jerematasno

6 ms·

1. 31.▲
   by jerematasno 12y ago

   Note that the associated whitepaper discusses using Cydia -- specifically cycript -- to do the same thing.
2. 32.▲
   by jerematasno 12y ago

   I'm going to have to disagree. Any programming language where string comparison works "normally" for everything except for certain magic string values is Wrong. Like, I see where they're going with it, but it's prob
3. 33.▲
   by jerematasno 12y ago

   Wow, the level of crazy there is very high. Up until today I thought that PHP was fine, but nobody should ever use it for anything remotely real. You have changed my mind. We must kill PHP with fire.
4. 34.▲
   by jerematasno 12y ago

   Link is four oh four, but I assume you're talking about a string comparison timing attack? Those don't really work over a network on modern hardware. Most string comparison functions actually compare words (8 bytes), and string co
5. 35.▲
   by jerematasno 12y ago

   Best answer is to apply! We do some coaching at the start of the process and work with you to figure out how to get where you need to be. Some folks get through the process in a couple weeks, some take a couple years. Less good (but easier)
6. 36.▲
   by jerematasno 12y ago

   AppSec dorks. Not an appsec dork? Want to be? We'll help you get there (then give you a job).