Viewing profile — Shamiq

That's neat -- similar to a short squeeze.

Yea, I'm thinking about cases similar to HTTP parameter pollution, and what the program expectations are. You'd be right to argue environment variables should not be user controlle…

Will need to double check some machines to make sure these two don't bite me: On Unix systems the environment variables SSL_CERT_FILE and SSL_CERT_DIR can now be used to override t…

https://www.udacity.com/start-mentoring

Not that far off: https://en.wikipedia.org/wiki/Life_expectancy#/media/File:Li...

triplebyte mentions taking a particular problem from CtCI and solving it within 30min on a whiteboard (pen/paper, plaintext editor).

The email address field in your user form isn't public. you need to add it to text in your description.

dang, this is excellent. thank you so much :)

oh, I scrolled down and only saw the purchase option.

I don't have access to the full article, but the premise is interesting. at what transaction volume would I be better of running my own fgpa hardware?

Awesome project! This is a step in the right direction for better access management.

hah -- i found the same result with gofmt, golint, and go vet

That could be a decent hack to get started. Ideally, I'd like for it to be a feature of hackerone et al, assuming security@ as a service providers become the point of interaction w…

oh, i know -- i got spoiled working at matasano where we'd usually get the first crack.

I would love a Marauder's Map for bug bounty programs: Show me who is working on what, where they're finding bugs, and help me identify where I can most efficiently spend my time. …

I'm color blind, and the charts you use are unintelligible to me.

Congrats on the launch! Why the choice to build on Kubernetes?

Just stick it up on medium for the time being. you can always figure out a 'real' blog later :). Alternative is using github pages with something like jekyll.

You've got a point there, but I'd ask why not remove the packages that aren't being used? Here's some of the raw data about which system libraries are lagging in security patches: …

Cool idea -- I'll go get the golf clubs! We'd love to be at the point where Patchwork notifications are ahead of public releases, and get you patched before the vulnerability is wi…

Sure thing! The service pivots around machines as it's core pilar. On a more fundamental level, we consider a machine to be the set of unique packages tracked together. So for your…

Great idea! We're looking to build out and extend a callback API so you can have it post data to whichever end point you want. Some integrations I've been toying with are: alerts i…