ejcx

52 ms·

451.
by ejcx 11y ago
There are some pretty serious privacy issues with this extension. There should be a way to block domains that you don't want searched, otherwise secret URLs such as youtube private links, google docs, etc are exposed. One scary thing i
452.
by ejcx 11y ago
I'm amazed to see Lua higher than Go, JSP, Scala, and some other stuff students would be more likely to be exposed to. Maybe students are doing a lot of NGINX stuff ? I'm also glad to see PHP high on the list. Good to know it isn&
453.
by ejcx 11y ago
I'm not going to argue but I might as well explain some of the uses here. For example, encrypting clientside and not decrypting serverside will mean it's impossible to have a plaintext password leak in the future, which decreases
454.
by ejcx 11y ago
This is called either a Local File Inclusion or a Directory Traversal Vulnerability. The name depends on the details. It's really really common, and definitely something I see a lot of. The OWASP Top 10 is deadly.
455.
by ejcx 11y ago
It highlights how incompetent Valve is at security. Adding one feature shows they are incompetent at security? Great real. Without more information about the scheme there's nothing to know. Whether useful or not it is still n
456.
by ejcx 11y ago
One little know cool thing steam has done for a while is encrypt passwords with a RSA public key before they are sent server side. Yes, js crypto is not worth a whole lot but it is a valuable security tool to be used with TLS. There are som
457.
by ejcx 11y ago
It was my first conference talk. If you would like to ask any questions email me at the one in my profile https://m.youtube.com/watch?v=wzrVYyouQTk
458.
by ejcx 11y ago
I did a conference talk at derbycon on exactly this, regarding startups. The amount of obvious holes of founders not knowing what XSS is, or writing bad PHP apps with obvious code execution vulns, or glaring logic and auth mistakes allowing
459.
by ejcx 11y ago
There is a significant percentage of the population without banking. The underbanked and unbanked percent in the US is pretty alarming to me. .[0] [0] - https://www.fdic.gov/householdsurvey/
460.
by ejcx 11y ago
I only hope that YCF get's back to those accepted and denied quickly. I see this as a great program for students and if they wait too long, students may end up in an awkward position where they are unsure whether they should drop out f
461.
by ejcx 11y ago
Good for them. I've been watching them quietly working hard, and it has been like that for a while now. Good luck! Hopefully some projects that make security completely invisible come about from this.
462.
by ejcx 11y ago
Nice work. Looks like a useful tool, especially since time calculations can be confusing. Remember to sanitize your input. http://durat.io/?q=%22/%3E%3Cscript%3Ealert(1);%3C/script%3E
463.
by ejcx 11y ago
This is awesome. Ignoring the fact that it is written in Go, the iOS calculator only goes up to 100,000,000 and it is super annoying. Free ones have obnoxious advertisements. Now, I want to learn to write iOS apps in Go as well.. Super neat
464.
by ejcx 11y ago
Not bad, kind of guitar-hero like. I like that the key and key changes could be very clear. It's also nice that new musicians wouldn't have to memorize certain keys, since an F# when playing in G major could just be printed on the
465.
by ejcx 11y ago
Isn't this a problem that is hopefully solved by the huge number of new TLDs. I think it will eventually be a non-problem. I have seen some many startups using .co, .io, and even an early stage using a .technology. I actually saw Harri
466.
by ejcx 11y ago
I actually built an identical project following watching Rob Fuller's talk "Attacker Ghost Stories". I've actually built it twice. First was a Java based service for each service I wanted as a honeypot. FTP, SSH, MySQL,
467.
by ejcx 11y ago
That's fair. I think my point with the paragraph still stands though, that this path has the highest bar of entry. I think the demand for this type of worker is way lower, even in the beltway.
468.
by ejcx 11y ago
Depends on what type of security you want to get into. General Pentesting: Python or something higher level. Lots of library and tool usage (i.e. scapy, nping, nmap, metasploit) Application Security: Learn frameworks more than languages. Ho
469.
by ejcx 11y ago
One thing that would be neat is if google rolled out their own streaming software. I've streamed a little on twitch for fun (mostly programming and some gaming) and I found all of it pretty bad. Another neat thing is how much Replay va
470.
by ejcx 11y ago
Yes I agree. Everyone attaches their own meaning to that. I only mean it to be, a website where using it isn't going to get you needlessly harassed, doxed, threatened, etc. and when that kind of stuff happens, people don't find it
471.
by ejcx 11y ago
The idea is to make people who are being harassed on reddit feel safe[0]. This goal is something I think everyone agrees is a good goal. As a policy decision, I think it is pretty weird they started banning communities instead of people. Th
472.
by ejcx 11y ago
Yeah I understand. It goes both ways. It's an opinion. "Great" probably wasn't a great word to use, but I personally don't have any issue with the line of code since it was easy to understand. I've looked at a
473.
by ejcx 11y ago
Overly long variable names is just as much of a hinderence as variable names that don't give enough info. Your "complaint" of go actually have nothing to do with Go itself... In my opinion, a is an great variable name. Especi
474.
by ejcx 11y ago
Why? Is this really a golang thing? If you are going to be creating these complex structures why not using a factory function for it? If there were many creations of this type it could severely increase the bulk of the code....
475.
by ejcx 11y ago
I had a similar thing happen to me in the USA actually but had a different outcome. I got on instagram.com (when it was still served over HTTP) one day and noticed an alignment issue. I believe reddit also had the issue. It was caused by a
476.
by ejcx 11y ago
How does your average WWDC heartrate compare to your average resting heart rate?
477.
by ejcx 11y ago
SEEKING WORK, remote (moving to SF next month) I am experienced security engineer looking for some short term engagements or contracting work. I am very experienced in PHP, Golang, Linux internals, WebApp Security, and so much more. I love
478.
by ejcx 11y ago
Come on. Even if snapchat rapidly declines I am guessing Spiegel is going to end up doing alright. Why not go for it like Zuckerberg did instead of selling? Can't succeed if you don't try. Good for the founders for deciding to run
479.
by ejcx 11y ago
Nice bugs. Race conditions are fun. Different race conditions were posted here a couple weeks ago as well for those who don't know[0]. Race conditions for stuff like "gifts" and "credit/debit" is generally an a
480.
by ejcx 11y ago
I definitely agree with this. I had "learned C" but not really (programmed small things in it). Then about a year later I ended up taking a course that involved a lot of reverse engineering and analysis of ELFs. Later on I went ba

More ›