Skip to content

Instantly share code, notes, and snippets.

View rawdigits's full-sized avatar

Ryan Huber rawdigits

  • Slack
  • Saint Francisco
View GitHub Profile
go-audit repo:
https://github.com/slackhq/go-audit
go-audit example configurations:
https://github.com/slackhq/go-audit/tree/master/examples
Blog post: Ryan Huber - Distributed Security Alerting
https://medium.com/several-people-are-coding
Video: NSA TAO Chief on Disrupting Nation State Hackers
Blog post: Ryan Huber - Distributed Security Alerting
https://medium.com/several-people-are-coding
Video: Zane Lackey - Building a Modern Security Organization
https://duo.com/blog/duo-tech-talk-building-a-modern-security-engineering-organization
Krebs on Security Blog
https://www.krebsonsecurity.com
Sony Breach
import pstats
p = pstats.Stats('asdf_1')
p.sort_stats('tottime').print_stats(20)
p.sort_stats('cumulative').print_stats(20)
p = cProfile.Profile()
p.enable()
counter = 1
def profiler_write_cb(data, remaining):
global counter, p
p.dump_stats('/tmp/stats/asdf_{}'.format(counter))
p.enable()
counter += 1
return w.WEECHAT_RC_OK
1. Soft shell, prefer corn to flour
2. LOVE spicy
3. Doritos. Preferably stomp on the bag to reduce them to almost dust.
4. No strong feeling. Don't drink tea.

Keybase proof

I hereby claim:

  • I am rawdigits on github.
  • I am rhuber (https://keybase.io/rhuber) on keybase.
  • I have a public key whose fingerprint is RETU RN T HIS. PGP. GET_ FING ERPR INT( ); }

To claim this, I am signing this object:

@rawdigits
rawdigits / slowdos
Last active March 24, 2017 14:04
A list of references from my talk on App DoS These are in no particular order, and because of the amount of overlap I am not citing individual sources directly.
DoS / slow DoS:
https://www.owasp.org/images/4/43/Layer_7_DDOS.pdf
http://docs.cpanel.net/twiki/bin/view/EasyApache/Apache/SlowlorisAttacks
http://en.nsfocus.com/SecurityReport/2013%20NSFOCUS%20Mid-Year%20DDoS%20Threat%20Report.pdf
http://blog.spiderlabs.com/2011/07/advanced-topic-of-the-week-mitigating-slow-http-dos-attacks.html
http://ckers.org/slowloris/
http://sourceforge.net/projects/pyloris/
http://security.stackexchange.com/questions/19698/mitigating-anonymous-dos-tor-combined-with-pyloris
https://blogs.akamai.com/2013/09/slow-dos-on-the-rise.html