griffinmb

11 ms·

31.
Unexpected Code Execution(griffinbyatt.com)
1 points by griffinmb 8y ago|0 comments
32.
Dynamically Loading Mach-O Executables(blog.griffinbyatt.com)
1 points by griffinmb 8y ago|0 comments
33.
My dog was killed on a walk with a walker ordered through Wag(facebook.com)
775 points by griffinmb 8y ago|442 comments
34.
by griffinmb 8y ago
I made the switch from web development to security a few years ago and initially took a 10-15% pay cut. I didn't get any certs and wouldn't necessarily recommend them. Instead, I joined various bug bounty programs to get practical
35.
by griffinmb 8y ago
I mean, I read the codebase, which is why I'm saying it's small and easily understood. Sure, it has some specific things to know, and some ("magical") helpers like automatic view functions. But it's no more its own
36.
by griffinmb 8y ago
Phoenix is really a very small framework, and its codebase can be easily understood in just a couple of days. Phoenix being "large" is a common (but unfounded) criticism that seems to stem from Elixir's superficial resemblanc
37.
Show HN: Sound – A security-focused, experimental web framework(github.com)
2 points by griffinmb 8y ago|0 comments
38.
by griffinmb 8y ago
*college Also, it isn't entirely clear what you are trying to say. If you are suggesting that school-based screening is also problematic, then you are probably on the right track.
39.
Show HN: Sound – An experimental web framework built with Swift(sound.griffinbyatt.com)
1 points by griffinmb 8y ago|0 comments
40.
by griffinmb 8y ago
It has been more than 7 months since the issue was reported, I don't see how this lacks professionalism. They even created a temporary fix.
41.
by griffinmb 8y ago
> Since launch Quit Genius has grown to 300,000 registered users, with over 20,000 people officially smoke-free in the app (which Quit Genius defines as having not smoked for over 28 days). I'd be interested to know how "smoke-
42.
by griffinmb 8y ago
I think the issue is more that nonce reuse with stream ciphers like GCM result in a more catastrophic failure (i.e. secret key disclosure), whereas reusing the IV with CBC will only disclose whether some plaintext was encrypted multiple tim
43.
Crafting Interpreters: Chunks of Bytecode(craftinginterpreters.com)
4 points by griffinmb 9y ago|0 comments
44.
by griffinmb 9y ago
In general, I think Ruby does a good job of being unsurprising. I like that most things work as I'd expect, with the syntax I'd expect. But then you've got weird things like `File.read("|ls")` that are entirely surp
45.
Sobelow: Security-Focused Static Analysis for the Phoenix Framework(github.com)
3 points by griffinmb 9y ago|0 comments
46.
by griffinmb 9y ago
I'm sure it's possible to do this securely, but in general this seems like a sure-fire way to expose your secret keys.
47.
by griffinmb 9y ago
Their response (on their homepage) is awful: http://nomx.com/ "nomx Passes Security Tests After Blogger Claims to Have Penetrated nomx - UK blogger makes false claims he can access nomx remotely - UK blogger fails to a
48.
by griffinmb 9y ago
Could be useful for proof-of-concepts. Though, if you are a site-owner and your form can be submitted with this, you should probably consider implementing anti-csrf protections.
49.
Analysis of Plug Security Vulnerabilities(griffinbyatt.com)
1 points by griffinmb 10y ago|0 comments
50.
by griffinmb 10y ago
Unless I'm misreading it, the t-shirt is internal only, and only for the team that specifically handled the issue.
51.
by griffinmb 10y ago
I believe that the real reason is that Webkit needs privileged APIs and unique executable memory regions for the jit. Giving third-party developers that access would make jailbreaking a simpler process.
52.
by griffinmb 10y ago
I don't think 'retained knowledge' is the best metric for deciding if a liberal arts education is worth it. A degree, particularly a liberal arts degree, seems (in my admittedly limited experience) to be geared towards honing
53.
by griffinmb 10y ago
He was working for "Defcon" or Blake Benthall (his roommate in the story). Defcon was running Silk Road 2.0 after the second "Dread Pirate Roberts" left. Blake had been working for SpaceX, and left to work on Silk Road.
54.
by griffinmb 10y ago
I tend to have issues with the web link on NY Times. Opening the article in incognito mode bypasses the paywall though.
55.
by griffinmb 10y ago
Rather, if you had a friend in North Korea and they told you about the domains, you WOULD be able to resolve them. Now that this has happened, you know all of the domain names and no longer need a friend in North Korea to tell you what they
56.
by griffinmb 10y ago
That's awesome, thank you.
57.
by griffinmb 10y ago
A virtual reality web is something I've been thinking about a lot lately. As in, how do we make the 'Metaverse' a reality. In particular, I've been thinking about how to best handle distributed identity/look. It&#x2
58.
by griffinmb 11y ago
I feel like this is partially correct. OB's peer-to-peer nature gives it the spirit of 'uncensorable,' in that no central authority can keep someone from making whatever listings they want. Though, individually, the shops are
59.
OpenBazaar is Open for Business(blog.openbazaar.org)
215 points by griffinmb 11y ago|36 comments
60.
by griffinmb 11y ago
If Spam Nation is accurate, spam is actually quite lucrative. The knock-off medications they're peddling often work just as well as the real thing and at a fraction of the cost.

More ›