g-k

@@ -372,13 +372,15 @@ def main(argv):

   try:
     # Wait for ZAP to start
-    zap = ZAPv2(proxies={'http': 'http://' + zap_ip + ':' + str(port), 'https': 'http://' + zap_ip + ':' + str(port)})
+    zap = ZAPv2(proxies={'http': 'http://' + 'localhost' + ':' + str(port), 'https': 'http://' + 'localhost' + ':' + str(port)})
+    logging.info('proxies %s' % {'http': 'http://' + zap_ip + ':' + str(port), 'https': 'http://' + zap_ip + ':' + str(port)})
     for x in range(0, timeout):
       try:
         logging.debug ('ZAP Version ' + zap.core.version)

g-k

@@ -372,13 +372,15 @@ def main(argv):

   try:
     # Wait for ZAP to start
-    zap = ZAPv2(proxies={'http': 'http://' + zap_ip + ':' + str(port), 'https': 'http://' + zap_ip + ':' + str(port)})
+    zap = ZAPv2(proxies={'http': 'http://' + 'localhost' + ':' + str(port), 'https': 'http://' + 'localhost' + ':' + str(port)})
     for x in range(0, timeout):
       try:
         logging.debug ('ZAP Version ' + zap.core.version)
         logging.debug ('Took ' + str(x) + ' seconds')

g-k

» node test.js
outer call $PATH:
 /Users/gguthe/.cargo/bin:/Developer/NVIDIA/CUDA-5.0/bin:/usr/local/share/npm/bin:/usr/local/bin:/usr/local/sbin:/usr/local/lib:/usr/local/lib/python2.7/site-packages:/Users/gguthe/bin:/Users/gguthe/.cabal/bin:/usr/local/bin:/usr/local/sbin:/usr/bin:/bin:/usr/sbin:/sbin:/Users/gguthe/.cargo/bin:/Developer/NVIDIA/CUDA-5.0/bin:/usr/local/share/npm/bin:/usr/local/lib:/usr/local/lib/python2.7/site-packages:/Users/gguthe/bin:/Users/gguthe/.cabal/bin:/usr/local/opt/go/libexec/bin:/Users/gguthe/bin/bin:/usr/local/opt/go/libexec/bin:/Users/gguthe/bin/bin

inner call $PATH:
 /usr/gnu/bin:/usr/local/bin:/bin:/usr/bin:.

g-k

g-k

~/hoek - [add-escape-json●] » node --version
v7.1.0
~/hoek - [add-escape-json●] » uname -a
Darwin gguthe-23818 15.6.0 Darwin Kernel Version 15.6.0: Mon Jan  9 23:07:29 PST 2017; root:xnu-3248.60.11.2.1~1/RELEASE_X86_64 x86_64
~/hoek - [add-escape-json●] » cat test/json_escape_many_replace_calls.js
function escapeJson(input) {
    if (!input) {
        return '';
    }

g-k

ascii subsets of visually similar characters

Nice answers for unicode in: https://security.stackexchange.com/questions/128286/list-of-visually-similar-characters-for-detecting-spoofing-and-social-engineeri

filtered from the unicode list on codebox/homoglyph

» # char_codes.txt is https://github.com/codebox/homoglyph/blob/3f61c31f4bb01c5312a7763dc6e226729417c8e7/raw_data/char_codes.txt
» python ~/to_ascii_char_codes.py < ~/Downloads/char_codes.txt 
['0', 'O', 'o']

g-k

https://secpriv.tuwien.ac.at/fileadmin/t/secpriv/Slides/dp-EWSCS.pdf http://www.cis.upenn.edu/~aaroth/courses/slides/Lecture3.pdf https://images.apple.com/privacy/docs/Differential_Privacy_Overview.pdf

Non-tracking Web Analytics - http://anon-analytics.mpi-sws.org/2012-ccs-akkus.pdf

https://secpriv.tuwien.ac.at/group/team/univ_prof_matteo_maffei/ http://www.cis.upenn.edu/~aaroth/

g-k

> python ~/zxcvbn_strengths_to_entropy.py
# editing this a bit
0        1000 11.964340867792417
1     1000000 21.931567126628412
2   100000000 28.57542474467195
3 10000000000 35.219280948729356

g-k

Python

• https://github.com/google/pytype
• https://pyre-check.org/
• https://github.com/Instagram/MonkeyType
  • Open-sourcing MonkeyType – Let your Python code type-hint itself (engineering.instagram.com) https://news.ycombinator.com/item?id=15982390
• http://mypy-lang.org/
  • http://mypy-lang.blogspot.co.uk/2017/11/dropbox-releases-pyannotate-auto.html
  • http://blog.zulip.org/2016/10/13/static-types-in-python-oh-mypy/

g-k

From 5bbd25847198e43fd8ab66a802f749c1df890b56 Mon Sep 17 00:00:00 2001
From: Greg Guthe <[email protected]>
Date: Wed, 6 Jun 2018 09:05:08 -0400
Subject: [PATCH] wip

---
 signer/xpi/xpi.go                            | 1 +
 vendor/go.mozilla.org/cose/common_headers.go | 1 +
 vendor/go.mozilla.org/cose/sign_verify.go    | 1 +
 3 files changed, 3 insertions(+)