Viewing profile — michiel3

It actually looks like the company was OK with it. The disclosure timeline shows they were responsive and addressed the problem quickly when they were made aware of its existence.

That is correct. The reporter requested public disclosure after the report was closed. The bug automatically gets disclosed publicly 30 days after the report is closed, unless the …

"Introducing a bounty program for the most secure open source project on the planet, 0 CVEs in its 30+ year history! http://hackerone.com/msdos" - https://twitter.com/Hacker0x01/st…

Relevant blog post by Yahoo! from earlier this month: http://yahoodevelopers.tumblr.com/post/62953984019/so-im-the...

In the post he also describes that he now uses a new process which involves a computer that has never been connected to the internet and its sole purpose is encrypting and decrypti…

Why do you think 2GB free is no-where near enough? I know a lot of users that use Dropbox's free plan and are happily syncing and sharing. I use 7% of my 12 GB.

Remove all friends sounds malicious to me. Must say that I haven't tried the app myself.

For users with a Retina MBP: this version of Sublime Text supports Retina graphics on OS X Lion.

Yep, if you're blocking remote hosts to authenticate on 3306 (or any other port you're running mysqld on) you're safe. The attacking host can't authenticate itself, so it's unable …

There's not much on this topic yet. @securityerrata started tweeting about it and trying to find out more: https://twitter.com/securityerrata/status/210550374627676160 . Could be a…

If you're going to use a password manager, I would recommend 1Password or LastPass. Other tricks you can apply: - Use a different password on every website. To help you remember it…

This is probably a best practice you could learn yourself to implement every time you know for sure you don't want a GET/POST variable to be a hash/array. This can also prevent oth…

This won't help that much, because this means you can only visit the website with some authentication string, otherwise the browser will prompt for your credentials.

This technique is widely abused by phishers. Most browsers detect such phishing attacks and warn the user for it (see example in Safari 5). Firefox might do a better job on this su…