resonantcore

6 ms·

1.
Let's Re-Think Security Trade-Offs(paragonie.com)
4 points by resonantcore 11y ago|0 comments
2.
by resonantcore 12y ago
SEEKING WORK - Orlando, FL. United States. Remote. We are software consultants that focus on application security. Whereas security consultants usually do not have the bandwidth to take on developer roles and many developers usually do not
3.
Modern Defense Against CSRF Attacks(resonantcore.net)
5 points by resonantcore 12y ago|1 comments
4.
by resonantcore 12y ago
They disabled it server-side? What about the CA certificate in all these Lenovo users' trust stores that blackhats can now use to MITM with wild abandon?
5.
Building Secure Web Applications in PHP(resonantcore.net)
5 points by resonantcore 12y ago|2 comments
6.
Towards Simple and Flexible Access Controls(resonantcore.net)
2 points by resonantcore 12y ago|1 comments
7.
by resonantcore 12y ago
I have a question that I fear may be taken the wrong way: How does this affect people who only do business in the US?
8.
by resonantcore 12y ago
It's difficult to be surprised by this turn of events. It's in poor taste, in one sense, but overall it's the only appropriate response that a satirist magazine could take in the wake of this tragedy. Followers of Islam the w
9.
by resonantcore 12y ago
No it wasn't, that full sentence that was quoted had been there since before the first edit. You may not like what was said, but please do not engage in dishonesty.
10.
by resonantcore 12y ago
> Only on torrents, Comedy Central has tried to erase it from history. That's bizarre. A quick Google search led me to the full episode here: http://pollystreaming.com/South-Park-Season-5-Episode-3-Supe... I'm
11.
Harvard Law Prof: Requests for trigger warnings limit education about rape law(insidehighered.com)
3 points by resonantcore 12y ago|0 comments
12.
by resonantcore 12y ago
> I'd be more worried about opening myself to tor than some theorized attack on ssh ciphers. Most of the attacks launched on Tor aren't in the "remote takeover of the tor server via memory corruption" category, they h
13.
by resonantcore 12y ago
There aren't any, currently. These libraries are ripped from an in-house framework which has some tests already, but none for the classes we extracted. We created the tests folder in anticipation of actually writing some.
14.
by resonantcore 12y ago
TL;DR - it does everything PDO does (thanks to class inheritance) but also has some nice short-hand methods for getting jobs done quicker. DRY and KISS.
15.
Show HN: A “Write Less, Do More” DB Class Based on PDO [PHP](github.com)
4 points by resonantcore 12y ago|8 comments
16.
by resonantcore 12y ago
> It's to make sure the author doesn't get left in the dark just because they miss a mailing list digest line. I intended to address this with my comment here: > If he gets burned in the process, that's the price Scott
17.
by resonantcore 12y ago
Sure, that works. The point we were trying to make was merely, "Tor is not a magic bullet. It must be used wisely."
18.
by resonantcore 12y ago
> I'm left with the impression that your primary goal is that I publicize any vulnerability to other people, and the secondary goal is that I tell you. That is correct. If the world knows, then Scott will also be informed. > It s
19.
by resonantcore 12y ago
Tor doesn't necessarily help you. If you're accessing a system a certain way (i.e. accessing certain parts of an application), then your traffic abruptly stops and a Tor exit node IP picks back up, you're hosed.
20.
by resonantcore 12y ago
We look forward to TLS 1.2 support being the norm. (And then, hopefully, the ratification and adoption of TLS 1.3) A 50% adoption rate is excellent news. Still a long way to go, but that's worth toasting over.