Archive of stories published by ^Lift Security

Just before the New Years I published 140+ advisories on Node.js modules. I’ve been researching ways to compromise developers & node.js applications without compromising the npm registry or their CDN.

Adam Baldwin in ^Lift Security

Nov 8, 2016

Atom.io Misconfiguration Allowed Code Execution on Untrusted Networks

1 response

Nicholas Starke in ^Lift Security

Jan 12, 2017

Scoping for your first security assessment

This post is part of a series and you might want to read Preparing for your First Security Assessment first.

Scope is the term we use to define what effort and where that effort is going to be directed. Determining scope is…

Adam Baldwin in ^Lift Security

Nov 28, 2016

Pillaging Distributed Version Control 5 years later

5 years ago at DEFCON 19 I gave a talked titled “Pillaging DVCS repos for fun and profit.” The technique & tool I outlined in that talk has been very fruitful through out the years and plenty of security consultants have told me that this…

Adam Baldwin in ^Lift Security

Jan 13, 2017

Make your site more secure than Rudy Giuliani’s security firm

Nicholas Starke in ^Lift Security

Nov 21, 2016

Detecting Page Swap from JavaScript

I saw a blog post come across twitter over the weekend (http://blog.skylined.nl/20161118001.html) in which the author mentions the following as an aside:

Side note: did you know you could make a pretty good estimate of the amount of RAM…

npm, Inc. in ^Lift Security

Apr 10, 2018

npm, Inc. acquires ^Lift Security and the Node Security Platform

These were the top 10 stories published by ^Lift Security; you can also dive into yearly archives: 2016, 2017, and 2018.

About

^Lift Security

^Lift Security team is a part of npm, Inc. You can see what we’re up to at npmjs.com and at blog.npmjs.org.

More information