Menu

Close
  • Blog Home
  • Main Website
Subscribe
Technical Musings Menu
Justin Bull's Picture

Justin Bull

Toronto, Canada https://www.justinbull.ca 11 posts
Page 1 of 1

Keeping the Heat: 1 gallon homebrews with insulated stainless steel mash tuns

Hey there. 👋 Novice homebrewing is great. Losing temperature during the mash isn't. This post is all about keeping temps with small batch sizes and stainless steel »

Justin Bull Justin Bull on Research, Homebrew 24 August 2019

CVE-2018-1000211: Public apps can't revoke tokens in Doorkeeper

TL;DR: If a public client respects the RFC 7009 spec and does not authenticate the revocation request, then Doorkeeper does not actually revoke the access »

Justin Bull Justin Bull on Research, Security, Ruby on Rails 16 July 2018

CVE-2018-1000088: Stored XSS in Doorkeeper

Software Description Doorkeeper is a Ruby gem that makes it easy to introduce OAuth 2 provider functionality to a Rails or Grape application. Depending on how »

Justin Bull Justin Bull on Security, Ruby on Rails, Research 21 February 2018

Debugging exceptions Rails 5 jbuilder views

There comes a time where regardless of your unit testing you have errors in production. But, alas, the exception isn't in your controller itself but the »

Justin Bull Justin Bull on Ruby on Rails 10 October 2017

CVE-2015-7225: OTP reuse in Devise-Two-Factor

TL;DR: Once a user successfully provides a valid OTP, that OTP can be replayed for the duration of the timestep. Upgrade to version 2.0. »

Justin Bull Justin Bull on Security, Ruby on Rails, Research 22 May 2017

CVE-2016-6582: Doorkeeper fails to revoke OAuth 2.0 public client's access token in revocation request

TL;DR: If a public client respects the RFC 7009 spec and does not authenticate the revocation request, then Doorkeeper does not actually revoke the access »

Justin Bull Justin Bull on Security, Ruby on Rails, Research 22 May 2017

Deciphering Android's bootanimation.zip desc.txt

Update (May, 2017): AOSP has written a FORMAT.md document that is more up-to-date than this article. It will likely be the living document for detailing »

Justin Bull Justin Bull 02 May 2016

RL Grime's Core music video screensaver using Quartz Composer

TL;DR you can download the RL Grime screensaver I build here (Mac OS X only) RL Grime's music video For some reason my brain absolutely »

Justin Bull Justin Bull 16 November 2014

How to configure CSP in your Ember CLI app

If this post is greek to you, take a look at my Ember CLI and Content Security Policy (CSP) blog post. Earlier this month, I had »

Justin Bull Justin Bull on Security, Ember 16 November 2014

Ember CLI and Content Security Policy (CSP)

As of Ember CLI v0.0.47 there is now built-in support for Content Security Policy in our apps! WTF is a CSP? It's a beautiful »

Justin Bull Justin Bull on Security, Ember 12 October 2014

Implementing a Responsible Disclosure policy with PGP

I had the opportunity to help my employer, FreshBooks, implement a responsible disclosure policy. As it turns out, it's very difficult to offer a PGP key »

Justin Bull Justin Bull on Security, PGP 20 March 2014
Page 1 of 1
Technical Musings © 2025
Proudly published with Ghost