Viewing profile — coekie

Yes indeed. A nice surprise to stumble upon my old blog post again here. I don't think much has changed since then, most of the problems are still there in newer Java versions. And…

No, that must have been something different. It would be possible to extend what FlowTracker does to also find SQL (or other) injection vulnerabilities. So it's possible the tool y…

Thanks. As I was developing FlowTracker, a lot of the work was driven by making tracking of specific example programs work. I knew what result I was aiming for, but it was hard to …

FlowTracker, a Java agent that tracks data flowing through Java programs. It helps you understand where any program got its output from, what it means, and why it wrote it. Watch t…

I just added solutions to the empty String challenge in the blog post. This includes a very interesting find from Xavier Cooney, that causes the same problem without involving any …

> The reality is that it's permitted to do all these things Yes, given the code in the String class, the JVM is allowed to execute it in this way. I'm not claiming that is wrong, I…

Author of the blog here. Yes, this is a bug. While the javadoc doesn't state it explicitly, immutable classes in the core library are expected to be thread safe. Java tries to be a…

You can see what IP it uses to send requests to google using https://captcha.nsa.gov/search?q=what+is+my+ip