Just a thought: One of the benefits of using Asymmetric/Public-Key Signing is that it would remain compatible with a distributed server system. While maybe only the authenticating server can sign the cookies, all the other servers across the region can receive the corresponding public keys for verification.

I knew about the utter genius of the APE format and Cosmopolitan libc but I only just discovered how amazing the redbean web server is.

This was such a great course! Thank you for making it accessible.

Thats really incredible and creative feross🎉🎉

59:59 isnt default port 443 for https?

Vacuous, useless talk.

Interesting!

An amazing course!!

Got to know about this from Syntax podcast on webscraping + reverse engineering APIs

awesome. thank you!!!

31:42 "Yeah, it's pretty cool. Any questions?" I have so, SO many questions, screw it that the video is 3 years old now! * How exactly does qemu work when booting the APE from the BIOS? * Booting the APE, can we expect all I/O to work? Keyboard, mouse, wired and wireless networking? * For disk read/write operations, do you have to program it as if you were targeting which OS? Because Windows uses \ for folders, while *nix uses /. * Is it possible to have the full Lua 5.4 implementation, plus libraries, within an APE? * Are graphical applications, typical end user programs with a GUI, feasible? If so, how?

Criminally low views

bro is absolutely fucking cooked if he still doesn't have those bitcoins

I wish I were one of the students in this class.

Some things are left out.

he wore the same shirt his whole life. he probably has 7 of the same shirt.

Didn't want the course to end. So fun and insightful. One of the best and most underrated courses on Web Security.

Great presentation by the author. I do wish the interviewer were a little more serious. I had to FF/skip a lot of the parts where he just says 'wow' all the time, sorry.

i cant express how happy i am . live the life brother i will not even dream 😁🥲

wow this changed my life

Midudev, el Messi del Frontend :)

Midudev ❤

Midudev ♥

Midudev <3

audio volume goes up and down

This is very interesting, even though I just came across the project 2.5 years later.

❤

You made the annoying website right? tell me please if i got hacked!

Thanks alot Feross

vow..what a great interview... kudos to Arjun .., do u think in august 2023, this is still the better option or have you found anything else that does the same in a better way ?

Is the github deleted? Where can we find the code?

Really appreciate this content Feross! As a software dev of 6 years trying to lean more into an application security dev role this course has been very helpful.

Would love to hear about your current projects, the state of web torrent, and maybe your thoughts on interplanetary file system, and anything related. Thanks for what you do

Amazing course! Thank u for sharing it with us!

👏👏👏 Thank you Feross for this awesome playlist. These lectures really helped me to understand a lot of new stuff.

Wow! That was a lot of planning! Amazing creativity! Congrats!

From where i can access this DNS rebinding LAB.

Immensely grateful!

A random question came up in my mind in the last few lectures... are we sort of diving into the common Venn circle between API security and Web Security???

How can we enroll in 2023?

Huge fan of Justine’s work ❤.

React Native, Flutter, Xamarin, JAVA ... LOL ... But, but , but ...

@14:38 "I realized that it was possible to have a Windows MZ executable also be a Unix 6th Edition shell script [...] When I found out about that, I was like, 'Oh my gosh. I can make Windows executables that run on Mac, Linux, and all the BSDs, too.'" A challenge to JS programmers: try to devise a way to encode a simple program (your choice; e.g.: hello world, fizzbuz, etc) as a single file that will run both in the browser and when passed to NodeJS on the command-line.

@5:37 "You know, like we can write an HTML page with JavaScript that runs on everybody's browser regardless of their operating system. Why can't we do that with native programs, too?" It would be nice if NPM programmers got the memo-why has the set of tech influencers from that world chosen to recreate headaches on par with the ones associated with native toolchains? In fact, in many cases it's worse-it is, in 2023, actually *more* difficult to get a development environment set up to successfully build many JS projects (even though there's already a fucking JS runtime on everyone's computer to begin with-and a standards-compliant one at that, rather NodeJS's derpy APIs). It's not like they don't know the browser is there-it's the compilation target for the majority of the relevant projects, and the fact that the browser is reliably present and mostly behaves uniformly across different systems is, like, the *entire* reason the devs are choosing to target it in the first place. Pure bozonics.

A great video. I loved it. You have covered the basic issues a developer face and explained a lot of concepts that are discussed else where in fancy quantum words. Thanks. This video is a great video for every new quantum newbee.

Stallman, like all idealists, is immature and will die thinking immature thoughts.

Thank you so much for this :)

Thanks :)

Thanks :)

Thanks :)