#computertech Bot Logged User list

Network: TechNet

Modes: +ntf

Last Seen: 2 months ago

Topic:

Users

Channel Log Archive for #computertech

Hide Joins

* All times are UTC

Filtering by user: wez/rizon

Wednesday, October 25, 2023

[02:25:02] wez/rizon \g: Stars are hot because they are releasing massive amounts of engery through nuclear fusion.

[02:27:18] wez/rizon 13:27 < \g> [07:24PM] [\g] No, I've never studied quantum mechanics

[02:27:46] wez/rizon \g: It is nearly programming o'clock: 13:37

[02:28:04] wez/rizon in 10 mins

[02:28:18] wez/rizon yes, coffee time

[02:29:19] wez/rizon Notmuch today actually, pen test reporting :\

[02:30:34] wez/rizon Valware: Not really, my eyes are glazing atm.

[02:31:07] wez/rizon but if you give me written persmission to do so and provide proof of ownership of sites to pen test then I will think about it :)

[02:32:48] wez/rizon Maybe

[02:35:23] wez/rizon Web server is down Error code 521

[02:35:38] wez/rizon Visit cloudflare.com for more information.

[02:36:13] wez/rizon :D I rock!

[02:36:46] wez/rizon jquery, gross

[02:37:03] wez/rizon bootstrap, lol

[02:37:05] wez/rizon <3

[02:42:58] wez/rizon Valware: Your site is missing a bunch of security headers (CSP, HSTS). The login form is missing CSRF tokens. Cookies aren't secure, looks like you are using it for a PHP session. ou are using PHP too, so that is a massive red flag there :P

[02:44:03] wez/rizon Valware: http://projects.webappsec.org/Cross-Site-Request-Forgery

[02:44:04] wez/rizon https://cwe.mitre.org/data/definitions/352.html

[02:44:15] wez/rizon https://developer.mozilla.org/en-US/docs/Web/Security/CSP/Introducing_Content_Security_Policy

[02:44:18] wez/rizon https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html

[02:44:21] wez/rizon http://www.w3.org/TR/CSP/

[02:44:23] wez/rizon https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options

[02:44:33] wez/rizon https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/06-Session_Management_Testing/02-Testing_for_Cookies_Attributes.html

[02:44:57] wez/rizon https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Strict_Transport_Security_Cheat_Sheet.html

[02:45:00] wez/rizon https://owasp.org/www-community/Security_Headers

[02:45:02] wez/rizon http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

[02:45:06] wez/rizon http://msdn.microsoft.com/en-us/library/ie/gg622941%28v=vs.85%29.aspx

[02:45:07] wez/rizon https://owasp.org/www-community/Security_Headers

[02:45:36] wez/rizon Valware: And that is just the first page without having username and password to see anything else :P

[02:45:47] wez/rizon BBL, work

[02:45:58] wez/rizon Anytime

[02:47:16] wez/rizon I recommend static generated websites loaded on a CDN :)

[02:47:23] wez/rizon And an API if you really need one

[02:47:47] wez/rizon nextjs static generator is nice, sanity.io is a good headless CMS

[02:48:46] wez/rizon Valware: Netlify.com is a cheap / free hosting provider, good for protoyping but don't use it for anything serious

[02:49:06] wez/rizon BBL

[03:28:19] wez/rizon D:

[03:33:10] wez/rizon :D

[03:36:30] wez/rizon pew pew

[03:36:35] wez/rizon !reload

[03:36:42] wez/rizon :D

[23:29:39] wez/rizon It's smoked trout on scrambled eggs on top of holenes sauce on top of half a bagel time!

IRC Log Archive

This is a searchable archive of IRC conversations from #computertech on TechNet. Use the search box above to find discussions on specific topics. All conversations are preserved to help the community learn from past discussions.