Tales of SugarCRM Security Horrors
This is the personal website of Egidio Romano, a very curious guy from Sicily, Italy. He's a computer security enthusiast, particularly addicted to webapp security.
The latest blog posts to take off on Hacker News. 4,763 posts.
This is the personal website of Egidio Romano, a very curious guy from Sicily, Italy. He's a computer security enthusiast, particularly addicted to webapp security.
This blog post started last August when I was integrating the Spectator PercentileTimer concept into the metrics library in Rend so we could get better cross-fleet latency percentiles.
Fully reproducible builds are important because they bridge the gap between auditable open source and convenient binary artifacts. Technologies like TUF and Binary Transparency provide accountability for what binaries are shipped to users, but that’s of limited utility if there is no way (short of reverse engineering)…
This post is an attempt to reduce the number of times I need to explain things in Stack Overflow comments. You may well be reading it via a link from Stack Overflow – I intend to refer to thi…
Gil Vegliach's blog
The SSH port is 22. This is the story of how it got that port number. And practical configuration instructions.
Today I landed yet another small change to libcurl internals that further reduces the number of small mallocs we do. This time the generic linked list functions got converted to become malloc-less (the way linked list functions should behave, really). Instrument mallocs I started out my quest a few weeks ago by…
There is a subreddit /r/nononoyes for videos of things that look like they’ll go horribly wrong, but amazingly turn out ok.
FOR IMMACULATE RELEASE. Announcing the opening of NJAL.LA
I asked Kottke.org readers if they had ever seen, heard, or read something on the web that literally changed their lives. Fourteen people said no. Sixteen said
This is a post describing my involvement with the Debian GNU/Linux port for RISC-V (unofficial and not endorsed by Debian at the moment) and announcing the availability of the repository (still very much WIP) with packages built for this architecture. If not interested in the story but you want to check the…
There’s better ways to do this already built into HTTP.
Researcher at Intel
Lazy kids. Whatever happened to hard work? A sure sign of my descent into senility is bitchin’ and moanin’ about “kids these days,” and how they won’t or can’t d…
The CRTC today released the final chapter (for now) in its net neutrality governance framework, creating policy that establishes strong safeguards against net neutrality violations and severely restricts the ability for providers to engage in zero rating practices. When combined with the federal government's clear…
I considered removing comments from the blog after looking into Disqus load-time behaviour and seeing what it was imposing on visitors.
A guide to create programming languages presenting an organized list of selected articles, books, tutorials, and tools on designing languages and compilers.
This musical robot consists of a high quality Ludwig snare drum automated with 13 beaters hitting different spots of the membrane from the inside. Two solenoid driven drum sticks, mounted externally, take care of the rimshots. Of course, all beaters have a precise and wide range velocity control. The snares can be…
Seattle-based Amazon is doubling down on AI for AWS and the ecosystem around its AI assistant, Alexa. It's seeking to become the central provider for AI-as-a-service. But it's not leaving retail behind either, running grocery, book, and convenience stores across the US.
THIS POST MOVED TO MY NEW BLOG AT https://blog.phor.net/how-to-zero-day-a-bank