HNHacker News
TopNewBestAskShowJobs

Faelian2

150 karma · joined March 4, 2021

Pentester Freelance, based in Europe.

mail: olivier [at] lasne dot pro

submissionscomments
Faelian2··on Russian forces invade Ukraine after Putin orders attack
France and Germany having a firm anti-Atlanticist tradition, and China being a danger for Russia are ridiculous.

I don't believe for a second that this represent Putin's strategy in any meaningful way.

Faelian2··on Europe Is Losing Nuclear Power Just When It Needs Energy
Coal is still the primary source of energy for Germany.

https://jancovici.com/en/energy-transition/long-series/germa...

Faelian2··on Europe Is Losing Nuclear Power Just When It Needs Energy
Honestly, the battle Nuclear vs Renewable is quite sad when we look at the sources of energy over time.

https://ourworldindata.org/global-energy-200-years?country=

Coal is not even going down.

Faelian2··on Europe Is Losing Nuclear Power Just When It Needs Energy
Well, part of it is that there is a lot of FUD about nuclear. The impact of Fukushima accident is a grand total of 0 deaths.

Extract from the Report of the UNSCEAR (United Nations Scientific Committee on the Effects of Atomic Radiation) of 2020 :

"Since the UNSCEAR 2013 Report no adverse health effects among Fukushima Prefecture residents have been documented that are directly attributable to radiation exposure from the FDNPS accident."

You can check the source here : https://www.unscear.org/unscear/en/fukushima.html. (Be warned, it's full of jargon).

For the worst nuclear accident of this century, I would argue it's pretty good !

Faelian2··on How bad have universities got?
Jordan Peterson has some interesting critics of universities on YouTube.
Faelian2··on Implementing RSA in Python from Scratch
Relevant "Fuck RSA", or why you don't want to use this in the real world.

https://youtu.be/lElHzac8DDI

(That being said, I think it's still interesting to do this to understand RSA, but please don't roll out your own crypto).

Faelian2··on Why aren't thousands of gigabytes of abusive images removed from the web?
There are multiple studies linking the introduction of pornography to a diminution of sexual assaults : https://www.psychologytoday.com/us/blog/all-about-sex/201601....

As horrifying as it sound. I wonder if we are not better off having child pornography around. I expect it would result in a diminution of child abuse. (That being said, I don't think there has ever been a study on the subject).

Faelian2··on Multiple vulnerabilities in WP Fastest Cache plugin
I see a lot of people angry because how trivial the injection is supposed to be. But static::id is set with the following line :

static::$id = esc_sql($_GET["post"]);

And yeah, esc_sql() don't work in all cases (see here : https://developer.wordpress.org/reference/functions/esc_sql/...) and in this case it's vulnerable.

But the author did try to prevent SQL injections, and misuse of functions happens sometime ¯\_(ツ)_/¯. It's not that trivial when reading the code. A Stored XSS Via CSRF is also far from trivial.

In conclusion, we all write bugs. Some are tricky. Don't be so angry !

Faelian2··on Create and share images of your source code
I have been wondering for months how these snippets are done on hackthebox official writeups ^^
Faelian2··on WebGoat is a deliberately insecure application
I work as a pentester, and if you want to learn web security, I would strongly recommend PortSwigger Web-Security labs over WebGoat (it's free too).

https://portswigger.net/web-security

Hackthebox with ippsec's videos is also a fantastic resource. Liveoverflow's youtube channel and pentesterlab are also really good.

Faelian2··on ; Echo “Shell Injection”
Well, it's known as a "command injection". It's a common vulnerability that can happen in all languages.

https://owasp.org/www-community/attacks/Command_Injection

Faelian2··on Ask HN: What tech job would let me get away with the least real work possible?
Maybe I shouldn't share this, but get some expertise and work as an independent consultant.

My salary did a x4, and I generally work half a day. Client can't judge your work and have no idea of what you are doing. But it's quite lonely not having an office with friends.

Faelian2··on Cheers to 10 Years
And finally good default touchpad gestures on Linux in the next version. https://blog.elementary.io/multitouch-gestures-in-elementary...
Faelian2··on Cheers to 10 Years
Well, Ubuntu is a great base (like all the commands on github repos are for Ubuntu). But Ubuntu isn't such a great distribution. So everybody is trying to fix it by pulling their own distro :)
Faelian2··on Cheers to 10 Years
I believe it's mostly fixed nowadays. I remember fixing this on Ubuntu like 10 years ago by adding an "acpi=off" in the grub config file.
Faelian2··on Cheers to 10 Years
I have been using elementary on my laptops since 2013. If you want to give Linux a try, I recommend it over Ubuntu or Fedora. (KDE is nice, but I didn't try it in years).

I really wish they had more resources. I mean look at theses mockups from years ago ! (Nothing offical). https://www.deviantart.com/bassultra/art/Spreadsheet-3631475... https://www.deviantart.com/spiceofdesign/art/Writer-Concept-...

The default apps aren't this great. For my workflow nowadays it's mostly Firefox, Tilix, Visual Studio Code. + VirtualBox for Word and Kali Linux (I work as a pentester). But the virtual desktops, the launcher and the file browser are a pleasure to use.

Also it's based on Ubuntu, so all your commands from the Internet will works.

← PreviousPage 2 of 2