News for hackers. Stuff that matters.

internetwache

internetwache on Hacker News

Re:Finding an arbitrary file upload vulnerability in a filesharing script on Saturday May 13, 2017 @08:57PM (#14333725)
Hi,

thanks for commenting!

I had cronjobs in mind, but as you said, they are not writeable.

I also thought about uploading a .py file with an import's name, but wouldn't that require a __init__.py (in a subdirectory?) to be regarded as a valid module/import by python?

Ask HN: What keyboard layout (for programming) are you using?

Posted by internetwache on Friday December 02, 2016 @07:46PM
from the ask-hn dept.

Hi HackerNews, I'm currently using a german laptop keyboard and I've been playing with the idea of replacing it with a UK/US keyboard.I've asked some friends about this I got mixed answers:- Buy a german keyboard and use stickers (more keys)- Buy a UK keyboard (bigger enter key)- Buy a US keyboard (better key arrangement)In all three cases I'd have to relearn/retrain my muscle memory, but I...

( Read More... | 3 comments | 2 points | on HN )
Re:Show HN: Get encrypted data from people that don’t know how to encrypt on Wednesday October 19, 2016 @07:02AM (#12742699)
Not sure if I understood it correctly, but in essence it lets your users enter some (secret) content which is then encrypted in the browser using PGP.

Except for the message signing and auto-emailing, I've implemented something similar:

Blogpost: https://0day.work/easy-pgp-composer-encrypting-pgp-messages-...

GitHub: https://github.com/gehaxelt/PHP-Easy-PGP-Composer

Demo: http://pgpcomposer.demo.0day.work/

Re:Hacking with LaTeX on Thursday March 10, 2016 @08:43AM (#11259107)
The abbreviations are defined with the `\def` in the same code snippet. So that aren't typos, but a way to build latex commands like `\immediate` by breaking it up in multiple parts.
Re:Scanning Alexa's Top 1M for AXFR on Sunday March 29, 2015 @06:02PM (#9286641)
Yeah, you're right. We've updated the blogpost.

Thanks!

Re:Scanning Alexa's Top 1M for AXFR on Sunday March 29, 2015 @02:34PM (#9285910)
Hi,

that's another good point!

Thanks for bringing it up.

Re:Scanning Alexa's Top 1M for AXFR on Sunday March 29, 2015 @02:32PM (#9285902)
Hi, thanks for the feedback!

We thought about putting some "example fixes/configurations" into the blogpost, but then abandoned the idea, because there are a lot of different DNS servers out there.

Only covering a few didn't seem useful to us.

So thank you for giving an example configuration for BIND :)

Older »