Viewing profile — finnigja

ruh roh... "no secure protocols supported", per https://www.ssllabs.com/ssltest/analyze.html?d=00f.net

> ... one common reason is that security engineers are shared across a large company and it may be very expensive for them to learn the different testing frameworks used on many di…

That particular structure hasn't really taken off, but the general idea of having unique-ish token formats that can be mapped back to a provider is becoming more popular. Trivy has…

I'm building an interactive, web-based Python tutorial site intended to help with learning basic syntax. Originally it was for my kids who wanted to learn to code, but... might be …

Another take on this I like is "radiating intent". Broadcast what you want to do, when you plan to do it, and give stakeholders space to explicitly object, rather than explicitly c…

Haven't look at that code for a while, but IIRC it does a simple HTTP request then checks the returned HTML for anything that looks like a v4 literal, eg. http://174.136.109.18 .

Not hard, just different. Maybe the "harder" bit is actually remembering any one address. My IPv6 connectivity tester at https://ready.chair6.net is still doing its thing, twelve y…

Built for my kids... might be useful for others? Intended for laptop/desktop use, not for mobile. Uses Pyodide to execute all the code in the user's browser. Content in the later s…

We love our quirky, slow 1993 Mitsubishi JB500 campervan ( https://www.instagram.com/finnthejb500/ ), but the experience is not for everyone. We were able to register it in Washing…

Notes, photos, and maps from a few days exploring around and over Mount Ngauruhoe, Tongariro, and Ruapehu.

Nope, not missing something.. it has been a problem for GitHub ( https://news.ycombinator.com/item?id=30348980 ) and others ( https://portswigger.net/daily-swig/urlscan-io-api-unwi…

https://chair6.net - occasional blog posts on various topics, powered by Pelican on an ARP Networks VPS

Mmm, Kenji's really good scrambled eggs are really good (and really quick) .. https://youtube.com/watch?v=CXTnq7srJRs .

Check out SafeStack, https://academy.safestack.io/safestack-courses/security-awar... .. they're one of the less-cringey, more-modern awareness options I've seen recently.

Just replace console.table with JSON.stringify for the quick-and-easy dump of exactly the same data as is in the table... JSON.stringify([...document.querySelectorAll('.fatitem tab…

For a different angle on cloud infrastructure visualization, check out Abridge ( https://abridge.io ). I'd love to get any feedback on the idea / site and even a trial, if you're i…

Haha, you're predicting the .. now. GitHub Advanced Security brings in code scanning (CodeQL), secret scanning, and more. https://github.blog/changelog/2020-05-06-github-advanced-s…

waves , original Bandit author here. It could've done more, but pretty cool to see how useful it's been and where it's got to.. OSS is fun.