Danny Grander

SourMint: iOS remote code execution, Android findings, and community response

15 de octubre de 2020

PCI standards open source security requirements — how to comply?

23 de julio de 2019

A post-mortem of the malicious event-stream backdoor

6 de diciembre de 2018

Malicious code found in npm package event-stream downloaded 8 million times in the past 2.5 months

27 de noviembre de 2018

Behind the disclosure: the Zip Slip vulnerability

15 de agosto de 2018

Public Disclosure of a Critical Arbitrary File Overwrite Vulnerability: Zip Slip

5 de junio de 2018

Attacking an FTP Client: MGETting more than you bargained for

4 de abril de 2018

Where do security patches come from?

25 de enero de 2018

Python 2 vs 3: Security Differences

10 de octubre de 2017

Using Node.js event loop for timing attacks

16 de febrero de 2016