HN Explorer

nbpoole

↗ HN profile [ 83.4 ms ] full profile
Karma
2,035
Created
November 2, 2010 (15y ago)
Submissions
0
Web application security enthusiast. Currently a Security Engineer at Facebook. Formerly a security consultant for Matasano Security. My posts and comments do not reflect the opinions or views of my employer.

Blog: https://nealpoole.com/blog/

Twitter: https://twitter.com/NealPoole

Contact me: https://nealpoole.com/blog/contact/

  1. Investigating apparent IT breach, Stanford urges users to update passwords (news.stanford.edu)
    2 points 0
  2. A Python Tutorial for Economists (alexmbell.com)
    3 points 0
  3. Google Patents: Missing Data Before 2000? (alexmbell.com)
    3 points 3
  4. Security Vulnerabilities in Popular Flash Applets (SWFUpload, Plupload) (nealpoole.com)
    2 points 0
  5. How the BEAST was Born (vnhacker.blogspot.com)
    8 points 0
  6. Lessons from Facebook's Security Bug Bounty Program (nealpoole.com)
    3 points 0
  7. Arbitrary Code Execution with Null Bytes, PHP, and Old Versions of nginx (nealpoole.com)
    5 points 0
  8. Cross-Site Scripting? In PHP Notices? It's more likely than you think (nealpoole.com)
    43 points 16
  9. Black Hat 2011: "Attacking Client Side JIT Compilers" (matasano.com)
    5 points 0
  10. File uploads allow for cross-site scripting in Wordpress (nealpoole.com)
    1 points 1
  11. Avoiding Arbitrary Code Execution with nginx and php-fastcgi (nealpoole.com)
    61 points 15
  12. Directory Traversal / Local File Inclusion on addons.mozilla.org (nealpoole.com)
    2 points 1
  13. How Does Cross-Site Scripting Become Arbitrary Code Execution? (nealpoole.com)
    3 points 0
  14. Reports from Google’s Vulnerability Reward Program (nealpoole.com)
    10 points 0
  15. Looking for a co-conspirator (stdout.be)
    4 points 0
  16. Using Static Analysis for Ajax Intrusion Detection (cs.brown.edu)
    10 points 1
  17. bit.ly announces API hackathon winners (blog.bit.ly)
    1 points -1