HNHacker News
TopNewBestAskShowJobs

nbpoole

2,035 karma · joined November 2, 2010

Web application security enthusiast. Currently a Security Engineer at Facebook. Formerly a security consultant for Matasano Security. My posts and comments do not reflect the opinions or views of my employer.

Blog: https://nealpoole.com/blog/

Twitter: https://twitter.com/NealPoole

Contact me: https://nealpoole.com/blog/contact/

submissionscomments

Investigating apparent IT breach, Stanford urges users to update passwords

news.stanford.edu·2 pts·nbpoole·
0

A Python Tutorial for Economists

alexmbell.com·3 pts·nbpoole·
0

Google Patents: Missing Data Before 2000?

alexmbell.com·3 pts·nbpoole·
3

Security Vulnerabilities in Popular Flash Applets (SWFUpload, Plupload)

nealpoole.com·2 pts·nbpoole·
0

How the BEAST was Born

vnhacker.blogspot.com·8 pts·nbpoole·
0

Lessons from Facebook's Security Bug Bounty Program

nealpoole.com·3 pts·nbpoole·
0

Arbitrary Code Execution with Null Bytes, PHP, and Old Versions of nginx

nealpoole.com·5 pts·nbpoole·
0

Cross-Site Scripting? In PHP Notices? It's more likely than you think

nealpoole.com·43 pts·nbpoole·
14

Black Hat 2011: "Attacking Client Side JIT Compilers"

matasano.com·5 pts·nbpoole·
0

File uploads allow for cross-site scripting in Wordpress

nealpoole.com·1 pts·nbpoole·
1

Avoiding Arbitrary Code Execution with nginx and php-fastcgi

nealpoole.com·61 pts·nbpoole·
15

Directory Traversal / Local File Inclusion on addons.mozilla.org

nealpoole.com·2 pts·nbpoole·
1

How Does Cross-Site Scripting Become Arbitrary Code Execution?

nealpoole.com·3 pts·nbpoole·
0

Reports from Google’s Vulnerability Reward Program

nealpoole.com·10 pts·nbpoole·
0

Looking for a co-conspirator

stdout.be·4 pts·nbpoole·
0

Using Static Analysis for Ajax Intrusion Detection

cs.brown.edu·10 pts·nbpoole·
1