HNHacker News
TopNewBestAskShowJobs

attheodo

489 karma · joined May 8, 2011

Senior iOS Engineer, Node.js, Python, UX/UI. Mom says he's a really good boy.
submissionscomments
attheodo··on Apple Quality and Customer Service Fail
I am sorry to say this, but I don't see any "fail" here my friend. The only "fail" thing is that you cracked the screen of your iPad. You can't do that and expect any good out of it..
attheodo··on The Conscience of a Hacker
Phrack, even after the official crew gave up contributing to it, is an exceptional archive of deep and highly technical programming techniques (and more). I highly recommend to everyone to just go through some of the issues and read some papers.
attheodo··on Make the Metric system the standard in the United States
Metric system is way more understandable and easy to mentally manipulate. The only good argument against standardizing it, is people are used to it for many years. But so were my grandparents with our country's currency before we switched to Euro. There's an awkward "bootcamp" period where you just convert every unit to the old one just to get the feeling of the "quantity" but after a couple of months the new units feel normal.
attheodo··on Smashing The Stack For Fun And Profit
Being one of the really classics, this papers is now too old and the techniques almost obsolete (non-executable stacks etc)
attheodo··on Masonry, infinite scrolling and Django
Maybe add some sort of visual hint on Tindie to show that new content is being loaded. It takes sometime to load the new chunk and someone might think there's nothing more to see down there.
attheodo··on Ask HN: What helps you produce code faster?
On the contrary, for me complete silence, dead-minimal desk and a piece of paper and a pen seem to work much better. I take programming as a serious task, I need to be 100% focused.
attheodo··on Ask HN: Learning to write good JavaScript
I can also recommend Javascript Patterns and Javascript Web Applications by O'Reilly. They're both solid books.
attheodo··on Ask HN: How do you learn to develop exploits?
Also one thing I forgot. I used to enjoy wargames back in the day.. that is preconfigured buggy blackbox services that you have to exploit in order to progress to the next level. Vortex and PullThePlug used to be some of the really good ones. If someone wants to learn how to exploit software, these games are a really good start.
attheodo··on Ask HN: How do you learn to develop exploits?
Ideally you have to master a low level language like C, socket programming and assembly on various architectures. You can somehow get away with a scripting language like perl or python and drop-in shellcodes but I suggest you do it the hard way.

You can start reading the classics (although most of them not applicable today) like Smashing the Stack for fun and profit by Aleph One, 7350 (teso security group) papers on format-string exploitations as well as various other techniques on heap-over flow techniques, double free()'s etc. A very good book for all round exploitation with some advanced techniques is "The Shellcoders Handbook" which I highly recommend. The Phrack magazine (before the editing team changed) has some really juicy techniques on exploiting various platforms.

Other than that, you should browse through A LOT of source code trying to identify bugs in open source software and subscribe to various security bulletins so you can read advisories and try to exploit them. GDB is your best friend for that job since analyzing core files is the beginning of everything.

Finally you should get involved in security communities (the more under the ground they are, the better) and attend security cons (HAL, Defcon, CCC).

I used to do some heavy exploit writing back in high-school and I can tell you it's really REALLY fun but time-consuming and frustrating sometimes. Exploiting software is a form of puzzle solving.

attheodo··on Ask HN: What would you work on, if money was of no concern?
I'd paint all day and play the blues on my Les Paul! A really creative and joyful way of spending time.
attheodo··on We are sorry
This is a welcoming move from Path. However, "industry standard firewall technology" is gibberish.
attheodo··on Hetzner introduces new server product with insane parameters for 59 EUR/mth
We use EX4 from Hetzner along with Amazon's Cloudfront for static files and we're REALLY REALLY satisfied.
attheodo··on Angry Birds on Chrome
same for me :P
← PreviousPage 2 of 2