samuirai
Joined 14 years ago
Karma
165
Submissions
28
Member since
Jun 14
www.smrrd.de
View on Hacker NewsRecent submissions
Comment · 11 years ago
Funny that you mention "storage vendors". In Germany we have to pay a fee as compensation on storage like USB sticks, because it is potentially used to store copyright material. It's outrageous.
http://www.geek.com/news/germany-increases-usb-flash-drive-t...
Comment · 11 years ago
The usenix paper you linked is from the langsec people
Comment · 11 years ago
> Several hours later, Google star vulnerability researcher Tavis Ormandy tweets(!) an embarrassing drive-by RCE in Aviator.
This bug was reported many months ago (though at that point it wasn't clear that it was actually a RCE). see:
> In early 2014, the "Error138" is reported and disclosed first time.
Comment · 12 years ago
Am I stupid or is this guy calling a XSS "Arbitrary Code Execution"?
It also seems to be a self-xss (a XSS on his account profile, which only he can see).
How can you write so much text and be unclear about what you are doing? No wonder Paypal didn't understand anything.
Comment · 12 years ago
Imo it's a very good thing that they have to spend a lot of time researching. Along the way they will see and learn many different things and in the end provides experience. Thus I agree with _almosnow.
Comment · 12 years ago
> I don't really know if it will be useful in the future. But it's already fun to look over code...