
    Blind Return Oriented Programming [pdf](scs.stanford.edu)

    16 points by ShaneWilton 11y ago|3 comments
11. 101.▲
    Everything About Tor [pdf](ritter.vg)

    96 points by ShaneWilton 11y ago|4 comments
12. 102.▲
    De-Anonymizing Alt.Anonymous.Messages (2013) [video](youtube.com)

    14 points by ShaneWilton 11y ago|0 comments
13. 103.▲
    by ShaneWilton 11y ago

    "Of course, with all this, you would still have to make sure repeated communication does not bear any fingerprints that could be used to identify you." This is one area where things get really interesting. Here's one of my fa
14. 104.▲
    by ShaneWilton 11y ago

    Those are great. Other favourites from the list are: 1) The Pynchon Gate: A Secure Method of Pseudonymous Mail Retrieval 2) Mixminion: Design of a Type III Anonymous Remailer Protocol 3) On the Economics of Anonymity The third in particular
15. 105.▲
    by ShaneWilton 11y ago

    Unfortunately I've never found a video of the talk. A quick Google search revealed the paper "Reactive Lenses" [1], which seems relevant. I haven't read it yet, but the abstract seems promising. Edit: It looks like the p
16. 106.▲
    Selected Papers in Anonymity(freehaven.net)

    79 points by ShaneWilton 11y ago|14 comments
17. 107.▲
    The Weird World of Bi-Directional Programming (2006) [pdf](cis.upenn.edu)

    32 points by ShaneWilton 11y ago|7 comments
18. 108.▲
    by ShaneWilton 11y ago

    The author seems to be getting at something very similar to the notion of "bidirectional programming" [1][2]. It's a concept that's closely related to the indispensable "lens" library in Haskell [3]. [1] http:
19. 109.▲
    The Science of Insecurity(youtube.com)

    1 points by ShaneWilton 11y ago|0 comments
20. 110.▲
    by ShaneWilton 11y ago

    I'm not actually involved in any mix-related projects (Though I'd love to be if I ever find the time), but I'm always happy to talk about them. You can reach me at this username at gmail.com
21. 111.▲
    Selected Papers in Anonymity(freehaven.net)

    4 points by ShaneWilton 11y ago|0 comments
22. 112.▲
    by ShaneWilton 11y ago

    No problem! I could talk for hours about mix networks. If you enjoy that paper, there's a few follow-up papers they wrote that examine some possible threat vectors and possible solutions. All in all, it's a very interesting system
23. 113.▲
    by ShaneWilton 11y ago

    "Asynchronous, non-real-time schemes that look like vanilla web traffic are the best." It's a shame that high-latency mix networks died out with Mixminion [1] a few years ago. There's a lot of interesting research that n
24. 114.▲
    by ShaneWilton 11y ago

    Things like Modernizr and feature detection are great, but I'm excited to see what happens when coeffects [1] have some more research behind them, and end up being supported by a mainstream programming language. The idea is that you&#x
25. 115.▲
    Price and Feature Comparison of Web Application Scanners(sectoolmarket.com)

    1 points by ShaneWilton 11y ago|0 comments
26. 116.▲
    by ShaneWilton 11y ago

    I'm super excited for this. Micro Corruption [1] literally changed my life [2], and I can't wait to see what the team at Starfighter have put together. If you haven't yet, give Micro Corruption a try. It's the first thin
27. 117.▲
    Understanding F-Algebras (2013)(fpcomplete.com)

    2 points by ShaneWilton 11y ago|0 comments
28. 118.▲
    by ShaneWilton 11y ago

    There's a great paper that investigated this technique: https://www.eecs.berkeley.edu/~sa499/papers/adversarial_styl... From the conclusions: "Translation with widely available machine translation servic
29. 119.▲
    Microsoft Azure adds web vulnerability scanning from Tinfoil Security(venturebeat.com)

    2 points by ShaneWilton 11y ago|0 comments
30. 120.▲
    by ShaneWilton 11y ago

    It's too late to edit my post, but my verdict is that the game is awesome. If you have any interest at all in programming in assembly, or in reasoning about parallelism, this is the game for you.