Viewing profile — xnyhps

Will modern clients warn loudly if a server suddenly stops offering channel binding? Otherwise it is trivial to downgrade.

I don't mind XML personally, but I understand why people dislike it. For XMPP specifically you have to use a streaming XML parser, which is quite a bit more complicated than the mo…

I think Apple doesn’t want third-party developers to compose their own sandboxing rules, because it’s pretty hard to do that in a way that can’t be escaped and that doesn’t break A…

If I remember correctly, the last thing I was working on was actually trying to see if GraphHopper performs better! I think I was either still trying to compile it or load a local …

I’ve been playing around with a similar project and it surprised me how hard map matching actually is. I’ve also been using OSRM, but no matter how I tweak the settings, it never g…

The colored and animated logging parts are from pwntools ( https://docs.pwntools.com/en/stable/ ).

The HTTP and XMPP traffic is encrypted using TLS. The proxies were used to decrypt, log and re-encrypt this traffic in real-time.

To add to this: there are two different types of Data Vaults. For locations such as ~/Pictures, ~/Documents, Calendars, Contacts, etc. a permission prompt is triggered if an app tr…

The macOS version installs itself before you give it permission to install: https://twitter.com/xnyhps/status/1149630190877696001?s=21 . It is basically malware.

In The Netherlands there are Veiligheidsregio's ("Safety regions", areas where the emergency services work together) which make changes to OSM to improve the routing for emergency …

Last time I looked at it, none of the routers for OSM were good at routing over areas in OSM. For example, when planning a route on foot over a large square, the route often follow…

Similarly, MySQL Connector/J also used to attempt to deserialize binary data that looked like a serialized Java object (CVE-2017-3523). Doing this with untrusted data can often be …

> Heap buffer overflow in the network stack allowed for sending ICMP packets that would crash devices. It's not receiving an ICMP packet that causes the crash, it's when sending an…

That depends on the country. You lose Dutch citizenship if you have dual citizenship and don't live in The Netherlands or renew your passport in 10 years.

I'm still wondering how to deal with password changes in that scheme. If you change the salt, you reveal the existence of that account and the fact that the password changed. But k…

> Legacy protocols such as FTP and IMAP don't have that luxury, though. There's no way to run a password stretching function on the client. IMAP uses SASL, which can do client-side…

SHA-2017 had a really cool badge: https://wiki.sha2017.org/w/Projects:Badge . 2.9" e-paper display, ESP32, 1000mAh LiPo battery and firmware with an online "app store" supporting a…

The affected certificate as confirmed by Comodo: https://crt.sh/?q=278968925 . Note that it wasn't logged until about 2 hours ago. CT logging will become mandatory at some point, b…

I highly doubt anyone will be able to answer this, but I'm curious if this law would also apply to iOS apps. Of course, copyright on an app can't have expired, but it could be deve…

That one is even more malicious, it uploads contents of your ~/.bash_history and system profile. But at least it notifies you afterwards...

I think github.io is a good example of where this can be very useful. Users have a lot of control over the content of their pages, but it is undesirable to allow them to get a cert…