From 7331fb5e90b6b41bb8824a409711155e81a1da3c Mon Sep 17 00:00:00 2001 From: Tait Hoyem Date: Sun, 4 Apr 2021 15:28:32 -0600 Subject: [PATCH] Add new post --- 2020-04-27-quiz-your-friends-xss.md | 107 -- .../index.html | 149 --- .../2020/01/22/padding-and-margin/index.html | 97 +- _site/2020/01/26/rsa1/index.html | 103 +- _site/2020/02/19/rsa2/index.html | 195 +--- _site/2020/04/02/rsa3/index.html | 194 +-- _site/2020/04/06/rsa4/index.html | 315 +---- _site/2020/04/12/nas1/index.html | 103 +- _site/2020/04/21/rfi/index.html | 69 +- _site/2020/04/25/xss/index.html | 145 +-- .../05/01/nginx-socket-io-projects/index.html | 94 +- _site/2020/05/19/clue-announcement/index.html | 67 +- _site/2020/06/04/site-update/index.html | 58 +- _site/2020/06/25/tmux-minecraft/index.html | 175 +-- _site/2020/07/12/independence/index.html | 91 +- .../07/19/multicraft-php-gentoo/index.html | 113 +- .../2020/07/30/canadian-parliament/index.html | 97 +- _site/2020/08/15/openbsd1/index.html | 86 +- _site/2020/08/18/django-deployment/index.html | 142 +-- _site/2020/09/09/lamegames/index.html | 61 +- _site/2020/09/12/minesweeper/index.html | 119 +- _site/2020/10/26/curiosity/index.html | 124 +- _site/2020/11/15/nas2/index.html | 124 +- _site/2020/12/01/pacaur-rpi/index.html | 121 +- .../14/orca-raspberry-pi-manjaro/index.html | 210 +--- _site/2020/12/20/deploy-lichess/index.html | 124 +- _site/2021/01/31/lichess/index.html | 117 +- .../04/04/quiz-your-friends-xss/index.html | 3 + _site/3q | 109 +- _site/about/index.html | 46 +- _site/assets/css/katex.css | 1040 +---------------- _site/assets/css/style.css | 286 +---- _site/assets/css/style.css.map | 15 +- _site/assets/js/hacked.js | 3 +- _site/blog/index.html | 416 +------ _site/contact/index.html | 57 +- _site/cover-letter-vcc/index.html | 41 +- _site/cover-letters/bloombase/index.html | 54 +- _site/cover-letters/protonmail/index.html | 53 +- _site/feed.xml | 695 +---------- _site/ideas/index.html | 63 +- _site/index.html | 119 +- _site/links/index.html | 314 +---- _site/resume/index.html | 126 +- _site/robots.txt | 2 +- _site/scholarships/2020/cnib/index.html | 75 +- _site/sitemap.xml | 152 +-- _site/table.py | 14 - _site/test/index.html | 47 - _site/tests/chess/index.html | 149 +-- _site/tests/live-label/index.html | 62 +- _site/tutoring/index.html | 77 +- 52 files changed, 115 insertions(+), 7303 deletions(-) delete mode 100644 2020-04-27-quiz-your-friends-xss.md delete mode 100644 _site/2020-04-27-quiz-your-friends-xss/index.html create mode 100644 _site/2021/04/04/quiz-your-friends-xss/index.html delete mode 100644 _site/table.py delete mode 100644 _site/test/index.html diff --git a/2020-04-27-quiz-your-friends-xss.md b/2020-04-27-quiz-your-friends-xss.md deleted file mode 100644 index 5f26703..0000000 --- a/2020-04-27-quiz-your-friends-xss.md +++ /dev/null @@ -1,107 +0,0 @@ ---- -title: "The \"Quiz Your Friends\" XSS Exploit" -layout: post ---- - -## TODO write intro - -## How I Found This Exploit - -While filling in one of my friend's surveys I thought it would be -funny for them to know it is me without anyone else knowing. -We were young and had `Inspect Element`ed a few things together, -so it was a safe bet that an HTML joke would let them know. - -I decided to write my name like so: `Steve`. -Steve is in reference to the [main character](https://minecraft.gamepedia.com/Player) in the video game Minecraft. - - -
- -
-

Me typing in my name as <b>Steve</b>.

-
-
- -Now in theory this should have shown in in the leaderboard as: "<b>Steve</b>" -However, to my horror and excitement, I saw this in the leaderboard: - -
- -
-

<b>Steve</b> displaying in the leaderboard as bold text: Steve

-
-
- -The text "Steve" showed up **in bold** on the leaderboard. -This told me all I needed to know. -How did this happen? You might wonder. - -### Server-Side Validation - -Here is a great demonstration why you should do most of your validation on the server side. -As a user, I can edit any of the HTML, CSS, or Javascript your server serves to me. - -Quiz your friends uses the `maxlength=20` HTML attribute on the name input field. -Imagine trying to fit in a script tag doing anything useful with 20 characters! Don't forget that includes the ` - - -
- - - - + Test ARIA-live region with label | tait.tech

tait.tech

I am some text.

Test


\ No newline at end of file diff --git a/_site/tutoring/index.html b/_site/tutoring/index.html index 57c05a7..74c4602 100644 --- a/_site/tutoring/index.html +++ b/_site/tutoring/index.html @@ -1,76 +1 @@ - - - - - Tutoring | tait.tech - - - - - - - -
-
-

tait.tech

- - - -
-
-

Tutoring

- -

I believe in solving problems. -Learn how to solve your own unique computer-related problems by learning how they work underneath all the fancy buttons you see.

- -

Contact me at tutoring@tait.tech for more info.

- -

Rates/hour

- -

C$25 for a programming language I am comfortable with already.

-
    -
  • C, C++, Java, Python, HTML/CSS/JS.
  • -
- -

C$20 + 1 week prep. time for a programming language I am not very comfortable with already.

-
    -
  • Rust, Go, Node.js.
  • -
- -

C$35 for Linux system administration.

-
    -
  • Paritioning disks, install and configure software and automate tasks via the command line interface (CLI).
  • -
- -

I offer group discounts for 2+ students.

- -
Resources:
- -

My favourite resources are the following:

- - - -
-
- -
- - + Tutoring | tait.tech

tait.tech

Tutoring

I believe in solving problems. Learn how to solve your own unique computer-related problems by learning how they work underneath all the fancy buttons you see.

Contact me at tutoring@tait.tech for more info.

Rates/hour

C$25 for a programming language I am comfortable with already.

  • C, C++, Java, Python, HTML/CSS/JS.

C$20 + 1 week prep. time for a programming language I am not very comfortable with already.

  • Rust, Go, Node.js.

C$35 for Linux system administration.

  • Paritioning disks, install and configure software and automate tasks via the command line interface (CLI).

I offer group discounts for 2+ students.

Resources:

My favourite resources are the following:


\ No newline at end of file