Erling Ellingsen

@steike

ex-fb prodsec

Oslo, Norway
alf.nu
Dołączył sierpień 2008
10 zdjęć lub filmów Zdjęcia i filmy

Tweety

Zablokowano @steike

Czy na pewno chcesz zobaczyć te Tweety? Zobaczenie Tweetów nie odblokuje @steike

  1. Przypięty tweet
    23 lut 2017

    Make your own colliding PDFs:

    6 odpowiedzi 295 podanych dalej 280 polubionych
    Cofnij
  2. 9 sie 2018

    Ooh! On DOS, this was a much faster way to allocate space than writing zeros—but you would get whatever was on disk (so, random data from deleted files). This led to an early privacy panic when private data turned up inside the cache files of some online service client… Prodigy?

    I learnt about ✨file holes✨ on Unix!
    4 polubione
    Cofnij
  3. 22 maj 2018

    Someone should set up a meta-tags-as-a-service company that keeps track of all the new browser features and automatically opts your site out of the ones that create unnecessary attack vectors

    This is a bad idea.
    1 odpowiedź 2 podane dalej 6 polubionych
    Cofnij
  4. podał/a dalej
    3 kwi 2018

    Do I even want to know why Debian has a security update for beep(1) today?

    34 odpowiedzi 427 podanych dalej 1 073 polubione
    Cofnij
  5. 13 mar 2018

    This is so great. Also, to save some work: If you have a crazy hetereogenous setup, it's enough to automate the setup for one domain. You can CNAME _acme-challenge.[everything else] to that (once) and just serve all the TXT records from there (extra garbage is ignored)

    Let's Encrypt wildcard certificates and ACMEv2 are available today! More information can be found here:
    3 polubione
    Cofnij
  6. 16 lut 2018

    Online shopping is a lot easier when you take into account that (1) humans make systems (2) reliably comparing free-format street addresses is a difficult but unsexy problem

    1 podany dalej 5 polubionych
    Cofnij
  7. 7 sty 2017

    Posted four old browser bugs and a new one

    1 odpowiedź 36 podanych dalej 53 polubione
    Cofnij
  8. 24 lis 2016

    today

    Cofnij
  9. 24 lis 2016

    In progress. and are back up, soon.

    Any plans to revive ? I can't get it to work through .
    1 odpowiedź 1 podany dalej 9 polubionych
    Cofnij
  10. 28 sie 2016

    Oh hey, that's CVE-2011-3441! (except on iOS no extra tricks were needed, just 1.2.3.4%20.victim.㏄ and get cookies)

    Blogged again! Explaining same origin policy bypass in Firefox (CVE-2015-7188) thanks to quirk in IP address parsing
    1 podany dalej 3 polubione
    Cofnij
  11. 11 sie 2016

    It looks like the same solution should work in all the modern browsers with small modifications. This is surprising.

    W odpowiedzi do @steike
    And by the way - are you going to perhaps provide us with some hint for random4? ;)
    1 odpowiedź 1 polubiony
    Cofnij
  12. 3 sie 2016

    Had a bunch of alert(1)-to-win levels left over that weren't really security related. General ecmascript golf time!

    1 odpowiedź 14 podanych dalej 18 polubionych
    Cofnij
  13. 7 kwi 2016

    Is your entire domain 'X-Frame-Options: DENY', but not your error pages? Now's as good a time as any to fix it… (iframe UXSS in Safari)

    2 odpowiedzi 4 podane dalej 15 polubionych
    Cofnij
  14. 18 mar 2016

    We gave the whole internet keys so airport security won't break open your luggage. They do anyway. In other news, an FPGA dev kit is a bomb.

    1 podany dalej 3 polubione
    Cofnij
  15. 10 mar 2016

    "Can you please provide me the last 4 characters of the cPanel password to verify ownership of the account?" - cc :-)

    1 odpowiedź 1 polubiony
    Cofnij
  16. 7 lut 2016

    fin-fin wifi, men utløpt sertifikat på . Bonus om den kan bli synlig i DNS for de som bruker ⒏⒏⒏8 e.l

    1 odpowiedź
    Cofnij
  17. 15 gru 2015

    @Fridababy_HQ assuming you don't have an online phramacy seo side business, your web server is hacked

    Cofnij
  18. 5 paź 2015

    "Code cleanup and fixes"

    1 odpowiedź 2 podane dalej 1 polubiony
    Cofnij
  19. podał/a dalej
    10 wrz 2015

    Slides for my talk about FireEye:

    6 odpowiedzi 257 podanych dalej 168 polubionych
    Cofnij
  20. 22 cze 2015
    W odpowiedzi do

    @JamEngulfer221 Sort of. Each user gets a sandbox branch. Hmm, I guess there should be a way to request a merge...

    1 odpowiedź
    Cofnij

@steike nie wysyłał/a jeszcze żadnego Tweeta.

Wydaje się, że ładowanie zajmuje dużo czasu.

Twitter jest przeciążony lub wystąpił chwilowy problem. Spróbuj ponownie lub sprawdź status Twittera, aby uzyskać więcej informacji.

    Może Ci się też spodobać

    ·