jbaviat

13 ms·

91.
by jbaviat 10y ago
Issue came from dynect.net: $ dig +trace github.com ; <<>> DiG 9.8.3-P1 <<>> +trace github.com [...] ;; Received 488 bytes from 192.228.79.201#53(192.228.79.201) in 154 ms github.com. 172800 IN NS ns
92.
The two most common vulnerabilities in Rails (with code)(blog.sqreen.io)
1 points by jbaviat 10y ago|0 comments
93.
by jbaviat 10y ago
Sqreen - https://www.sqreen.io | Full-time Onsite developers | Engineering team in Paris (France) Sqreen's mission is to provide robust security layer to help developers protect their web applications against weaknesses. We
94.
by jbaviat 10y ago
And server side rendering :)
95.
by jbaviat 10y ago
It seems quite straightforward to me if you use: 1. the C# example from React doc, https://facebook.github.io/react/docs/environments.html 2. The BabelJS example from PyMiniRacer: https://github.com&#x2
96.
by jbaviat 10y ago
The PyMiniRacer repository is also bundled with a BabelJS ( https://babeljs.io/ ) example: https://github.com/sqreen/PyMiniRacer/blob/master/helpers/ba... You can easily try it once P
97.
by jbaviat 10y ago
One of PyMiniRacer author speaking. Use cases are many. For instance, Rails uses ExecJS to minify assets, to compile JavaScript assets from ES6 to older JS runtimes using Babel, for compiling CoffeeScript... In another world - and that&#x27
98.
Show HN: Minimal, modern embedded V8 for Python(github.com)
30 points by jbaviat 10y ago|8 comments
99.
by jbaviat 10y ago
Sqreen - https://www.sqreen.io | Full-time Onsite developers | Engineering team in Paris (France) Sqreen's mission is to provide robust security layer to help developers protect their web applications against weaknesses. We
100.
by jbaviat 10y ago
We have been running Sqreen production on ECS since October 2015, and we have been pretty happy about it the whole time. Of course ECS was very minimal at the beginning, then many stuff improved, allowing for easier deploy, easier logging,
101.
Releasing Open Source Sentry(blog.getsentry.com)
4 points by jbaviat 10y ago|0 comments
102.
Integrating Content Security Policy into Your Rails Applications(blog.sqreen.io)
4 points by jbaviat 10y ago|0 comments
103.
by jbaviat 10y ago
Sqreen - https://www.sqreen.io | Full-time Onsite developers | Engineering team in Paris (France) Sqreen's mission is to provide robust security layer to help developers protect their web applications against weaknesses. We
104.
by jbaviat 10y ago
The Notary framework from Docker allows to securely distribute binary content. That would benefit many services... https://github.com/docker/notary
105.
Show HN: Display real-life CSP reports in development(github.com)
5 points by jbaviat 10y ago|0 comments
106.
by jbaviat 10y ago
Quite unusual to see so low level code in C++11 - what about some Ruby ;) ? https://github.com/jjyg/metasm/blob/master/samples/pe-hook.r...
107.
by jbaviat 10y ago
Interesting. The security facet of the rules turns it into some kind of HIDS (host intrusion detection system) - I would be curious to see the level of verbosity this get when scaling across hundreds of containers. From what I get you also
108.
Firefox v46+ Security Hardening(github.com)
10 points by jbaviat 10y ago|5 comments
109.
App Security is just a Git flow (with built-in conflicts)(speakerdeck.com)
2 points by jbaviat 10y ago|0 comments
110.
by jbaviat 10y ago
Having done similar pentests on similar applications during my previous jobs, you can imagine the level of security many editors have on the pair (client app, server). And we are talking here about a banking application: banks have always b
111.
by jbaviat 10y ago
The mother of all web vulns - yet I don't recall of much SQL injections in the show, this may land in season 2 ;) Anyway, if you want a reliable SQL injection protection, I suggest you try Sqreen ( https://sqreen.io ) - PHP s
112.
by jbaviat 10y ago
Glad to learn Nitrokey has ECC support, even if only 256 bits.
113.
by jbaviat 10y ago
Hi Munin, What you did with McSema was really impressive and I’m glad discussing with one of the authors! I get the point you regret using LLVM, it seemed to me to be the best choice since LLVM has wide instruction semantics implementations
114.
by jbaviat 10y ago
It depends on what you are looking to achieve. If you take a look to e.g. McSema https://github.com/trailofbits/mcsema , these guys have been able to use LLVM to transform assembly back to LLVM intermediate representati
115.
by jbaviat 10y ago
Great work. Therefore that's one more disassembler in the wide. Some of the great open source ones, reverse oriented, that I have been able to test are: Metasm: https://github.com/jjyg/metasm/ Radare: http:&
116.
by jbaviat 10y ago
An open-source equivalent to VirusTotal, built for scaling, is IRMA by Quarkslab. http://irma.quarkslab.com/
117.
by jbaviat 10y ago
Our Python stack is Python 2.7 on old Apache2 / mod_wsgi, with Flask. We may soon turn to Nginx / Gunicorn. No Gevent so far.
118.
by jbaviat 10y ago
The (truly amazing) lcamtuf blog post you are referring to is this one: http://lcamtuf.blogspot.fr/2014/11/pulling-jpegs-out-of-thin...
119.
by jbaviat 10y ago
He is, which is a concern about the project's livability!
120.
by jbaviat 10y ago
And that's something that you can use as a JavaScript engine in Rails, thanks to ExecJS ( https://github.com/rails/execjs ) and Duktape.rb ( https://github.com/judofyr/duktape.rb ).

More ›