Shamiq

That's neat -- similar to a short squeeze.

Yea, I'm thinking about cases similar to HTTP parameter pollution, and what the program expectations are. You'd be right to argue environment variables should not be user controlled. :)

Will need to double check some machines to make sure these two don't bite me:

On Unix systems the environment variables SSL_CERT_FILE and SSL_CERT_DIR can now be used to override the system default locations for the SSL certificate file and SSL certificate files directory, respectively.

The os/exec package now prevents child processes from being created with any duplicate environment variables. If Cmd.Env contains duplicate environment keys, only the last value in the slice for each duplicate key is used.

triplebyte mentions taking a particular problem from CtCI and solving it within 30min on a whiteboard (pen/paper, plaintext editor).

The email address field in your user form isn't public. you need to add it to text in your description.

dang, this is excellent. thank you so much :)

oh, I scrolled down and only saw the purchase option.

I don't have access to the full article, but the premise is interesting. at what transaction volume would I be better of running my own fgpa hardware?

Awesome project! This is a step in the right direction for better access management.

hah -- i found the same result with gofmt, golint, and go vet

That could be a decent hack to get started. Ideally, I'd like for it to be a feature of hackerone et al, assuming security@ as a service providers become the point of interaction with the external security community.

oh, i know -- i got spoiled working at matasano where we'd usually get the first crack.