Viewing profile — nbpoole

As far as I'm aware this is the first time I've been mentioned in a conspiracy theory. So thanks for that. :-)

Interesting: this sounds like a recurrence of the same issue which was described a number of months back: https://www.digitalocean.com/blog_posts/resolved-lvm-data-is... At the tim…

I think tptacek's point is that the answer to your question is spelled out very clearly on the page. ;-) From the page: > You should own Ferguson and Schneier’s follow-up, Cryptogr…

If that were true it would be a major security vulnerability. ;-) The Google Translate content is served up from a subdomain of googleusercontent.com. This is a domain designated b…

This was posted yesterday: https://news.ycombinator.com/item?id=6080048

Right. But your post shows that you can reliably get the browser to crash. It doesn't demonstrate that the crash is exploitable, unless I'm missing something.

Right. But I can very easily find reports of reliable ways to crash IE via CSS: https://www.google.com/search?q=crash+ie+css I don't have a problem with your blog post. It document…

Not sure why this is getting voted up so much. The author came across a report of IE freezing/crashing, replicated it, and Microsoft fixed it. In the same security update ( http://…

Luckily, this question has been asked and answered fairly recently! Specifically https://news.ycombinator.com/item?id=5955043 from last week, complete with a response from Matt Cut…

I believe that's how Rails works, except using an HMAC on the cookie instead of AES (since AES itself doesn't prevent tampering).

You can't just read cookies for arbitrary domains in an iframe.

Not in general, no. You can drop replay protection as a requirement and that gets you to actual statelessness. If you then have your website on a single domain and never put anythi…

"Stateless" CSRF protection as described here is strictly inferior to other forms of protection. The reasons are somewhat laid out in this blog post's comments: 1. JavaScript in an…

"This wouldn't happen if Yahoo had a Vulnerability Reward Program" As much as I support these kinds of programs ( https://nealpoole.com/blog/responsible-disclosure-programs/ ), tha…

I encountered the same problem on a site I run where I provide custom subdomains. The RFCs technically prohibit underscores but they appeared to work fine in the major browsers, wi…

Please don't presume to speak for me. I left Matasano because I was returning to school; I greatly enjoyed my time there and I keep in touch with everyone I worked with because the…

Hmm, a majority of passfree's account's submissions (20/25) appear to be for websecurify.com. Combined with the dismissal of Burp as "java madness," seems like a socketpuppet on be…

Ex-Matasano chiming in! ;-) I've been demonstrating web app security topics for the Intro to Security course at Brown University this semester. I've used Burp almost exclusively. I…

This is an (unfortunately) fairly common class of vulnerability. Many applications fall victim to this form of attack because they don't think to check signatures on binaries. Ther…

This reminds me of a post a few months back about Voyager 2, where NASA traced the issue back to a single bit flip (and fixed it!) Engineers successfully reset a computer onboard V…

The hosting companies I've used (eg: Linode, Dreamhost for smaller projects) all provide DNS services. I trust them to manage a DNS infrastructure more than I trust myself.

Some previous discussion on this issue (almost 2 years ago): http://news.ycombinator.com/item?id=2443710 I'll say the same thing I said then: As an anecdotal counterpoint, I'm an e…

Example: http://www.idontplaydarts.com/2010/07/mongodb-is-vulnerable-...