gose1

6 ms·

1. 1.▲
   by gose1 1y ago

   > Safely Writing GitHub Workflows If you are looking for ways to identify common (and uncommon) vulnerabilities in Action workflows, last month GitHub shipped support for workflow security analysis in CodeQL and GitHub Code Scanning (fre
2. 2.▲
   GitHub's Bug Bounty Workflow(githubengineering.com)

   5 points by gose1 10y ago|0 comments
3. 3.▲
   by gose1 10y ago

   Policies set via meta tags can only be made subsequently more restrictive: https://w3c.github.io/webappsec-csp/#multiple-policies .
4. 4.▲
   by gose1 11y ago

   https://cryptdown.eu/view/23mz2dmpdq5co - password: lolz and this is why we don't like crypto in the browser...
5. 5.▲
   by gose1 13y ago

   Nice, here is the current progress of my Silvia / PID monitoring: http://i.imgur.com/mis4L.png . I'm using Arduino + TC4 shield for PID and interfacing w/ thermocouples, SSR, and opto-isolators (for front pane
6. 6.▲
   by gose1 14y ago

   Also, using sha1_hex(secret+...) and calling it HMAC is a slippery slope (see http://netifera.com/research/flickr_api_signature_forgery.pd... ). Although it's seemingly not exploitable due to the structure of the data, look into using a pr