Viewing profile — Sjoerd

What is the attack scenario here? Where are the security boundaries? How does the attacker gets their repository with a symlink in it to the victim? Is Helm typically run as a priv…

To compensate for the US emissions of CO2 equivalent, you would need to create in the order of 4 cubic kilometers of charcoal every year. You could cover the whole of California wi…

Do you have a link to that Yahoo publication? Or any more information on it?

I came to the same conclusion. Many string comparison implementations don't actually compare one character at a time. In one case strcmp seemed to compare eight characters at a tim…

This differs for different template engines. In Angular, for example, the template is parsed into a DOM tree, and then template variables are placed in the correct place. This make…

When doing symmetric encryption you usually need a nonce or IV, which is also sent to the other party along with the ciphertext and authentication tag. Why does the API for libsodi…

They aren't guessable, except for ULIDs generated by the same process in the same millisecond. To keep chronological order even within the same timestamp, ULIDs within generated wi…

I agree that landscaping choices could be more environmentally friendly. However, planting trees in yards will have a limited impact; if 1.2 trillion trees cancel a decade of CO2 e…

Such a thing is typically called a deterministic password manager. One problem with it is that you can't change the algorithm. If you want to change your PBKDF2 from 1000 to 5000 i…

You seem to seed the SecureRandom object with the current time. I think this reduces security and it would be better to omit the seed and let SecureRandom seed itself. It also look…

Token binding provides something like that. With token binding you have a private/public key pair for each site that supports it. An identifier is created from the public key and s…

It is currently unclear whether violating the terms of service is a crime: https://www.eff.org/deeplinks/2017/02/violating-terms-use-is...