amenghra

78 ms·

931.
CSRF protection bypass due to Google analytics and weird server cookie parsing(hackerone.com)
97 points by amenghra 12y ago|39 comments
932.
Security Advisory: PillPack.com Online Pharmacy(databreaches.net)
2 points by amenghra 12y ago|0 comments
933.
Wearing a suit makes you think different(theatlantic.com)
4 points by amenghra 12y ago|0 comments
934.
WhatsApp's Encryption(m.heise.de)
1 points by amenghra 12y ago|0 comments
935.
Bypassing Google PasswordAlert(twitter.com)
2 points by amenghra 12y ago|0 comments
936.
by amenghra 12y ago
In some countries/cultures, letters of reference are handed out in a sealed envelope. The interview process involves taking lots of weak signals (you can't tell much about a person by talking to them for ~30 minutes) and trying to
937.
by amenghra 12y ago
https://corner.squareup.com/2015/04/keywhiz.html
938.
Probability cheatsheet(wzchen.com)
4 points by amenghra 12y ago|1 comments
939.
Comparison of 5 OS Scheduling Policies(spin.atomicobject.com)
4 points by amenghra 12y ago|0 comments
940.
Defcon 23 speakers(defcon.org)
1 points by amenghra 12y ago|0 comments
941.
A bunch of collaborative games(snoot.org)
1 points by amenghra 12y ago|0 comments
942.
Avast being malicious(medium.com)
3 points by amenghra 12y ago|0 comments
943.
On first connection to a new site (typed without protocol), try https first(bugzilla.mozilla.org)
15 points by amenghra 12y ago|7 comments
944.
A (very) simple obfuscator(obfuscat.ion.land)
1 points by amenghra 12y ago|0 comments
945.
Buy your cat a space on a billboard(catbillboard.wordpress.com)
3 points by amenghra 12y ago|0 comments
946.
by amenghra 12y ago
Filesystem interface just by itself is a big difference. Keywhiz lets you manage things like mysql or other configs which might contain things like username/passwords, passwords to unlock certificates, API keys, etc. If you don't
947.
by amenghra 12y ago
Related blog post: https://corner.squareup.com/2015/04/keywhiz.html
948.
Square open sources Keywhiz(square.github.io)
5 points by amenghra 12y ago|1 comments
949.
by amenghra 12y ago
I tried that at one point with a coworker: https://github.com/alokmenghrajani/nomic We added a way to vote using public keys and then we got bored because nobody else was geeky enough to join our game.
950.
by amenghra 12y ago
A good starting point might be to use Lego + Mindstorm (or Lego + Arduino). You get to use various off the shelf mechanical parts and you get to re-use the Lego parts in your next project.
951.
by amenghra 12y ago
I think we have the technology to show that a piece of text is a draft and hasn't yet been sent. Imho, the end user should be able to choose between live commenting vs draft+send.
952.
by amenghra 12y ago
Comparing two companies over a period of time without taking into account splits, reverse splits, dividends, etc. isn't very meaningful.
953.
by amenghra 12y ago
There are some interesting comments in the hackernews thread I started: https://news.ycombinator.com/item?id=8859350
954.
by amenghra 12y ago
I totally agree. You would however need to somehow authenticate that you own foo.bar.example.com (code in email, host something under foo.bar.example.com, a TXT record, etc.).
955.
by amenghra 12y ago
Updated the code, try again?
956.
by amenghra 12y ago
This works in Chrome. I'll have to look into Firefox, it does have WebRTC so it might suffer from the same issue.
957.
TIL WebRTC exposes your private IP address(jsfiddle.net)
5 points by amenghra 12y ago|4 comments
958.
by amenghra 12y ago
A fun thing to do is write a bootloader for Raspberry Pi. It doesn't have some of the cruft of x86 while still being a real bootloader.
959.
Detecting incognito mode in Chrome(jsfiddle.net)
4 points by amenghra 12y ago|0 comments
960.
Piggybacking data on PGP key servers(quaxio.com)
1 points by amenghra 12y ago|0 comments

More ›