Joshua Rogers is an Australian technologist, sysadmin, security engineer, and pentester sharing long-form writeups on hacking, binary web and infra security, programming, technology, politics, and life itself.
Antiperspirant without aluminum Toothpaste without fluoride Mouthwash without antiseptic ingredients Food without salt (and don’t get me started on msg!) Food without seed oils Fat-free mayonnaise Lip balm without petroleum Hand sanitizer without alcohol Acetone-free nail-polish remover
Cleaner HTML-sanitizer bypass: mutation-XSS via MathML namespace confusion
Person A: Have you heard about Shilajit? It increases your testosterone, your lifts will go up by 20%, and it’s legal because it falls under the category of a health supplement! I’ve been taking it with my Ashwagandha and I’ve never felt better! This natural fitness trainer I follow on Instagram has been taking it for ages and he’s got my dream body! I’ve bought a huge supply, just in case they…
Design, style, and ergonomics are all high up on my interests when it comes to the world. If you’ve got something that does something amazing, that’s great. But if using it makes me want to kill myself, then you’ve failed.
cJSON is probably the most widely used JSON parser in the C world. It’s vendored into ESP-IDF, into a lot of embedded firmware, and into a whole lot more server-side C. I found 33 security issues in it, using a mix of AI and some manual fuzzing and review. They affect every version up to and including v1.7.19, and every one of them is still in the current code.
I was recently reading Max Justicz’s blog post , where he outlined how he was able to hack the unpkg.com CDN by getting the service to extract a tar file which contained:
TL;DR: Magic Switch is a free, open-source macOS app for sharing an Apple Magic Keyboard, Trackpad, or Mouse between two Macs — with no Apple ID and no USB re-pairing dance. Source on GitHub .
This was originally written on April 16, 2020 and published on LinkedIn. I’ve decided to move the posts here for better searchability. Those that know me well, know that I am a video game history researcher, and this is just some of my random published articles.
This was originally written on June 12, 2020 and published on LinkedIn. I’ve decided to move the posts here for better searchability. Those that know me well, know that I am a video game history researcher, and this is just some of my random published articles.
This was originally written on September 15, 2020 and published on LinkedIn. I’ve decided to move the posts here for better searchability. Those that know me well, know that I am a video game history researcher, and this is just some of my random published articles.