bitwizzle

4 ms·

1. 1.▲
   How do people find bugs?(cryptologie.net)

   41 points by bitwizzle 6y ago|7 comments
2. 2.▲
   Escaping a Python sandbox with a memory corruption bug(hackernoon.com)

   3 points by bitwizzle 10y ago|0 comments
3. 3.▲
   by bitwizzle 10y ago

   Now is the time for vendors to consider implementing a duress password. Upon entering your duress password the user is presented with a fake profile, or perhaps everything could just be wiped. I'm not sure how well this would play out
4. 4.▲
   by bitwizzle 12y ago

   It's not security by obscurity. It's security by diversity, which is arguably a good thing.
5. 5.▲
   by bitwizzle 13y ago

   Apps on your phone (that have the right permissions) already have the ability to do everything that this app does. Did you personally audit the source code/reverse engineer every app to find out whether it is abusing these privileges?
6. 6.▲
   by bitwizzle 13y ago

   For those of us still using bash, "set -o vi" is analagous. I would be interested in hearing about customizing it in ways like this article.
7. 7.▲
   by bitwizzle 13y ago

   While it's true that you should disable compression, most browsers disable it client-side now so this isn't a huge issue. As for BREACH, HTTP compression has a huge performance benefit, so it's not really feasible to disable