ShaneWilton

19 ms·

151.
by ShaneWilton 12y ago
You're right, there's some ambiguous wording on my part. I'll be sure to make that section more precise right now. Looking back on that section, I should also be talking about work factors and such.
152.
Storing Your Data Securely: A Primer(tinfoilsecurity.com)
55 points by ShaneWilton 12y ago|41 comments
153.
by ShaneWilton 12y ago
Related DerbyCon talk: https://www.youtube.com/watch?v=-HK1JHR7LIM
154.
Anti-Forensics Tools(github.com)
3 points by ShaneWilton 12y ago|1 comments
155.
Postcards from the post-XSS world(lcamtuf.coredump.cx)
35 points by ShaneWilton 12y ago|1 comments
156.
by ShaneWilton 12y ago
Yeah, the research paper is a bit wordy. It's novel, though, because here it adds another vector for malware to inject into legitimate apps to hijack a phone, without requiring new permissions. I could see it becoming a serious concern
157.
by ShaneWilton 12y ago
The same thing happened about a month ago with an Xbox One commercial that would turn on people's consoles: http://www.businessinsider.com/xbox-one-ad-turning-on-people...
158.
by ShaneWilton 12y ago
I've only actually read the book. It's definitely thorough enough to stand on its own, but if you're having trouble understanding some of the sections (It's not easy material!), I could see the lectures being a valuable
159.
Cross-Platform Binary Exploitation(tinfoilsecurity.com)
1 points by ShaneWilton 12y ago|0 comments
160.
by ShaneWilton 12y ago
Easily the best textbook I've read on the topic is "Programming Language Application and Interpretation" or PLAI. It uses Racket to walk you through the implementation of different programming language features, while delving
161.
by ShaneWilton 12y ago
Here's a link to the slides: http://www.slideshare.net/ShaneWilton/one-shellcode-to-rule-...
162.
by ShaneWilton 12y ago
It's incredibly exciting to consider just how much talent Google has managed to amass on this team. Say what you will about whether it's an entirely altruistic endeavour or not, but I don't think anybody can dispute that devo
163.
by ShaneWilton 12y ago
This looks like a really great tool. It's a shame Github doesn't have more fine grained permissions though - I'd love to give it read/write access to repos it creates, but it requiring global read/write access means
164.
by ShaneWilton 12y ago
Thanks for the criticism! This is something I was torn on, but I really enjoyed the flow of Amazon's single-page MFA sign-on, so I ended up mimicking their design. I've heard a few comments like yours now though, so I'll prob
165.
by ShaneWilton 12y ago
On some older keypad layouts, Q and Z aren't associated with a number. It could be some misguided attempt at backwards compatibility.
166.
by ShaneWilton 13y ago
I've been using GoSublime under ST3 without any issues. Maybe I'm not making full use of it's functionality, but I haven't had any problems with it yet.
167.
by ShaneWilton 14y ago
At that point, what is the point of the secret question in the first place? If I lose my password, I probably also lost my security answer, and even if they're stored in separate places, then isn't it just another vector of attack which doe
168.
by ShaneWilton 14y ago
give "bad ideas" more thought Paul Graham wrote about this just a few months ago. It's worth a read: http://www.paulgraham.com/swan.html
169.
KickStarter - SparkFun National Education Tour(kickstarter.com)
1 points by ShaneWilton 14y ago|0 comments
170.
by ShaneWilton 14y ago
This is a really interesting idea, but I'm curious about how the transaction fees would affect things. Does the process of paying the fee reveal a match to an attacker? Regardless, it was an excellent read.