njbooher

6 ms·

1.
by njbooher 2y ago
As someone who does security testing for video game service backends, I benefit significantly from all the reverse engineering and tools the hobbyists and cheaters build, and always enjoy reading more stuff.
2.
by njbooher 2y ago
I found this comment funny. Have an upvote. But finding a critical security issue on Cloudflare in 2020 while doing testing for one of your customers, and then learning what the bounty for breaking that large of a chunk of the internet was,
3.
by njbooher 2y ago
I don't think there'd be consumer confusion if they sold it as an 80 year lease for $60. Maybe backlash.
4.
by njbooher 2y ago
Why would we as a society make the most effective class of painkillers illegal as a response to the bad actions of one company? (Pre-edit: Why would we make a highly effective class of severe painkillers illegal because of one bad actor?)
5.
by njbooher 2y ago
It'd be nice if they could give me a compelling reason to upgrade my computer more than once or twice a decade, other than 'Our new AI computers have keyboards that go to 11'.
6.
by njbooher 2y ago
BSides, BlackHat, and DEFCON happen yearly on the same week in August in Las Vegas, and many people attend more than one. I would be happy if the location or date of all 3 changed. The peak temperature outside was around 110° all week this
7.
by njbooher 3y ago
This whole thing read like a sociopath selecting for people they can exploit.
8.
by njbooher 3y ago
Most people don't live in California.
9.
by njbooher 3y ago
I started using one most of the time this year, but I couldn't remember if bottle refill stations are prevalent on the strip.
10.
by njbooher 3y ago
I'm waiting for my plane to takeoff for Vegas now (weather delay). There's a 32 pack of water in my free checked bag for this reason.
11.
by njbooher 4y ago
Employees typically depend on their salaries to pay for necessary living expenses. If they lose their job, they need to get another one, or they'll eventually go broke. Any CEO making $10M/yr would only need to work for a year bef
12.
by njbooher 4y ago
Software security has already been turned into gig work. https://en.wikipedia.org/wiki/Bug_bounty_program Some people make a living off it. Most don't.
13.
by njbooher 4y ago
https://catalog.iastate.edu/collegeofengineering/softwareeng...
14.
by njbooher 4y ago
I agree. I was envisioning that after we shipped the people who don't like teaching off to national labs that the universities would just focus on teaching and could pay those people better.
15.
by njbooher 4y ago
Those are term faculty. They typically aren't paid well.
16.
by njbooher 4y ago
But are being paid by tuition revenue, from people who expect them to teach. The US needs more national labs for people who want to do research but don't want to teach.
17.
by njbooher 4y ago
Plenty of new faculty are more interested in research than teaching too.
18.
by njbooher 4y ago
I don't work in this space anymore, but just want to say kseq (and the rest of klib) is such an awesome time saver. Thank you.
19.
by njbooher 4y ago
The way people communicate verbally often reflects the way they think, which differs between people. Writing forces people to structure their thoughts more. Also, efficient communication requires knowing what your audience already knows.
20.
by njbooher 4y ago
https://bugguide.net/
21.
by njbooher 4y ago
Incidence of audits per 1000 returns filed by poor people is (13.0/2.6)=5x the incidence of audits per 1000 returns filed by non-poor people.
22.
by njbooher 5y ago
Reading the comments to decide if you want to read the article is also a valid workflow. Although anyone doing that (me included) isn't entitled to complain about quotes not having enough context.
23.
by njbooher 5y ago
They pay, eventually. They're particularly slow for game client exploits. Much quicker for server-side issues.
24.
by njbooher 6y ago
Yeah, I don't envy you. Finding loopholes is more fun than trying to account for everything upfront.
25.
by njbooher 6y ago
Once upon a time: https://njbooher.github.io/blog/cloudflare-workers-ip-spoofi...
26.
by njbooher 6y ago
GitHub will pay you to write new rules for this. https://securitylab.github.com/bounties
27.
by njbooher 8y ago
There's enough stuff in it already.
28.
by njbooher 8y ago
The makers of Drush, the cli for Drupal, subscribed to your line of thinking in the early versions and inventory items were defined in PHP files. Migrating from that will be interesting.
29.
by njbooher 8y ago
I left the game in 2015, but even then third generation sequencing could close bacterial genomes for < $1k. Long reads make it trivial to detect all sorts of stuff (sample mixup, contamination, phage activity, in vitro evolution) that go
30.
by njbooher 8y ago
Any paper that generates or analyzes draft genomes is a waste of money.

More ›