GICodeWarrior

7 ms·

1.
by GICodeWarrior 1mo ago
While not as good as a proper refresh, you can use alternating black and white drawing to help clear an area of the screen.
2.
by GICodeWarrior 6mo ago
ctrl+mouse wheel triggers the application zoom in most cases. However, if my mouse is over the scrollable node, it invokes the Google Chrome window zoom (so I end up with two competing zoom transforms). It also zooms relative to the upper
3.
by GICodeWarrior 1y ago
If you're interested to explore lots of XSS edge cases, I've found this CTF to be enjoyable. https://alf.nu/alert1
4.
by GICodeWarrior 1y ago
Encoding for each scenario can be quite complex unfortunately. Django does have some template filters to help. I recommend following the documentation carefully, and using a JSON API or other similarly standard mechanism if the documented
5.
by GICodeWarrior 1y ago
Simple JSON encoding alone is not sufficient if you put the output into a <script> tag. <script>const user_input = "</script><script>alert(1)//"; ...
6.
by GICodeWarrior 1y ago
The "How to use a Python variable in an external Javascript (Django)" examples are likely vulnerable to an XSS attack, when the variable contains user supplied content. It's important to output-encode for the correct context.
7.
by GICodeWarrior 2y ago
Further, security of a marketing site tends to be lower priority than the product itself, and an install script should generally be secured similar to the product.
8.
by GICodeWarrior 4y ago
How can ToolJet relicense AGPL contributions to a less restrictive license? The code is AGPL and accepts volunteer contributions under that license. https://github.com/ToolJet/ToolJet/blob/develop/CONTRIB
9.
by GICodeWarrior 4y ago
NPTv6 is different from IPv4 NAT and doesn't really have the same issues. A different solution I've seen proposed for networks with multiple ISPs is to advertise both public prefixes to the network and let each client endpoint fig
10.
by GICodeWarrior 4y ago
Have you implemented NPTv6 before? What routing product(s) have you implemented this with? Do you happen to have some documentation links handy? In my experience, this capability is missing from most off-the-shelf solutions, and in the ca
11.
by GICodeWarrior 4y ago
Here's a list of processors supporting AVX-512: https://ark.intel.com/content/www/us/en/ark/search/featurefi... The author mentions it's difficult to identify which features are suppo
12.
by GICodeWarrior 6y ago
If you put your webcam behind your video chat window, you can achieve better eye contact with your remote participants. I wonder how well a webcam can see through these screens and/or how much of a hole would be required in the render
13.
by GICodeWarrior 7y ago
When I saw "purebred" and "AKC", my mind immediately went to: The Bizarre Truth About Purebred Dogs (and Why Mutts Are Better) - Adam Ruins Everything https://www.youtube.com/watch?v=aCv10_WvGxo
14.
by GICodeWarrior 8y ago
DoorDash (YC S13) | Security Engineers | Mountain View, San Francisco | ONSITE, Full-Time | https://www.doordash.com/ We're looking for multiple application and infrastructure Security Engineers. If you have experienc
15.
by GICodeWarrior 9y ago
DoorDash (YC S13) | Security Engineer | San Francisco, Mountain View | ONSITE, Full-Time, https://www.doordash.com/ Formerly managing Matasano Security's south bay team, I've joined DoorDash as Head of Security to
16.
by GICodeWarrior 9y ago
DoorDash (YC S13) | Security Engineer | San Francisco, Mountain View | ONSITE, Full-Time, https://www.doordash.com/ Formerly at Matasano Security, I've joined DoorDash as Head of Security to build our internal security
17.
by GICodeWarrior 9y ago
The wording is technically imprecise in a number of places. The mechanical components certainly can't move at any significant fraction of c, but they may be referring to the electrical fly-by-wire signals controlling them. Still not p
18.
by GICodeWarrior 10y ago
The security of passwords at rest depends on how they are stored. Further, if an SSA database is dumped, passwords won't be the data exposure people are upset about.
19.
by GICodeWarrior 10y ago
What login rate-limiting, account lock-out, and password expiry policies do they have though? Based on the password requirements, they have something like 2.6 trillion possible passwords. If your account is locked out after 3 failed login
20.
by GICodeWarrior 10y ago
Most of these look like things I'd expect. However, number 13 is an obvious spam link if you look at the mentions. I wonder how HN protects against this type of spam and how this particular spam got through. The most recent mention wa
21.
by GICodeWarrior 10y ago
If you buy a business type router, a similar wireless AP, and some "smart" switches, you can actually segregate things pretty well. Examples: Ubiquiti EdgeRouter Lite https://www.ubnt.com/edgemax/edgerouter-li
22.
by GICodeWarrior 12y ago
It looks like they are using the Song typeface for simplified Chinese (宋体). Maybe they are using this to get square symbols instead of the usual rectangles of monospace. They could have used monospace with letter-spacing to make it square.
23.
by GICodeWarrior 12y ago
I would guess he is suggesting that less than 40% means you are over-spending or under-performing and more than 40% means you are under-spending (eg. you should invest more in growth).
24.
by GICodeWarrior 12y ago
What are the boundaries of those rights? Is it OK for your neighborhood to protest by sitting in your house? What about in supermarket checkout aisles? or on the interstate? These are just random examples, but in all these cases, they are
25.
by GICodeWarrior 12y ago
"freedom to protest is important in and of itself" That is your opinion, and while I agree with it, police exist to enforce laws (with discretion), not to promote or otherwise engage in discussions regarding civil liberties. I thi
26.
by GICodeWarrior 12y ago
I was hoping someone would post this. Too bad it hasn't been updated recently, but it had a good run.
27.
by GICodeWarrior 12y ago
This is one of those cases where browsers are different from the spec. (BTW, the spec you are looking for is here https://url.spec.whatwg.org/ ) It really depends on the browser. Here are a few test cases to consider. htt
28.
by GICodeWarrior 12y ago
While good advice, I suspect that isn't what's going on. My guess would be that the URL is being validated with code which relies on null-terminated strings, and it's being processed/executed with code that uses a separa
29.
by GICodeWarrior 12y ago
Sunnyvale, CA - Matasano Security [WILL RELOCATE] Matasano is an application security consulting firm. Our clients are the best companies --- and most of the largest of them. Our teams include some of the best researchers in the field. You
30.
by GICodeWarrior 12y ago
Are you suggesting the government compromised a trusted SSL CA? Or are you just saying they blocked HTTPS?

More ›