beardedwizard

35 ms·

1. 511.▲
   by beardedwizard 8y ago

   Another way to state this is: accept the state of the world and approach the problem using an existing methodology - treat code as untrusted and whitelist execution paths. SElinux and others do this, intrinsic is another product that uses t
2. 512.▲
   by beardedwizard 8y ago

   Australia and New Zealand recommend direct sun exposure in the article. They are telling us, it turns out.
3. 513.▲
   by beardedwizard 8y ago

   Do you believe changing the world is a real goal, or a convenient phrase used to convince the naive to work hard and cheaply? Let's not give too much credit, it's a sales pitch and almost everyone knows that.
4. 514.▲
   by beardedwizard 8y ago

   I have had frequent encounters with these drivers as well as the Bauer drivers.
5. 515.▲
   by beardedwizard 8y ago

   Considering the alternative is local storage, and I can include traditional csrf tokens, it still feels like a partially supported samesite flag with httponly is a solid defense against xss and csrf and doesn't lead to a road of danger
6. 516.▲
   by beardedwizard 8y ago

   Isn't this more about the community the author found around a technology they already loved as opposed to any specific knowledge gained about cpp?
7. 517.▲
   by beardedwizard 8y ago

   CSRF is mitigated by using the samesite cookie flag. XSS is mitigated by httponly, except where XSS makes legitimate requests to domains specified by the cookie. This article describes some of the most vulnerable ways to use a JWT in 2019,