Scott Arciszewski sarciszewski

## 0_reuse_code.js
// Use Gists to store code you would like to remember later on
console.log(window); // log the "window" object to the console

## gist:88a7ed143204d17c3e42
/**
 * License: WTFPL, CC0, ZAP (Zero For 0wned Anti-copyright Pledge), etc
 */
function secure_rand(min, max) {
  var i = rval = bits = bytes = 0;
  var range = max - min;
  if (range < 1) {
    return min;
  }
  if (window.crypto && window.crypto.getRandomValues) {

## projects.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                sarciszewski
                / projects.md
            
            
              Created
              November 23, 2014 21:00
            
              
                Projects and Ideas
              
          
    What dis be?

This is a short summary of my unfinished projects, how they relate to each other, etc.
Onionimbus


https://github.com/darkitecht/onionimbus_hub
https://github.com/darkitecht/onionimbus_node
https://github.com/darkitecht/onionimbus_system


## index.html
<!DOCTYPE html>
<html>
    <head>
        <title>Something something dark side</title>
        <meta charset="UTF-8" />
    </head>
    <body>
        <h1>Title</h1>
        <p>
            Lorem Ipsum here

## gist:576ec0459466f5f224ec
http://web.archive.org/web/20100102015733/http://who.is/whois/nsa.gov

## wp-api.txt
... or more accurately, asleep at the wheel!
           _______________________________________________________
 _________/ STORY TIME (feel free to skip this if you don't care) \__________
|                                                                            |
| Recently, I made a quick analysis of all of the public projects listed     |
| on HackerOne. https://gist.github.com/sarciszewski/04ee71ad2bcddc9c33b9    |
|                                                                            |
| If you scroll to the bottom, I listed several projects in the "sweet       |
| spot": open source AND a minimum bounty. Outside of the Internet Bug       |
| Bounty project, there are only two projects listed: WP-API and Ian Dunn (a |

## hackerone.json
{
    "Bookfresh": {
        "min": 50,
        "repo": null
    },
    "GlassWire": {
        "min": null,
        "repo": null
    },
    "Greenhouse.io": {

## 0x00-README.md

      
              5 files
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                sarciszewski
                / 0x00-README.md
            
            
              Last active
              August 29, 2015 14:07
            
              
                A Modest Proposal
              
          
    Premise

Developers love to fetch data over the network and love to pipe it directly into a language interpreter (e.g. curl http://get.mojolicio.us | sh, curl https://getcomposer.org/installer | php, etc.) and have put forth a great deal of resistance towards efforts to break these habits.
In order to be able to offer developers some security assurance, I have put together this proposal for a free service that will allow developers to obtain a verifiable copy of a program.
Contents


0x00-README.md - You are here!
0x01-workflow.md - Describes the service workflow


## gist:bf25fb4b1d6aa78516f8
  _______________
 | CLIENT SERVER |         _________
 | ============= | ______ / Service \___, user
 | ~#            | ------ \_________/
 |_______________|          |   |   \
                          user user  user

A service has a SSH private key, for which the public key is installed on the client's server. Private keys are provisioned per client.

Local users authenticate somehow to the service which then forwards their SSH session onto the client's server without leaking the private key.

## .bashrc
cl()
{
  # change directory then view its contents in one step
  if [ -z $2 ]
  then
    cd $1 && ls -lah
  else
    cd $1 && ls $2
  fi
}
	// Use Gists to store code you would like to remember later on
	console.log(window); // log the "window" object to the console
	/**
	* License: WTFPL, CC0, ZAP (Zero For 0wned Anti-copyright Pledge), etc
	*/
	function secure_rand(min, max) {
	var i = rval = bits = bytes = 0;
	var range = max - min;
	if (range < 1) {
	return min;
	}
	if (window.crypto && window.crypto.getRandomValues) {
	<!DOCTYPE html>
	<html>
	<head>
	<title>Something something dark side</title>
	<meta charset="UTF-8" />
	</head>
	<body>
	<h1>Title</h1>
	<p>
	Lorem Ipsum here
	... or more accurately, asleep at the wheel!
	_______________________________________________________
	_________/ STORY TIME (feel free to skip this if you don't care) \__________
	\| \|
	\| Recently, I made a quick analysis of all of the public projects listed \|
	\| on HackerOne. https://gist.github.com/sarciszewski/04ee71ad2bcddc9c33b9 \|
	\| \|
	\| If you scroll to the bottom, I listed several projects in the "sweet \|
	\| spot": open source AND a minimum bounty. Outside of the Internet Bug \|
	\| Bounty project, there are only two projects listed: WP-API and Ian Dunn (a \|
	{
	"Bookfresh": {
	"min": 50,
	"repo": null
	},
	"GlassWire": {
	"min": null,
	"repo": null
	},
	"Greenhouse.io": {
	_______________
	\| CLIENT SERVER \| _________
	\| ============= \| ______ / Service \___, user
	\| ~# \| ------ \_________/
	\|_______________\| \| \| \
	user user user

	A service has a SSH private key, for which the public key is installed on the client's server. Private keys are provisioned per client.

	Local users authenticate somehow to the service which then forwards their SSH session onto the client's server without leaking the private key.
	cl()
	{
	# change directory then view its contents in one step
	if [ -z $2 ]
	then
	cd $1 && ls -lah
	else
	cd $1 && ls $2
	fi
	}