News for hackers. Stuff that matters.

Netsec

Netsec on Hacker News

A Gentle Introduction to XSS

Posted by Netsec on Tuesday March 31, 2015 @11:43AM
from the self-post dept.

I wrote this article as a simple, no-stress intro to one of the most common vulnerabilities on the web today, XSS (Cross-Site Scripting). I tried to gear it towards people who might have a smattering of web technologies under their belt, but aren't professional developers. http://bughunting.guide/a-gentle-introduction-to-cross-site-scripting-xss/I'd love to hear any suggestions for improving...

( Read More... | no comments | 2 points | on HN )
Re:Node.js reactions on Friday March 27, 2015 @04:37PM (#9278835)
Thought "another one of these..." but then laughed at the Ron Swanson / JSX reaction. I just couldn't help myself ;)

Ask HN: Are there any tools you don't use/support for ethical reasons?

Posted by Netsec on Friday March 27, 2015 @04:30PM
from the ask-hn dept.

Just wondering if anyone eschews something like the recent React Native release on the grounds of opposing Facebook corporate policy (on patents, press baronage, or what have you)?I will admit to using what I think are the best tools, even when I worry about where they're coming from. I'm split though if this is necessarily bad.Sure I'm supporting Facebook (who does bad things) but I'm also...

( Read More... | 14 comments | 10 points | on HN )
Re:Webcompat – Bug reporting for the internet on Friday March 27, 2015 @02:53PM (#9278324)
So report bugs... for free?

Why?

Re:Ask HN: What's a polite way to say “I'm not interested” after inter... on Friday March 27, 2015 @02:12PM (#9278058)
Thank you for that perspective! It's nice to know it's OK to calm down a bit!

Ask HN: What's a polite way to say “I'm not interested” after interviewing?

Posted by Netsec on Friday March 27, 2015 @01:46PM
from the ask-hn dept.

I'm interviewing right now as part of the job search and just passed a very in-depth and rigorous technical interview. The problem is, during my conversation with the lead dev and in the course of receiving direction, I just found... I really didn't like him. I also had problems with the stack and just am generally uninterested in the work as I've learned more about it through the interview...

( Read More... | 13 comments | 8 points | on HN )
Re:Ask HN: Does your work support your side projects? on Wednesday March 25, 2015 @07:19PM (#9266739)
Thanks for the correction! It's nice to know someone is doing it right.
Re:Obama has a $100M plan to fill the tech talent shortage on Monday March 09, 2015 @05:10PM (#9174096)
I feel like it's a combination of that and scarcity in a few, narrow fields (iOS/app dev, etc) but not a paucity of STEM people in general.
Re:Ask HN: Who wants to be hired? (March 2015) on Sunday March 01, 2015 @08:03PM (#9129731)
Location: Austin, TX

Remote: Open to remote

Willing to relocate: no

Technologies: Javascript, jQuery, Node, React, MEAN, HTML/CSS

Resume: https://drive.google.com/file/d/0By05iqHrOHzVcHJ4Q0ZpOF9QRGs...

Email: [email protected]

Re:Show HN: I wrote a book about getting started pentesting (50% off f... on Monday February 16, 2015 @07:20PM (#9059904)
Hi all. I wrote a book introducing the fundamentals of web application penetration testing, expressed in language I hope is friendly to coding hobbyists and beginners. I've written a few walkthroughs for basic vulnerabilities and plan to build it out with more vulnerabilities, tools, and extra resources (scripts, payload lists, etc).

I'd also like to offer all HNers half off. If you're curious and would like to get a taste of some of the content, visit http://bughunting.guide

Thanks HN!