Viewing profile — samuirai

Funny that you mention "storage vendors". In Germany we have to pay a fee as compensation on storage like USB sticks, because it is potentially used to store copyright material. It…

Funny that you mention "storage vendors". In Germany we have to pay a fee as compensation on storage like USB sticks, because it is potentially used to store copyright material. It…

The usenix paper you linked is from the langsec people

> Several hours later, Google star vulnerability researcher Tavis Ormandy tweets(!) an embarrassing drive-by RCE in Aviator. This bug was reported many months ago (though at that p…

Am I stupid or is this guy calling a XSS "Arbitrary Code Execution"? It also seems to be a self-xss (a XSS on his account profile, which only he can see). How can you write so much…

Imo it's a very good thing that they have to spend a lot of time researching. Along the way they will see and learn many different things and in the end provides experience. Thus I…

> I don't really know if it will be useful in the future. But it's already fun to look over code...

That it's so interesting. A lot of people said that to me. But to me it felt more natural to highlight old code. Probably because I had this bias in the back of my mind that old co…

I didn't want to make it look that way. The color indication is without any judgment. It's just interesting how code evolved over time. In fact you should reverse the color gradien…

related: Great thoughts about "WHAT ACCESSIBILITY HAS TO DO WITH SECURITY" by Anna Shubina: https://www.youtube.com/watch?v=6phwEoiqLTM

can you show me an example. Because I can't think of one.

Still don't get it