Gonçalo Valério @dethos@s.ovalerio.net

"OpenSSH ssh-agent Shielded Private Key Extraction (x86_64 Linux)"

https://security.humanativaspa.it/openssh-ssh-agent-shielded-private-key-extraction-x86_64-linux/

#security #ssh

"Qualys Research Team has discovered a size_t-to-int type conversion vulnerability in the Linux Kernel’s filesystem layer affecting most Linux operating systems. Any unprivileged user can gain root privileges on a vulnerable host by exploiting this vulnerability in a default configuration."

https://www.openwall.com/lists/oss-security/2021/07/20/1

#security #infosec #linux

"Windows Hello bypassed using infrared image"

https://therecord.media/windows-hello-bypassed-using-infrared-image/

"biometrics", I think it is still preferable to rely on old fashioned passphrases.

#security #infosec #windows

"Remote code execution in cdnjs of Cloudflare"

https://blog.ryotak.me/post/cdnjs-remote-code-execution-en/

#security #netsec #infosec

"How we prevented subdomain takeovers"

https://tech.ovoenergy.com/how-we-prevented-subdomain-takeovers-and-saved-000s/

#security #netsec

"Python Best Practices for a New Project in 2021"

https://mitelman.engineering/blog/python-best-practice/automating-python-best-practices-for-a-new-project/

#python

So Github's Copilot is now suggesting secrets committed to other public repositories?

https://twitter.com/alexjc/status/1411966249437995010

The ultimate responsibility lies on who committed those secrets, but this could have been avoided since Copilot is acting as a distributor of those leaked secrets.

#security #infosec #github #copilot

"Windows 11: TPMs and Digital Sovereignty"

https://secret.club/2021/06/28/windows11-tpms.html

#security #privacy #windows

Django: Potential SQL injection via unsanitized QuerySet.order_by() input

https://www.djangoproject.com/weblog/2021/jul/01/security-releases/

#django #python #security

"Django for Startup Founders: A better software architecture for SaaS startups and consumer apps"

https://alexkrupp.typepad.com/sensemaking/2021/06/django-for-startup-founders-a-better-software-architecture-for-saas-startups-and-consumer-apps.html

Interesting read 👍

#python #django #saas

"The Most Dangerous Censorship"

https://edwardsnowden.substack.com/p/on-censorship-pt-1

#speech #censorship

"WD My Book Live users wake up to find their data deleted"

https://arstechnica.com/gadgets/2021/06/mass-data-wipe-in-my-book-devices-prompts-warning-from-western-digital/

#security

"What's Inside the EU Green Pass QR Code?"

https://gir.st/blog/greenpass.html

"Linux marketplaces vulnerable to RCE and supply chain attacks"

https://positive.security/blog/hacking-linux-marketplaces

#security #linux

"All Freenode Channels and Users Gone"

https://www.reddit.com/r/linux/comments/o0263h/all_freenode_channels_and_users_gone/

It seems I no longer have an account on freenode. **I will not create a new one. So don't try to reach me through that network**.

"A Project of One's Own"

http://paulgraham.com/own.html

"PGP Marks 30th Anniversary"

https://philzimmermann.com/EN/essays/PGP_30th/

#security #encryption #pgp #openpgp