dnet

You can use SSLH and other similar software to multiplex HTTPS and SSH (along with a few other protocols) on the same port, so if 443/TCP is allowed, you can just use SSH.

Done:

- https://github.com/gioblu/PJON/issues/12

- https://github.com/gioblu/PJON/issues/13

I see that it uses Wiring, but I'd be interested what the minimum requirements are for a compatible implementation. For example, would it be possible to implement it without some serious bit hacking on an ATtiny? (For example, ATtiny2313 has 128 bytes of RAM -- bytes, not kilobytes.) I see that the source code has plenty of comments, but a specification be much more readable in a separate Markdown file or (GitHub) wiki page.

Exrex does the same in Python and much more:

   - Generating all matching strings
   - Generating a random matching string
   - Counting the number of matching strings
   - Simplification of regular expressions

https://github.com/asciimoo/exrex (AGPL licensed)

Same Origin Policy would prevent AJAX requests, CSRF attacks thus usually use hidden forms -- window.open achieves the same, but with the opportunity to send multiple requests.

Firefox 38.0.5 / Linux x86_64

A friend of mine recently open sourced a similar solution.

- Code: https://github.com/simonyiszk/openwebrx

- Short intro: http://www.rtl-sdr.com/openwebrx-an-multi-user-rtl-sdr-recei...

I've seen similar projects -- if you told them how pointless spending money on such assessments is, and they still want it, then it shouldn't be your problem. Also, there's still a chance that they have some backup or privately shared files up there that DirBuster or similar software could find.

> Write a ground-up implementation of (maybe a subset of) RFC 4880, with opinionated choices of default ciphers (a bit like NaCl).

That's what PBP does:

- Code: https://github.com/stef/pbp

- A short (9:03) talk by the author: https://www.youtube.com/watch?v=Kl_gLMef1mI

The browser doesn't gzip _requests_ by itself, only the server does so with the _response_ if the user-agent (including browsers) states that it supports such content encoding. Of course you can implement gzip in JavaScript, but if you do that, you can already mangle the request and send the file to the server without Base64 encoding.

Yes, see http://blogs.msdn.com/b/oldnewthing/archive/2004/05/19/13493...

1. git uses SHA-1, not MD5; former has problems, but is still better than latter

2. git stores the length of a blob before hashing [1] which makes it harder (but not impossible) to perform such attacks [2]

[1] http://www.git-scm.com/book/en/v2/Git-Internals-Git-Objects#... [2] http://blogs.msdn.com/b/oldnewthing/archive/2004/05/19/13493...

> As if VLC on windows comes with crapware.

At least it did, in a way

http://www.howtogeek.com/194993/the-windows-store-is-a-cessp...

not, if you configure multiplexing (and why wouldn't you) https://en.wikibooks.org/wiki/OpenSSH/Cookbook/Multiplexing

Reminded me of this diagram: https://grsecurity.net/~spender/pics/mac_security_sesamestre...

It should, and they just said "the integrity of weak passwords cannot be guaranteed" -- even the best salting cannot prevent attackers performing brute force attacks; it will be slow, but weak passwords may be cracked in reasonable time.