Yik Yak’s HTTPS communication for iOS is actually fine […] so what’s the problem? […] The vulnerability begins in the fact that Yik Yak’s sole means of user identification is one string; the userID. There are no passwords. […] Yik Yak, like many apps, does not only communicate with its own server API. It makes …
The State of JavaScript in 2015
The JavaScript world seems to be entering a crisis of churn rate. Frameworks and technologies are being pushed out and burned through at an unsustainable speed. But I think the community will adapt and adopt new practices in response. Developers will move, I believe, from monolithic frameworks like Angular.js and Ember to a ‘pick n …
Crossbeat – Uprising
CROSSBEAT (Ghent, Belgium) is a musical collaboration between Sherien Holail, Frederik Van Melle and Dries Merre. Their music emphasizes deep hypnotizing basslines and vivid percussion, accompanied by atmospheric synthesizers as well as analogue instruments. Quite digging this one! The EP featuring this track is recommended. Crossbeat →
It’s All About Time: Timing attacks in PHP
$query = "SELECT * FROM users WHERE id = ?"; $stmt = $pdo->prepare($query); $stmt->execute([$_POST[‘id’]]); $user = $stmt->fetchObject(); if ($user && password_verify($_POST[‘password’], $user->password)) { return true; } return false; There is information leak here: If you try different user names, it will take a different amount of time depending on if the username is there or …
Continue reading “It’s All About Time: Timing attacks in PHP”
Why Programmers Work at Night
Now this sounds really familiar: Keep staring at a bright source of light in the evening and your sleep cycle gets delayed. You forget to be tired until 3am. Then you wake up at 11am and when the evening rolls around you simply aren’t tired because hey, you’ve only been up since 11am! Given enough …
Migrating your WordPress website from HTTP to HTTPS
In light of #https2015 I flipped the switch on bram.us earlier today: from today forth bram.us is only accessible over HTTPS. If you run a news site, or any site at all, we’d like to issue a friendly challenge to you. Make a commitment to have your site fully on HTTPS by the end of …
Continue reading “Migrating your WordPress website from HTTP to HTTPS”
Sublime Text Git Plugin
Frameless – A fullscreen browser for iOS 8
JavaScript I/O (io.js)
Node.js, a popular and influential tool for building and running modern internet services, has split in two. Late yesterday, some of its primary developers “forked” this open source project, creating a new version of the tool they call Io.js. The group was unhappy with the stewardship of Node’s official sponsor, cloud computing company Joyent, so …