Nice writeup of the attack on GitHub: http://blog.erratasec.com/2015/04/pin-pointing-chinas-attack-against.html#.VRye4mK9KK0 …
"The poor, misunderstood innerText" http://perfectionkills.com/the-poor-misunderstood-innerText/ … Differences between innerText and textContent.
http://com.google is funny until you
remember ICANN is selling out their core mission to enable crap like that.
Or from GitHub's POV, how else can you use this XSS? Example: Open a new window with
info on howto subvert particular censorship. What else?
More GitHub DDoS details: http://www.netresec.com/?page=Blog&month=2015-03&post=China%27s-Man-on-the-Side-Attack-on-GitHub … Wouldn't it be safer for attacker to load DDoS victim's
content via img than script tag?
Pastebin single-payment lifetime accounts on sale. Check out
pastebin's greatest hits: http://pastebin.com/trends/all
NSA's Backdoor Key from Lotus Notes http://www.cypherspace.org/adam/hacks/lotus-nsa-key.html …
For the second time today, I've added a new feature to Fiddler only to
discover it was already there.
http://pastebin.com/BH6Ec9Zk "That's 64 bits
against the cracker, 40 bits for the government." HT @csoghoian
1. House 2. Dressed as house 3. Listening to house 4. Rendition of Brick House 5.
While painting house 6. Onto House http://boingboing.net/2015/03/30/deep-deep-deep-deep-deep-deep.html …
Faust: I want to XSS everyone! Devil: Sign here… Faust: Oh no, GitHub server's can't
handle the traffic! ♪ Twilight zone theme ♪
Any more technical details on the GitHub DDOS beyond this http://insight-labs.org/?p=1682 for the curious?
Prisoner escapes by faking an email ordering his release http://boingboing.net/2015/03/28/prisoner-escapes-by-faking-an.html … pic.twitter.com/Adlz0ImH9g
How Punch-Out save game passwords work, including bugs http://tomorrowcorporation.com/posts/retro-game-internals-punch-out-passwords …
Anyone know why Chrome percent-encodes single quote in URI query? http://jsfiddle.net/unLrqxso/1/ Its a reserved char so encoding changes URI.
Hilarious dev's Tinder bot woman proxies male suitors' messages to one another.
http://www.theverge.com/2015/3/25/8277743/tinder-hack-bros-swiping-bros … Sitcom misunderstanding generator.
@waxpancake Just make Waxy automagically
switch over if you don’t post anything manually for N days.
"The best cyber film of the year!" -- Which year? Every year. #HackThePlanet #BeKindRewind pic.twitter.com/ZNCigxXgds
Cool Creative Commons limited edition shirt made of Noun Project images - http://creativecommons.org/weblog/entry/45224 … @creativecommons. Just ordered mine!
Some rights reserved