ChALkeR Notes Save

Just some notes, stored on GitHub instead of a blog.

I am not a native English speaker, so please excuse any language mistakes.

Contents

• Yarn transferred npm credentials over unencrypted http connection (2019-07-13)
• Enumerating Bitbucket repos and private issue titles (2018-05-10)
• On Node.js CTC decision making (part 1) (2017-05-05/2017-08-30)
• Gathering weak npm credentials (2017-06-21)
• Improper markup sanitization in popular software (2017-04-13)
• Short-term package manager wishlist (2016-11-03)
• On npmjs.com tokens visibility, XSS, and clickjacking (2016-10-18)
• Stealing Travis secure variables (2016-07-07)
• Let's fix Buffer API (2016-01-15)
• Buffer knows everything (2016-01-14)
• Do not underestimate credentials leaks (2015-12-04)