HN user

chigley

11 karma

[ my public key: https://keybase.io/chigley; my proof: https://keybase.io/chigley/sigs/br4shSpiFEeUcAgx0btAHgHcELj0nqCAwYaT7S5e80o ]

Posts0
Comments5
View on HN
No posts found.

I seem to be stuck on the first tactic (not in the chess sense). I complete it, hit the green "Next Tactic" button, and it just gives me the same one again! It's Tactic 20628, which is the first one I was given after telling the site I'm an intermediate player. Reloading the Train page puts me back on the same tactic too. Any ideas?

Loving the site so far apart from the above problem, though! Getting back into chess was one of the items on my to-do list for 2014. The Learn resources are looking like they'll be pretty useful. Great job!

I ran the Qualsys SSL Labs test on the site[0]. It reports an incomplete chain; that is, the server doesn't supply the intermediate certificate required (Entrust Certification Authority - L1C) to bridge the gap between the site's certificate and the Entrust certificate in most browser/OS stores.

This intermediate certificate must instead be downloaded by the browser. I suspect, therefore, that some browsers do not have the intermediate certificate and so the certificate cannot be validated.

[0] https://www.ssllabs.com/ssltest/analyze.html?d=isapps.acxiom...

Therefore, if we are copying into s2 and we only leak data after the 4th character, we can assume that by default in the uninitialized stack there is a null at s23.

I'm very inexperienced with reverse-engineering, and haven't finished the article yet, but is "s23" here a typo? I can't find any other reference to it in the article, and it doesn't make sense to me. Should it be "s2"? Thanks