Viewing profile — ulldma

Hey! I’m one of the authors of this blog post. We (the GitHub Security Lab) developed an open-source AI-framework that supports security researchers in discovering vulnerabilities.…

The relevant part being: "But it has become so dire that large industrial companies are buying washing machines in order to rip out the chips and repurpose them, according to ASML …

Well, Microsoft often uses suspicious looking URLs for their services. E.g. Office/OneDrive connects to hosts like "oneclient.sfx.ms" and "auth.gfx.ms". So as a user you have to tr…

>Signed HTTP Exchanges (or SXG) enables loading Web contents signed by the content publishers from anywhere, e.g. from a fast server, as if they came from the original publishers. …

I don't like this comparison of death toll numbers. At the same time I think the death toll of 9/11 is unfortunately much higher as an alarmingly big number of first responders wer…

I think the project is really needed, but I'm not sure it's quite ready yet. The OpenJDK 10 build shows 25 November 2017 as it's build date and is Linux and macOS only.

And their iOS bug bounty program is invitation-only.

Yes, this is important: Maven Central/Sonatype only checks if the submitted artifacts are signed (regardless of the used key). The work is shifted to client, but there's currently …

Small typo in the title: should probably be GNU (not GUN).

They state that those two character domains are reserved, but it looks like they're authorized by ICANN to release these domains (Since 04 August 2015): https://www.icann.org/sites…