jt3

5 ms·

1.
by jt3 8y ago
Would anyone want to support a third party which audits popular dependencies, and digitally signs off after being reviewed? I currently audit source code for private companies, would be cool to pivot and focus on open source projects. Feel
2.
by jt3 8y ago
Users may wish to log out sooner than 30 minutes too.
3.
by jt3 8y ago
Would be bad if a DoS attack could occur by killing the chip at a certain date or on command. Imagine electronic devices going down, and only way to fix is to get new hardware...ouch. Maybe this will open up more manufacturing jobs in the U
4.
by jt3 8y ago
Being an application security consultant, I see this stuff a lot unfortunately. Just takes a missing authorization check on the feature, then you got the keys to the kingdom.
5.
by jt3 8y ago
See https://talonvoice.com for an extensible open source alternative to voice code. The creator/main developer is a friend of mine and is one of the smartest people I know. The project can be used to control IDA for reverse
6.
by jt3 8y ago
You can have more than one running at the same time?
7.
by jt3 8y ago
“I’ve had several authors find their own software and thank me for preserving it. One author even apologized for the copy protection. He understood it was a “necessary evil” at the time, but he was so glad that someone had finally bothered
8.
by jt3 8y ago
Disclaimer: I’m a security engineering consultant, focusing on code review. I’ve been writing software for 15+ years. Industry knowledge and following trends is useful. Following CVEs reveal problem areas in software. Some industries or ent