jbaviat

8 ms·

31.
by jbaviat 8y ago
What was supposed to be a file disclosure turned into a remote code exécution.
32.
Amendment: Possible Remote Code Execution Exploit in Rails Action View(groups.google.com)
2 points by jbaviat 8y ago|1 comments
33.
OpenSSL 3 Strategic Architecture(openssl.org)
69 points by jbaviat 8y ago|20 comments
34.
by jbaviat 8y ago
Research paper about Angora was published here: http://web.cs.ucdavis.edu/~hchen/paper/chen2018angora.pdf
35.
Angora, mutation-based coverage guided fuzzer was open sourced(github.com)
10 points by jbaviat 8y ago|2 comments
36.
Logster and our error logging strategy at Discourse(samsaffron.com)
1 points by jbaviat 8y ago|0 comments
37.
Ask HN: What should I offer to my 2 years old to teach him logic?
1 points by jbaviat 8y ago|4 comments
38.
by jbaviat 8y ago
Let's assume I'm using Python 3.6. All my calls to os.urandom (such as uuid.uuid4) can block if my system's entropy goes down. Let's assume as an attacker, I can reduce the system's entropy up to making all calls to
39.
Ask HN: Blocking os.urandom calls in Python = 3.6
2 points by jbaviat 8y ago|4 comments
40.
Show HN: Open sourcing internal HR policies – starting with onboarding(medium.com)
5 points by jbaviat 8y ago|0 comments
41.
by jbaviat 8y ago
Being the first security engineer in a startup that already operates for a few months or even years can be quite daunting. Starting up security is hard. Starting security in a company that has already gathered a huge security debt is even h
42.
The First Security Engineer’s 100-day Checklist(sqreen.io)
2 points by jbaviat 8y ago|1 comments
43.
by jbaviat 8y ago
Paris | France | full-time | on-site | https://www.sqreen.io/ What is Sqreen? - Sqreen is a developer platform which detects security anomalies in web applications and provides automated responses and protection from attack
44.
The default OpenSSH key encryption is worse than plaintext(latacora.micro.blog)
1 points by jbaviat 8y ago|0 comments
45.
by jbaviat 8y ago
Hey Hacker News, I'm Jb the CTO and co-founder of Sqreen (YC W18). Privacy/status pages have become a standard on the web. But nothing is really made to answer to the increasing security concerns of users. In the SaaS world, some
46.
Show HN: An open source security page to easily integrate on your website(sqreen.io)
7 points by jbaviat 8y ago|2 comments
47.
The security model of WebAssembly(webassembly.org)
122 points by jbaviat 8y ago|27 comments
48.
by jbaviat 8y ago
Hey HN, I’m the co-founder and CTO of Sqreen (YC W18) [1]. After publishing the SaaS CTO Security Checklist 2 months ago [2], I’m excited today to share the DevOps security checklist with the HN community. With the “DevSecOps” movement, sec
49.
The DevOps Security Checklist(sqreen.io)
2 points by jbaviat 8y ago|1 comments
50.
by jbaviat 8y ago
I'm the author of https://github.com/sqreen/PyMiniRacer , used as example in this deck. I introduce how I leveraged ctypes + Python manylinux wheels (PEP513 / PEP571) in order to allow loading V8 easily into P
51.
Writing a Python C extension in 2018(speakerdeck.com)
6 points by jbaviat 8y ago|1 comments
52.
Firefox 60 Supports Web Authentication API and Same-Site Cookies(hacks.mozilla.org)
3 points by jbaviat 8y ago|0 comments
53.
Using Ruby idle time to perform GC(bugs.ruby-lang.org)
2 points by jbaviat 8y ago|0 comments
54.
by jbaviat 9y ago
As a former security researcher, I am amazed that integer overflows are still a thing in 2018, in the Ruby core - so probably everywhere... About 10 years ago, integer overflow vulnerabilities were trending in the security community. Plenty
55.
An in-depth look at CVE-2018-8878 or why integer overflows are still a thing(blog.sqreen.io)
3 points by jbaviat 9y ago|1 comments
56.
Managing database schema changes without downtime(samsaffron.com)
267 points by jbaviat 9y ago|51 comments
57.
by jbaviat 9y ago
I’m the CTO at Sqreen and I do love Matasano (cryptopals... awesome crypto challenge https://cryptopals.com/ ). Realistically, security audits or bug bounty are not doable in seed startups - where most of the time no one has
58.
Asyncio in Python: storing contextual information(blog.sqreen.io)
1 points by jbaviat 9y ago|0 comments
59.
Sqreen wants to become the IFTTT of web app security(techcrunch.com)
3 points by jbaviat 9y ago|0 comments
60.
TravisCI releasing more performant macOS builds in new data center(blog.travis-ci.com)
2 points by jbaviat 9y ago|0 comments

More ›