Viewing profile — scottpiper

I live in SLC, and I saw one of these show up over a year ago. The location was about here: https://www.google.com/maps/place/40%C2%B047'58.0%22N+111%C2... It was a very well built…

Author here. Thank you. I haven't made the repo for this doc public, but the LaTeX setup is based on an older document of mine here: https://github.com/0xdabbad00/research/tree/mas…

Thank you for posting this, but doesn't "Show HN" mean you're linking to something you've made? I'm the creator of flaws.cloud

Fire this person immediately. Is it cool work? Sure. Is the person technically proficient and could find work elsewhere easily? Yes. Did they purposefully violate the policies put …

I live in Salt Lake City, Utah. I do AWS security consulting. I would love this. I've lived all over the US (Boulder, SF, Austin, DC, and more) and because I do remote work I can w…

From https://summitroute.com/blog/2017/01/07/news_summaries/ , some have already been mentioned. - Downclimb (my own), for weekly infosec news summaries: https://summitroute.com/bl…

I'm the creator if you have any questions.

Probably just at the end. My goal is disaster recovery (AWS disappears as a service to the world because an Amazon employee accidentally `rm -rf` everything, or my own admin `rm -r…

I'm the author of the blog post in question (and have no idea why HN won't let me reply to the original post). For some clarity here, the "untrusted" third party is Google, whom I …

These are both accurate. For 1, I ensure that an attacker can not modify my archives after they've been uploaded by giving the backup service "put" only privileges. This is not pos…

If you're doing backups for your business, I've written on how to properly encrypt backups[1] and how to use Google Compute Engine for backups[2]. I'm working on write-ups for AWS …

For static analysis to check for best practices, there aren't any free tools that come to mind that give you easily digestible info without usually doing some manual reversing and …

Assuming the program has no vulnerabilities, these will do nothing. They are mitigations for memory corruption vulns, such as buffer overflows and use-after-frees. Sanitizing input…

I'm the author if you have any questions

http://highscalability.com/ - For news related to building large web apps and software. https://summitroute.com/blog/ - (mine) Infosec news. http://ben-evans.com/#newsletter - Emai…

And go:linkname, go:nointerface, and go:nowritebarrier You can see the lexer for these here: https://github.com/golang/go/blob/88c08b06b97296e41fc3069f4a...

An important consideration when deciding if it is a good alternative is how good is it's security and ability to keep you anonymous? Since that's the whole point of using it anyway…