calebbrown

12 mesi fadiscuss

Apart from Python Wheels, the other popular ecosystems using zip files are Java jar files, and NuGet.

Of these Java is the most interesting as there a few JDKs commonly in use.

But I’m also interested in various security scanners that are built in other languages that can be fooled.

calebbrown

4 anni fadiscuss

Thanks!

`--privileged` is needed to run the container inside a container.

e.g. https://www.docker.com/blog/docker-can-now-run-within-docker...

This is particularly useful for using Kubernetes to manage a cluster of instances.

calebbrown

4 anni fadiscuss

Author here.

It's running a Podman container (like Docker but daemon-less) with a GVisor runtime for isolation inside the docker container.

The outer container is privileged, but doesn't run any attacker controlled code.

But, yeah, seeing those two strings together in the same command is certainly amusing.

calebbrown

8 anni fadiscuss

Dinorwig Power Station in the UK pumps water to store 9.1Gwh https://en.wikipedia.org/wiki/Dinorwig_Power_Station

calebbrown

9 anni fadiscuss

Doesn't cover perfect forward secrecy (PFS).

Without PFS if the server's private key was stolen (e.g. by hacking the server) then all traffic sniffed in the past could be decrypted.

See: https://en.wikipedia.org/wiki/Forward_secrecy

calebbrown

10 anni fadiscuss

That website was frustrating.

- splash page that has to load the background video before you can do anything.

- you have to start watching the video on the splash page to skip it.

- horizontal navigation in the about page.

- clicking the obscure "here we go!" back link in the about page has to reload the video before you can do anything.

It looks really nice, but the interaction is incredibly slow and cumbersome.

calebbrown

15 anni fadiscuss

I think apps are popular because they are more concrete than the web.

A user knows where an app starts and ends and they know what icon they need to touch to get there.

Websites are far more ethereal and it isn't as clear when you've left one site and landed on another. And it's much harder remembering how to get there.

Case in point: how many people type 'facebook' into google and click the first link instead of entering 'www.facebook.com' into the address bar.

calebbrown

Submissions

Introducing an Open Source Repository of Malicious Package Reports

Project Zero Discloses Use-After-Free 0-Day in Android

comments