Gonçalo Valério @dethos@s.ovalerio.net

"Bluetooth LE’s anti-tracking technology beaten"

https://nakedsecurity.sophos.com/2019/07/16/bluetooth-les-anti-tracking-technology-beaten/

#security #netsec #ble #bluetooth

Awesome news. Well deserved.

https://www.blender.org/press/epic-games-supports-blender-foundation-with-1-2-million-epic-megagrant/

#opensource #blender #epicgames

https://fosterelli.co/developers-dont-understand-cors

In fact that justification for the "commands based on image size" was a little strange.

Super Small Summary:
* Zoom for Mac lets any website force your client to join a call
* With the camera turned on
* Installs a web-server that is not deleted when you remove the app
* That web-server can be used to remotely reinstall the zoom app and do some sort of DOS on your machine.

👏

https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5

(Not patched yet)

#security #infosec #netsec

"strong_password v0.0.7 rubygem hijacked"

https://withatwist.dev/strong-password-rubygem-hijacked.html

#security #infosec #ruby

"Learnings from modern app sec teams"

https://blog.sqreen.com/getting-security-to-scale-learnings-from-modern-app-sec-teams/

Small and useful intro to threat modeling 👌

https://hackernoon.com/how-to-get-started-with-threat-modeling-before-you-get-hacked-1bf0ea3310df

#security #infosec

Nice hack and can easily be adapted to use other ways to sending the notification. 🤔

https://8192.one/post/ssh_login_notification_withtelegram/

#security #netsec

Couldn't agree more.
Disabling image loading on your email clients (default option in many of them) is a must.

https://mikeindustries.com/blog/archive/2019/06/superhuman-is-spying-on-you

#privacy

"Absence of certain features in IRC considered a feature" 🤔

https://drewdevault.com/2019/07/01/Absence-of-features-in-IRC.html

Nice post about the lessons learned during a long career in software development.

https://blog.juliobiason.net/thoughts/things-i-learnt-the-hard-way/

"Getting 2FA Right in 2019"

https://blog.trailofbits.com/2019/06/20/getting-2fa-right-in-2019/

#security #2fa

"XSSing Google Employees — Blind XSS on googleplex.com"

https://appio.dev/vulns/googleplex-com-blind-xss/

#infosec #security

"Improve Serialization Performance in Django Rest Framework"

https://hakibenita.com/django-rest-framework-slow

#django #drf #python #webdev