christophetd

8 ms·

1. 31.▲
   by christophetd 5y ago

   That's useful, thanks for sharing! Based on this, it seems extremely likely that GitHub has taken down JNDIExploit, as opposed to its owner removing it themselves. (See the question raised in https://news.ycombinator.com&#x2
2. 32.▲
   by christophetd 5y ago

   If anyone working at GitHub reads this, I opened support ticket #1425405 to request a confirmation.
3. 33.▲
   by christophetd 5y ago

   Thanks for pointing this out. To make sure I respect the rules, I removed my tweet linking to the HN thread suggesting people to upvote it for the matter to have more visibility.
4. 34.▲
   by christophetd 5y ago

   I have now removed the tweet linking to this HN thread to ensure I am abiding by HN rules.
5. 35.▲
   by christophetd 5y ago

   If that's against the rules, let me know and I will remove the post. It was never my intention to go against HN rules. (I suggested that people upvote the thread for visibility in the community and to start the discussion. When somethi
6. 36.▲
   by christophetd 5y ago

   As far as I know, the owner of JNDIExploit did not claim that GitHub took the repo down. I am trying to find their contact information to remove any doubts around this.
7. 37.▲
   by christophetd 5y ago

   It's a good point. I added a disclaimer to the tweet while confirming this, but I'm confident it's a GitHub takedown following their new policy: https://github.blog/2021-04-29-call-for-feedback-policies-ex...
8. 38.▲
   GitHub taking down tools allowing defenders to reproduce the Log4j vulnerability(twitter.com)

   212 points by christophetd 5y ago|94 comments
9. 39.▲
   by christophetd 5y ago

   Seems it works only in Chrome (not Firefox). Nice one, though.
10. 40.▲
    A one-pager for AWS announcements at re:Invent 2021(github.com)

    4 points by christophetd 5y ago|0 comments
11. 41.▲
    Compensation, rationality and the project/person fit (2012)(yosefk.com)

    2 points by christophetd 5y ago|1 comments
12. 42.▲
    How to grab control: 4 tactics used by UI libraries(code.hmil.fr)

    1 points by christophetd 5y ago|0 comments
13. 43.▲
    Phishing for AWS credentials via AWS SSO device code authentication(blog.christophetd.fr)

    3 points by christophetd 5y ago|0 comments
14. 44.▲
    by christophetd 8y ago

    I initially wanted to use duplicati as well, but I tried it twice at a one year interval and both times the web UI felt very buggy, and I have a hard time trusting for my backups a tool that has a buggy UI.
15. 45.▲
    by christophetd 8y ago

    Agreed, the names are terribly chosen and very confusing. There was a discussion on the topic here: https://news.ycombinator.com/item?id=14507778
16. 46.▲
    by christophetd 8y ago

    Duplicacy doesn't support it, so I don't plan to add support for it either.
17. 47.▲
    by christophetd 8y ago

    Thank you for pointing this out, I forgot this specificity of duplicacy. I added a disclaimer: https://github.com/christophetd/duplicacy-autobackup/commit/... Regarding the license of my code I'm unsure
18. 48.▲
    Show HN: A tool for painless automated backups(github.com)

    22 points by christophetd 8y ago|18 comments
19. 49.▲
    NSEInfo: a tool to easily search through the 500+ nmap's NSE scripts(github.com)

    2 points by christophetd 9y ago|0 comments
20. 50.▲
    Exploiting the code execution engine powering InterviewCake, CodeWars and others(blog.christophetd.fr)

    3 points by christophetd 9y ago|0 comments
21. 51.▲
    by christophetd 9y ago

    Thanks for the feedback :-) As I mentioned at the end of the post, there are indeed malwares that detect being run in a virtual environment and who change their behavior (e.g. do nothing). I'm not an expert at all on the topic, but I w