tyleroderkirk

6 ms·

1. 1.▲
   by tyleroderkirk 12y ago

   The repo now contains a link to a POC. https://github.com/mubix/shellshocker-pocs/commit/43592293f9...
2. 2.▲
   by tyleroderkirk 12y ago

   that has now been fixed: https://github.com/draios/sysdig/pull/252
3. 3.▲
   How NSA/GCHQ might collect images from Yahoo Messenger webcam feeds(tyleroderkirk.github.io)

   15 points by tyleroderkirk 12y ago|0 comments
4. 4.▲
   by tyleroderkirk 15y ago

   Security-minded folks might be interested in the "clojail" sandboxing library ( https://github.com/cognitivedissonance/clojail/blob/master/s... ) that this webapp uses ( https://github.com/dbyrne/4clojure/blob/74f381701b62a12e2bfb... ). clo
5. 5.▲
   by tyleroderkirk 16y ago

   E.g. https://proxy1china.appspot.com
6. 6.▲
   by tyleroderkirk 16y ago

   Agreed. Web browsers are infamous for being vulnerable to remote attack - I want to keep my sensitive data away from them as much as possible. This concept of "host-proof hosting" seems to encourage that we discard well-proven methods in
7. 7.▲
   by tyleroderkirk 16y ago

   Most software-based security systems assume that the hardware hasn't been maliciously tampered with. cryp.sr is apparently no exception. If you suspect such attacks, the only defense seems to be adding more hardware. For example, you coul