Your Password is a DOS Vector
What limits should web apps place on passwords?
Tag: security
4 results
Blog Posts
Your SSH Key is Obscurity
IT professionals often denigrate 'security through obscurity', but is that helpful?
Projects
★ Featured
penbomb
A Go HTTP handler that returns a 100 GB zip bomb. Designed to punish pentesters scraping sites at endpoints that would normally just return a 404. Adapts the payload based on the Accept-Encoding header.
Punishes roughly 300 requests per site per week, with no additional cost.
Beeneedeenee Cumberbumber
A simple web extension for Firefox and Chrome that searches for all instances of "Benedict Cumberbatch" and replaces them with a funny version.
An experiment to demonstrate dangerously elevated permissions in browser extensions.
Inspired by the talk Micah Silverman gave at KCDC 2021, titled "Blasting Browser Security with Extensions".