Larry Yuan

icon indicating a website link https://larry.sh/

icon location Canada icon location Security Researcher & Fullstack Developer. CTF w/ @dicegang and @Crusaders-Of-Rust

Results 2 issues of Larry Yuan

Gravatar image proxy

Given the recent [Gravatar breach](https://haveibeenpwned.com/PwnedWebsites#Gravatar), we should proxy profile images ourselves to hide the MD5 in Gravatar URLs. This should be implemented with support for [`X-Accel-Redirect`](https://www.nginx.com/nginx-wiki/build/dirhtml/start/topics/examples/x-accel/) so that nginx will...

security

Support for service token auth

9 comment

Cloudflare Zero Trust has support for service token auth: https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/parameters/#authentication-with-service-tokens This would be really good for deployments with servers and such.

enhancement
priority: high