acveilleux

45 ms·

541.
by acveilleux 12y ago
This is just the lowest hanging fruit possible: 1. Widely deployed software. 2. Internet facing on purpose . 3. Trivial to fingerprint. 4. Fairly robust exploit (doesn't crash the target or require version specific offsets, magic numb
542.
by acveilleux 12y ago
However Amsterdam, the other place they mention is a smidgen further away.
543.
by acveilleux 12y ago
MIME multipart/alternative type is what you want to use. RFC2346 section 5.1.4.
544.
by acveilleux 12y ago
Given the US, talking to a lawyer first is pretty much invariably the smarter thing to do. Even without going this far, you can make statements that then negatively impact your bargaining position later on.
545.
by acveilleux 12y ago
3$/study with unlimited HL7 integrations? I'm really curious how that makes financial sense unless HL7 integrations and their required VPNs are billed separately or strictly a "on your own" proposition.
546.
by acveilleux 12y ago
It's a really sexy skin on a cessna citation business jet. Even the same turbofan engines...
547.
by acveilleux 12y ago
100$, that's how hard.
548.
by acveilleux 12y ago
The published source code is only the client-side. So not quite open-source, at least in my book if a client is open-source the protocol it implements ought to be documented somewhere or the implementation provided.
549.
by acveilleux 12y ago
The login protocol require sending a hash of the key used to decrypt the rsa key bundle stored server-side. I hope they implemented a constant time compare for that hash so that verification can't be used to work out key...
550.
by acveilleux 12y ago
More importantly, one of the party is trusted to come up with the key alone. The other party just has to accept that it's a good key with no other proof then that it was encrypted with their public key. The description is really weak o
551.
by acveilleux 12y ago
You can use github or you can run a private gitorious install (assume here function parity.) Most people will choose github because that's where the people are. Subrosa's value proposition is more as a meeting place then as a &quo
552.
by acveilleux 12y ago
Well, the cookie should not contain anything computable by the user. You could use an encrypted cookie to store session information to save a round-trip to the DB. In that case it should be impossible for the user to derive the key or modif
553.
by acveilleux 13y ago
McGill used webct and I thought it was some of the most atrociously designed software ever. Maybe it changed in the last few years.
554.
by acveilleux 13y ago
They seem to mostly skip 1 and 2 and move directly to the killing part. Which is rational I guess, why waste resource on something you intend to kill.