Viewing profile — lillesvin

I had a throwaway Reddit account get banned from a local subreddit because I used an em-dash when asking: "Do you have an alternative to Facebook — e.g. a mailing list?" The mods' …

I just meant the SQLi (which is the basis of the chain), not the full chain.

I feel like I've seen plenty of non-AI, pre-2020 SAST tools catch SQLis like the one mentioned here, and if nothing else, then a code review ought to catch it. Is WordPress not usi…

As much as I like cross-platform stuff, I also really like native UIs that follow native UX patterns, etc.

That's the claim, yes. Has any proof been made available yet? (Genuinely asking here because I haven't been paying that close attention.)

There have been millions of trivially exploitable vulnerabilities out there for decades — many of which could be easily discovered by using simple scanning tools or manual probing.…

> [...] for everyday use, it wastes precious seconds [...] You should probably try the Ian Knot then: https://www.fieggen.com/shoelace/ianknot.htm (good video demo here: https://yo…

> Anyone know of a password manager that can encrypte and live in say Google drive? Can't most of the many KeePass variants do that?

I didn't mean to detract from your tool. Sorry if it came off like that. More options is more better. :)

If you're not afraid of working in a CLI, ImageMagick is also a very solid tool for editing lots and lots of images in bulk as long as you know what you want done to them.

Indeed it was. > [...] users forked Songbird and created a Windows, Mac, and Linux compatible derivative under the name Nightingale. [Source: https://en.wikipedia.org/wiki/Songbird…

Even your fancy guitar is not exempt from harmonics math. TFA has nothing to do with the quality of a guitar and everything to do with 12-Tone Equal Temperament.

> The difficult part of language is the fact we can build entirely novel meanings out of a relatively small finite set of words. So are you saying that we've got e.g. neurolinguist…

I obviously don't know your background but out of the linguists that I know and have met while doing my degrees in linguistics, I don't know of anyone who would say that the kiki-b…

> But no serious linguist thinks that kiki-bouba is that important to language. Do you have a source on that? Because I would expect anyone studying sound symbolism to find the bou…

> Firefox is not an alternative; audio does not work for me. I could recompile it but compiling firefox is a pain in the ... Obviously I don't have any data backing me up here, but…

Aristophanes was such a troll. I can only recommend reading some of his plays, like The Assemblywomen (where this word is from), The Wasps, and The Clouds. They're almost 2500 year…

Searchable snapshots in Elasticsearch can be backed by S3 and they perform very well. No need to store the data on hot nodes any longer than it takes for the index to do a rollover…

What kind of storage do you have backing your Elasticsearch? And how have you configured sharding and phase rollover in your indices? I work with a cluster that holds 500+ TB logs …

Do I read it right, that ARTEMIS required a not insignificant amount of hints in order to identify the same vulnerabilities that the human testers found? (P. 7 of the PDF.)

Just to mention an alternative option, ZAP (aka. Zed Attack Proxy) covers much of the same ground as Burp and is entirely free and Open Source.

Come on, just stop. "They" have been used to refer to singular antecedents since the 14th century. (Source: https://www.oed.com/discover/a-brief-history-of-singular-the... )

But neither does the actual server. HMAC only verifies that the message is from whoever it claims to be from and that it is intact. It won't know what you intended the body of the …

Ah, my bad. Sorry. But couldn't you then just make the call to an echo service (like HTTPbin) or simply dump the request when you send it?

But the returned signed string will be an HMAC-SHA256 hash, won't it? Then there's not going to be any '\n' or '\\n's in there. Only thing you'll be able to tell is if it matches y…