jupenur

9 ms·

31.
by jupenur 9y ago
In Finland, most online stores allow you to pay for your shopping directly using your online bank. The way it works is the online store calls the bank's e-payment API, which in turn lets the user authenticate using their normal online
32.
by jupenur 10y ago
Jetpack/SDK still isn't fully E10s compatible, see https://developer.mozilla.org/en-US/Add-ons/SDK/Guides/Multi...
33.
by jupenur 10y ago
The current Firefox extension platform is a mess. There are XUL add-ons, Jetpack add-ons, and SDK add-ons, nothing is fully compatible with E10s, and to say the security features are lacking would be an understatement. The Chrome platform o
34.
by jupenur 10y ago
Not any time soon. They're aiming for maximum compatibility with Chrome extensions, and Chrome doesn't have anything like that, so I wouldn't expect it to be a priority in Firefox either.
35.
by jupenur 10y ago
Yes, there already is. Firefox enforces the same manifest permissions in WebExtensions as Chrome.
36.
Pwning your antivirus, part 3: the UXSS that wouldn't die(d.igi.tl)
2 points by jupenur 10y ago|0 comments
37.
by jupenur 10y ago
Wolfram|Alpha does this pretty well, although they moved the step-by-step solver to the paid version quite a while ago and I've only tried the early free version. They also have an extensive knowledge base and other resources that make
38.
by jupenur 10y ago
> Ping doesn't look to be in the HTML5 spec anymore Interesting, I didn't know that. And now that I look at it, ping is only supported in Chrome and Opera, which explains it even better. I would still expect there to be some
39.
by jupenur 10y ago
Is there a reason to do something like this using a bounce address? I mean, that's what at least all the big players seem to be doing, but couldn't you just as well use something like A PING [1] or some sort of Ajax pingback? Ther
40.
by jupenur 10y ago
An interesting little detail about the authors: https://www.fbi.gov/wanted/cyber/iranian-ddos-attacks
41.
by jupenur 10y ago
I'm not sure you know what "critical" means—this bug definitely isn't it—but you should probably report it to Telegram instead of posting on HN. You claim you couldn't find a way to do that, but they have a security
42.
by jupenur 10y ago
> Unless you've used cookies with the HttpOnly flag XSS trivially escalates to session stealing Then again you could just use CSP and mitigate almost 100% of those XSS cases. Yes, even most of the stored ones. And with JWT + JavaScr
43.
by jupenur 10y ago
MH370 was March 8 Malaysian time but March 7 UTC.
44.
Pwning your antivirus, part 2: even your Mac isn't SAFE(d.igi.tl)
4 points by jupenur 10y ago|0 comments
45.
by jupenur 11y ago
Didn't Uber just hire Chris Valasek and Charlie Miller (famous for the Jeep hack) a few months ago? Based on that I would have expected them to be at least half-serious about security. Or was that just for PR?
46.
by jupenur 11y ago
You can use CSP to prevent content exfiltration as well, not just script execution. There's a number of directives suited for that: img-src, form-action, child-src, etc. Full list on MDN: https://developer.mozilla.org/e
47.
by jupenur 11y ago
Start by learning the basics. If you don't know how to code, that's probably a good place to start. Learn about web applications and network protocols. Learn the basics of Linux and Windows system administration. Read some books,
48.
Hacker Plans to Dump Alleged Details of 20,000 FBI, 9,000 DHS Employees(motherboard.vice.com)
3 points by jupenur 11y ago|0 comments
49.
Pwning your antivirus, part 1: fun with Avast RPC calls(d.igi.tl)
6 points by jupenur 11y ago|0 comments
50.
Finland's First basic income hackathon(twitter.com)
1 points by jupenur 11y ago|0 comments
51.
by jupenur 11y ago
Like with ARC? https://developer.chrome.com/apps/getstarted_arc
52.
X-XSS-Nightmare: 1; Mode=attack XSS Attacks Exploiting XSS Filter(slideshare.net)
1 points by jupenur 11y ago|0 comments
53.
by jupenur 11y ago
Here [1] is the BMO ticket tracking this. I guess the main reason it hasn't been implemented is that there have been several issues with other browsers' implementations, as mentioned in the bug ticket. And every now and then, a ne
54.
by jupenur 11y ago
Based on the next paragraph, a typo of XXE, or XML External Entities.