ircmaxell's Blog Logo

ircmaxell's Blog

A blog about various cybersecurity-related topics, including home networking, compiler development, and security vulnerabilities.

Visit website
Claim and verify your listing
0

ircmaxell's Blog Description

Wiring a Home Network Last year, my partner and I moved into a new (to us) house. One of the first things I needed to get done was to get our home network setup as we both were (still are) working from home due to COVID-19. This post will explore some of that process, some of the decisions I made along the way, what I learned, and some details on the end setup. Networking Wiring IT Home A PHP Compiler, aka The FFI Rabbit Hole It’s no secret that I’m into building toy compilers and programming languages. Today I’m introducing something that’s not a toy (I hope). Today, I’m introducing php-compiler (among many other projects). My hope is that these projects will grow from experimental status into fully production ready systems. PHP HHVM Open Source Compiler libjit libgccjit llvm Optimization Performance Recki-CT Protecting Against XSS In RAILS - JavaScript Contexts Recently my team was working to implement Brakeman in our CI processes to automatically scan our codebase for security vulnerabilities. Among a few other issues, it identified a handful of similar XSS vulnerabilities of a similar pattern: <script type="text/javascript"> var FOO = "<%= raw whatever %>"; ReactDOM.render(<Blah foo={window.FOO} />, document.getElementById('some_place')); </script> This is a pretty straight forward vulnerability, since passing untrusted data to a JavaScript context can lead to XSS.

ircmaxell's Blog FAQ

Common questions about ircmaxell's Blog including features, pricing, alternatives, and user reviews.

ircmaxell's Blog is A blog about various cybersecurity-related topics, including home networking, compiler development, and security vulnerabilities.. It is a Resources solution designed to help security teams with PHP, Networking, Rails.

Have more questions? Browse our categories or search for specific tools.

FEATURED

Heeler Application Security Auto-Remediation Logo

Fix-first AppSec powered by agentic remediation, covering SCA, SAST & secrets.

Hudson Rock Cybercrime Intelligence Tools Logo

Cybercrime intelligence tools for searching compromised credentials from infostealers

Proton Pass Logo

Password manager with end-to-end encryption and identity protection features

Mandos Fractional CISO Logo

Fractional CISO services for B2B companies to build security programs

POPULAR

RoboShadow Logo

Automated vulnerability assessment and remediation platform

13
OSINTLeak Real-time OSINT Leak Intelligence Logo

Real-time OSINT monitoring for leaked credentials, data, and infrastructure

8
Cybersec Feeds Logo

A threat intelligence aggregation service that consolidates and summarizes security updates from multiple sources to provide comprehensive cybersecurity situational awareness.

6
TestSavant AI Security Assurance Platform Logo

AI security assurance platform for red-teaming, guardrails & compliance

5
Mandos Brief Logo

Weekly cybersecurity newsletter covering security incidents, AI, and leadership

5
View Popular Tools →

Stay Updated with Mandos Brief

Get strategic cybersecurity insights in your inbox