Viewing profile — jt3

Would anyone want to support a third party which audits popular dependencies, and digitally signs off after being reviewed? I currently audit source code for private companies, wou…

Users may wish to log out sooner than 30 minutes too.

Would be bad if a DoS attack could occur by killing the chip at a certain date or on command. Imagine electronic devices going down, and only way to fix is to get new hardware...ou…

Being an application security consultant, I see this stuff a lot unfortunately. Just takes a missing authorization check on the feature, then you got the keys to the kingdom.

See https://talonvoice.com for an extensible open source alternative to voice code. The creator/main developer is a friend of mine and is one of the smartest people I know. The pro…

You can have more than one running at the same time?

“I’ve had several authors find their own software and thank me for preserving it. One author even apologized for the copy protection. He understood it was a “necessary evil” at the…

Disclaimer: I’m a security engineering consultant, focusing on code review. I’ve been writing software for 15+ years. Industry knowledge and following trends is useful. Following C…