chriseng
-
@ @ That was the point. I'm not saying "fix b/c it's exploitable," I'm saying "fix just in case it's exploitable."
9:37 AM Nov 21st
from UberTwitter
in reply to jeremiahg
-
(Veracoders named Chris)++
3:02 PM Nov 20th
from TweetDeck
-
Oh lovely, porn spam via Twitter @ replies.
9:03 AM Nov 20th
from TweetDeck
-
@ I agree crash bugs are not nearly as black and white as that.
9:01 AM Nov 20th
from TweetDeck
in reply to dinodaizovi
-
@ ...flaw than take 5 minutes to replace their stupid ad-hoc query with a prepared statement.
8:59 AM Nov 20th
from TweetDeck
in reply to dinodaizovi
-
@ In the static analysis world, I often run into situations where someone would rather argue for an hour about a SQL injection...
8:59 AM Nov 20th
from TweetDeck
in reply to dinodaizovi
-
@ Versus spending time arguing about it, THEN developing repros, finding cause, ranking, and fixing?
8:51 AM Nov 20th
from TweetDeck
in reply to dinodaizovi
-
@ @ Yes, design bugs should be considered separately. Most security vulnerabilites are implementation bugs though.
8:42 AM Nov 20th
from TweetDeck
in reply to arj
-
@ There will come a time when software developers realize it takes less time to patch the bug than argue about exploitability.
8:37 AM Nov 20th
from TweetDeck
in reply to dinodaizovi
-
Seriously? Apache, by default, will treat a file ending in .php.jpg as an executable .php file? That is retarded.
11:46 AM Nov 19th
from TweetDeck
-
@ So far, red is in the lead with 100% of the poll responses. :P
11:05 AM Nov 19th
from TweetDeck
in reply to Nanette
-
Unscientific poll: Which Java/CIL obfuscators do you use or encounter most in real-world applications?
10:47 AM Nov 19th
from TweetDeck
-
@ it looks great, nice job!
9:38 AM Nov 19th
from UberTwitter
in reply to ikonoklasm
-
Fedora 12 fail... "Local users get to play root?" Email thread: ; Bug report: (SIGH)
7:35 AM Nov 19th
from TweetDeck
-
RT @: I guess I didn't realize that penetration testing was an immature, reckless juvenile delinquent. So glad it's "growing up". > +1
7:27 AM Nov 19th
from TweetDeck
-
@ congrats!
10:24 AM Nov 18th
from UberTwitter
in reply to adamjodonnell
-
RT @: ONS, Brazil's nat. power grid operator, website vuln to SQLi - "How To Hack A Brazilian Power Company"
9:15 AM Nov 18th
from TweetDeck
-
@ ok, how in the world do you keep winning all these contests?!
9:13 AM Nov 18th
from TweetDeck
in reply to kealan10
-
@ oh, I thought you were referring to @'s comment :)
5:28 PM Nov 17th
from UberTwitter
in reply to ryanaraine
-
@ Are you saying you find it useful? To me it is slow IRC plus pictures. How often do I really need to embed a poll or a map?
4:39 PM Nov 17th
from TweetDeck
in reply to ryanaraine
|
- Name Chris Eng
- Location Boston, MA
- Bio Information security guy, proud father, Cal sports fan, carnivore
|
