ikisusi

5 ms·

1.
by ikisusi 2y ago
I hope that providers whose APIs responded and interacted fully over unencrypted HTTP would go back to their historical access logs and check how widespread using plaintext HTTP is. If they don't have access logs for their API then the
2.
by ikisusi 2y ago
I was suddenly much more afraid of widespread router takeover botnets with DNS MITMs re-emerging after stumbling on this. Started thinking about the cheer number of API traffic today combined with the realisation that some of it may be usin
3.
APIs Probably Shouldn't Redirect HTTP to HTTPS(jviide.iki.fi)
9 points by ikisusi 2y ago|1 comments
4.
by ikisusi 3y ago
There is a recent rule based python tool for doing DNS record based service dependency fingerprinting at https://github.com/joniumGit/dnsmule/ . It was written as part of a master's thesis work for OUSPG at Un
5.
by ikisusi 8y ago
Coincidentally Chrome 72 upgrade seems to break adblockers so that they can't block google analytics, and maybe other ads/tracking as well, if web page uses a service worker: https://news.ycombinator.com/item?id=19
6.
Web page service workers bypass ad-blockers after Chrome 72 upgrade?(twitter.com)
111 points by ikisusi 8y ago|51 comments
7.
Data breach monitoring for (multiple) emails(medium.com)
8 points by ikisusi 8y ago|0 comments
8.
by ikisusi 10y ago
There is a 30 seconds video based on 90 minutes of a collaborative experiment by 22 fuzzing practitioners. Aim was to write down couple of points about fuzzing state of the art. Video: https://www.youtube.com/watch?v=UrhRUKg