Gabe Roy

Machine Learning Fundamentals # What is Machine Learning? # Artificial Intelligence (AI) and Machine Learning (ML) are often used to describe the same things but they actually represent some distinct concepts. AI is a more broad term used to describe the development of any intelligent systems that aim to perform tasks that usually require human cognition - things like learning from experience, chatting, recognizing objects - things we don’t really have to think about but are a bit more difficult to get a computer to do. The sorts of tasks we try to design intelligent systems to perform have shaped the different key areas of the field:

Introduction # I initially made a blog post called ‘Understanding Kerberoasting’ that I since removed because I feel it didn’t quite go into enough detail and cover everything I wanted it to.

Introduction # We have talked about CSRF and XSS before, but here we will focus on exploits in modern web applications that typically require the writing of custom payloads for accomplishing specific tasks. We also want to walk through the common security measures in web applications like Same-Origin Policy, Cross-Origin Resource Sharing, SameSite Cookies, and so on. The reason CSRF and XSS are often paired together in this context is because forging a request on another user’s behalf often involves multiple steps other than just clicking on a link, stored XSS (or in some cases reflected XSS) can be used to deliver a CSRF payload to a victim.