Danny Grander

SourMint: iOS remote code execution, Android findings, and community response

15 de outubro de 2020

PCI standards open source security requirements — how to comply?

23 de julho de 2019

A post-mortem of the malicious event-stream backdoor

6 de dezembro de 2018

Malicious code found in npm package event-stream downloaded 8 million times in the past 2.5 months

27 de novembro de 2018

Behind the disclosure: the Zip Slip vulnerability

15 de agosto de 2018

Public Disclosure of a Critical Arbitrary File Overwrite Vulnerability: Zip Slip

5 de junho de 2018

Attacking an FTP Client: MGETting more than you bargained for

4 de abril de 2018

Where do security patches come from?

25 de janeiro de 2018

Python 2 vs 3: Security Differences

10 de outubro de 2017

Using Node.js event loop for timing attacks

16 de fevereiro de 2016