Gonçalo Valério @dethos@s.ovalerio.net

"How containers work: overlayfs"

https://jvns.ca/blog/2019/11/18/how-containers-work--overlayfs/

#docker #lxc #containers

"The Service Mesh: What Every Software Engineer Needs to Know about the World's Most Over-Hyped Technology"

https://servicemesh.io/

Hmmm : thinking:

"The case of the $20000 cookie"

https://arstechnica.com/information-technology/2019/12/hackerone-breach-lets-outside-hacker-read-customers-private-bug-reports/

> The outsider ... had been communicating late last month with one of the company’s security analysts. In one message, the HackerOne analyst sent the community member parts of a cURL command that mistakenly included a valid session cookie that gave anyone with possession of it the ability to read and partially modify data the analyst had access to.

#security #infosec #netsec

"Authentication vulnerabilities in OpenBSD"

https://seclists.org/oss-sec/2019/q4/120

(A patch that fixes the issue has already been released)

#security #netsec #infosec

"Spot the security problem" advent.
(Java edition)

https://www.ripstech.com/java-security-calendar-2019/

"Visualizing the distribution of trusted CA’s"

https://michaelhendrickx.com/201911-certgraph-visualizing-the-distribution-of-trusted-cas.html

#security

"Learn two languages"

https://letterstoanewdeveloper.com/2019/01/28/learn-two-languages/

Solid advise! Not just 2 but at least 2.

Tracking the trackers

https://trackingthetrackers.com/

#privacy

https://learnxinyminutes.com/

hmmm, might be useful to have a very quick look on how a given tool or programming language works.

Small intro to accessibility

https://thoughtbot.com/blog/intro-to-accessibility

#a11y #web #webdev

"Help stop the sale of Public Interest Registry to a Private Equity Firm"

https://savedotorg.org

#org #internet #dns

"Internet world despairs as non-profit .org sold for $$$$ to private equity firm, price caps axed"

https://www.theregister.co.uk/2019/11/20/org_registry_sale_shambles/

🤦‍♂️

#internet #dns #org

"We can't send email more than 500 miles"

https://web.mit.edu/jemorris/humor/500-miles

Entertaining story :)

"New NextCry Ransomware Encrypts Data on NextCloud Linux Servers"

https://www.bleepingcomputer.com/news/security/new-nextcry-ransomware-encrypts-data-on-nextcloud-linux-servers/

#security #nextcloud

Nice summary about how JWTs work and how they can be exploited.

https://github.com/ticarpi/jwt_tool/wiki

#security #infosec #netsec #jwt

"TL;DR: an attacker can mount a RIDL attack despite the in-silicon mitigations/microcode patches published in May 2019 being in place."

https://mdsattacks.com/#ridl-ng

#security #infosec #cybersecurity #cpu

"Keylogging users via Slack themes "

https://fletchto99.dev/2019/november/slack-vulnerability/

#security #infosec