Erling Ellingsen

@steike

ex-fb prodsec

Oslo, Norway
alf.nu
2008年8月加入
10 個相片或影片 圖片與影片

推文

你已封鎖 @steike

你確定要查看這些推文嗎？查看推文並不會將 @steike 解除封鎖

  1. 釘選的推文
    2017年2月23日

    Make your own colliding PDFs:

    6 replies 295 則轉推 280 個喜歡
    還原
  2. 2018年8月9日

    Ooh! On DOS, this was a much faster way to allocate space than writing zeros—but you would get whatever was on disk (so, random data from deleted files). This led to an early privacy panic when private data turned up inside the cache files of some online service client… Prodigy?

    I learnt about ✨file holes✨ on Unix!
    4 個喜歡
    還原
  3. 2018年5月22日

    Someone should set up a meta-tags-as-a-service company that keeps track of all the new browser features and automatically opts your site out of the ones that create unnecessary attack vectors

    This is a bad idea.
    1 replies 2 則轉推 6 個喜歡
    還原
  4. 已轉推
    2018年4月3日

    Do I even want to know why Debian has a security update for beep(1) today?

    34 replies 427 則轉推 1,073 個喜歡
    還原
  5. 2018年3月13日

    This is so great. Also, to save some work: If you have a crazy hetereogenous setup, it's enough to automate the setup for one domain. You can CNAME _acme-challenge.[everything else] to that (once) and just serve all the TXT records from there (extra garbage is ignored)

    Let's Encrypt wildcard certificates and ACMEv2 are available today! More information can be found here:
    3 個喜歡
    還原
  6. 2018年2月16日

    Online shopping is a lot easier when you take into account that (1) humans make systems (2) reliably comparing free-format street addresses is a difficult but unsexy problem

    1 則轉推 5 個喜歡
    還原
  7. 2017年1月7日

    Posted four old browser bugs and a new one

    1 replies 36 則轉推 53 個喜歡
    還原
  8. 2016年11月24日

    today

    還原
  9. 2016年11月24日

    In progress. and are back up, soon.

    Any plans to revive ? I can't get it to work through .
    1 replies 1 則轉推 9 個喜歡
    還原
  10. 2016年8月28日

    Oh hey, that's CVE-2011-3441! (except on iOS no extra tricks were needed, just 1.2.3.4%20.victim.㏄ and get cookies)

    Blogged again! Explaining same origin policy bypass in Firefox (CVE-2015-7188) thanks to quirk in IP address parsing
    1 則轉推 3 個喜歡
    還原
  11. 2016年8月11日

    It looks like the same solution should work in all the modern browsers with small modifications. This is surprising.

    回覆給 @steike
    And by the way - are you going to perhaps provide us with some hint for random4? ;)
    1 replies 1 個喜歡
    還原
  12. 2016年8月3日

    Had a bunch of alert(1)-to-win levels left over that weren't really security related. General ecmascript golf time!

    1 replies 14 則轉推 18 個喜歡
    還原
  13. 2016年4月7日

    Is your entire domain 'X-Frame-Options: DENY', but not your error pages? Now's as good a time as any to fix it… (iframe UXSS in Safari)

    2 replies 4 則轉推 15 個喜歡
    還原
  14. 2016年3月18日

    We gave the whole internet keys so airport security won't break open your luggage. They do anyway. In other news, an FPGA dev kit is a bomb.

    1 則轉推 3 個喜歡
    還原
  15. 2016年3月10日

    "Can you please provide me the last 4 characters of the cPanel password to verify ownership of the account?" - cc :-)

    1 replies 1 個喜歡
    還原
  16. 2016年2月7日

    fin-fin wifi, men utløpt sertifikat på . Bonus om den kan bli synlig i DNS for de som bruker ⒏⒏⒏8 e.l

    1 replies
    還原
  17. 2015年12月15日

    @Fridababy_HQ assuming you don't have an online phramacy seo side business, your web server is hacked

    還原
  18. 2015年10月5日

    "Code cleanup and fixes"

    1 replies 2 則轉推 1 個喜歡
    還原
  19. 已轉推
    2015年9月10日

    Slides for my talk about FireEye:

    6 replies 257 則轉推 168 個喜歡
    還原
  20. 2015年6月22日
    回覆給

    @JamEngulfer221 Sort of. Each user gets a sandbox branch. Hmm, I guess there should be a way to request a merge...

    1 replies
    還原

@steike 尚未發表任何推文。

看來要一段時間讀取資料。

Twitter 可能已超出負載，或發生暫時性的小問題。請再試一次，或造訪 Twitter 狀態以取得更多資訊。

    你也可能也會喜歡

    ·