Viewing profile — zemnmez

a few of my writeups discuss ways of doing this: appleid https://zemnmez.medium.com/how-to-hack-apple-id-f3cc9b483a41 steam https://hackerone.com/reports/409850

i think what's being conflated here is that there are reasonably buyers for this kind of vulnerability but there's no market in the truest sense. I think a correctly connected indi…

I apologise for my "but, actually...": Analogue clocks like the face of big ben are not like digital displays, and whether they "show seconds" in the context of the meaning of this…

OIDC+OAuth is what most people actually want when they think of OAuth imo. The main issue here is that OAuth was not designed as an authentication protocol.

No, Google actually runs a remote web IDE called Cider. The latest version is derived from VSCode.

check the zerodium pricelist for a general guide: https://zerodium.com/program.html

This is absolutely because NK doesn't want to pay market rate for 0days.

in the uk, most pay tax by an even simpler method, Pay as You Earn (PAYE). the taxes are all filed by the employer, and the online website allows taxpayers to add anything else

Before the layoffs I worked on a security checks team (“ISE Hardening”) at Google. Google requires for almost all projects that code is physically imported into the SCS; when this …

I think this is what WhiteSource does. (it's also apparently called Mend now)

I want to second this. The top StackOverflow comment for protecting against XSS in PHP still recommends htmlspecialchars() https://stackoverflow.com/questions/1996122/how-to-preven…

I think this kind of gets to the point of what protobuf is, and what a lot of tech is like at Google in general. I spent a lot of my career believing elegance and expressiveness wa…

wanted to correct this one: I confused Barbados with Jamaica here. Barbados is a republic. I am sure its laws still use the term "the crown", but it looks like it uses the term "Pu…

“the crown” is an idea stemming from english constitutional law representing “the state”, i.e. the legal entity constituting the country. It doesn’t have a lot to do with the physi…

Surely this is a question of supply and demand and if a 4 day workweek is the legally cheap and good path supported by governments in the same way the 5 day workweek is, the compet…

The logic here is somewhat sound. VSCode does sanitize by default, but Jupyter notebooks effectively need to run Python code on your machine to work. At that point (this is the mea…

First-party (i.e. Google). Tricked in the sense I was asked to do a security assessment and didn't check what differential changes had been made edit: correct!

I have been looking for something like this for so long!

I can personally attest to the fact that yes, british citizens can assess vulnerabilities in UK government systems. This was something I worked with the UKNCSC on: https://www.ncsc…

david is one of the smartest people I've ever worked with at Google. It's good to see him here :)

Vary has no effect on the cors preflight cache: https://stackoverflow.com/questions/42848208/cors-preflight-...

if you can query the DB directly from the frontend, what’s the security model? what prevents me from pulling sensitive data, passwords etc?

Access-Control-Max-Age has, unfortunately a big security caveat which is that it is cached on a per-endpoint basis. Because Access-Control-Allow-Origin only allows one origin speci…

> Make something that works with with HTML and CSS alone, and enhance it with JS. Hydration is... an automated system to do this? Am I missing something

i’m not really sure what you mean. most of these products are indeed reverse-proxies, but reverse proxies do not sit in front of the whole internet, just corporate services