Chris Foster

Most-linked posts?

1. Developers don't understand CORS
   2 people · 4 mentions · first linked 2019-07-10
2. Entropy Loss for Reinforcement Learning
   2 people · 2 mentions · first linked 2018-09-21
3. Executing gradient descent on the earth
   2 people · 2 mentions · first linked 2017-09-19

What Hacker News says?

1. chrisfosterelli · 2019-07-10

   Lots of this got me thinking so I wrote a bit of a piece on it: https://fosterelli.co/developers-dont-understand-cors

   Comment linking /developers-dont-understand-cors

   on “Vulnerability in the Mac Zoom client allows malicious websites to enable camera”
2. chrisfosterelli · 2019-07-10

   Submitted Developers don't understand CORS as a story · 931 points

   HN discussion
3. chrisfosterelli · 2019-07-11

   > Someone could follow the advice in the article and still be vulnerable. This applies to any advice that is not an actual reference implementation in code. There's only a state-changing GET handler because they chose to work around CORS and you can't POST for images. Implemented properly this CORS approach does protect against CSRF without the need for an explicit token. I've written more about this before, with co…

   Comment linking /dangerous-use-of-express-body-parser

   on “Developers don't understand CORS”
4. gballan · 2018-04-20

   Submitted Executing gradient descent on the earth as a story · 182 points

   HN discussion
5. chrisfosterelli · 2020-05-21

   It's a function of the natural evolution of things. The same origin policy was originally introduced with AJAX at a time when the vast majority of traffic was to the same origin. It wasn't a common pattern to make complex requests to a different domain (barring GETs and FORM posts which were allowed). Web development changed and it started to become more popular to make complex cross-domain requests, but the problem…

   Comment linking /developers-dont-understand-cors

   on “Stealing secrets from developers using WebSockets”
6. chrisfosterelli · 2015-04-22

   Submitted Privilege Escalation via Docker as a story · 24 points

   HN discussion
7. chrisfosterelli · 2018-06-13

   Yeah, I believe the quote is incorrect (or at least out of context). If an attacker has access to control the docker daemon like in the attack the article is talking about, then yes that is root [0], but if only a container is exploited then I believe you need one of [1]: 1) an exploit in the kernel, 2) optimistic configuration that allows host access, or 3) a volume mount that exposes something vulnerable like the…

   Comment linking /privilege-escalation-via-docker

   on “How the modern containerization trend is exploited by attackers”
8. chrisfosterelli · 2020-11-14

   Submitted Why Twitter can't agree on a simple math equation as a story · 7 points

   HN discussion
9. chrisfosterelli · 2018-11-02

   I don't follow why the drones need to go below the canopy at all. Just use an infrared camera! This is already being done in our local area for SAR, though with remote controlled drones rather than autonomous[0], and it's worked. I also worked on a undergrad research project involving autonomously deployed drones that identified cattle with infrared and the results were a no-brainer compared to conventional cameras[…

   Comment linking /file/talk/tracking-cattle-with-infrared-imaging.pdf

   on “Fleets of drones could aid searches for lost hikers”
10. chrisfosterelli · 2014-11-19

    Submitted Getting Started with WebRTC Data Channels as a story · 4 points

    HN discussion
11. chrisfosterelli · 2020-05-25

    Submitted How Apple and Google's contact tracing retains cryptographic privacy as a story · 3 points

    HN discussion
12. chrisfosterelli · 2017-03-14

    Submitted Stealing credentials with a malicious node module as a story · 3 points

    HN discussion
13. chrisfosterelli · 2015-12-18

    Submitted Nodejs: Dangerous use of express 'body-parser' module as a story · 3 points

    HN discussion
14. phonebucket · 2020-12-16

    Submitted Entropy Loss for Reinforcement Learning (2018) as a story · 2 points

    HN discussion
15. chrisfosterelli · 2020-07-28

    Submitted Responsive Deep Work as a story · 2 points

    HN discussion
16. chrisfosterelli · 2018-09-21

    Submitted Entropy Loss for Reinforcement Learning as a story · 2 points

    HN discussion
17. toilet · 2026-06-21

    Submitted Developers don't understand CORS (2019) as a story · 1 points

    HN discussion
18. chrisfosterelli · 2017-09-19

    Submitted Executing Gradient Descent on the Earth as a story · 1 points

    HN discussion
19. chrisfosterelli · 2015-01-06

    Submitted 30 Days of Casual Soylent as a story · 1 points

    HN discussion
20. Stealth- · 2013-08-16

    Submitted Creating a private CI with Strider and DigitalOcean as a story · 1 points

    HN discussion

Search all of HN for fosterelli.co