Fabrice Ferreira Leal fabriceleal

Guide to how fucked is SSL?

Thanks to Jacob Kaplan-Moss, Donald Stufft, David Reid, Allen Short, Zain Memon, and Chris Armstrong for review.

This is a guide for technical individuals to understand in what circumstances SSL communications are secure against an observer-in-the-middle (for all intents and purposes: the NSA).

	(* author: Dimitur Krustev *)
	(* started: 20130616 *)
	(* based on: http://siek.blogspot.com/2013/05/type-safety-in-three-easy-lemmas.html *)

	Require Import Arith List Bool.

	Set Implicit Arguments.

	Section Lang.

	# http://stackoverflow.com/questions/9834689/compare-two-branches-in-git
	# https://www.kernel.org/pub/software/scm/git/docs/git-diff.html

	# Normal diff
	git diff a_branch..master

	# Only filenames
	git diff --numstat a_branch..master

	Object.prototype.test = function(){ console.log('an object')};
	Array.prototype.test = function(){ console.log('an array')};
	Number.prototype.test = function(){ console.log('a number')};

	var a = {};
	a.test(); // prints "an object"

	a = [];
	a.test(); // prints "an array"

	-- http://dba.stackexchange.com/questions/13083/cant-remove-grant-usage
	-- in host, use '%' as wildcard
	grant usage on . to 'user'@'host' identified by 'password';
	grant all privileges on database.* to 'user'@'host';

	show grants;
	show grants for user;
	show grants for user@host;

	grant super on . to 'user'@'host' identified by 'password';

	# From http://stackoverflow.com/a/8741530
	git filter-branch --index-filter 'git rm --cached --ignore-unmatch Smarty/templates_c/*' --tag-name-filter cat -- --all

	# From http://stackoverflow.com/a/7448828/1647507
	find . -type f -exec stat --format '%Y :%y %n' {} \; \| sort -nr \| cut -d: -f2- \| head