Gonçalo Valério @dethos@s.ovalerio.net

"Data Exfiltration via CSS + SVG Font"

https://mksben.l0.cm/2021/11/css-exfiltration-svg-font.html

🤔

#security #web #webdev
#appsec

"Using PostgreSQL Views in Django"

https://pganalyze.com/blog/postgresql-views-django-python

#python #django #postgresql

"An Engineer's Hype-Free Observations on Web3 (and its Possibilities)"

https://www.psl.com/feed-posts/web3-engineer-take

🤔

"Systemd service hardening"

https://ruderich.org/simon/notes/systemd-service-hardening

#security #systemd

"GoDaddy Announces Security Incident Affecting Managed WordPress Service"

https://www.sec.gov/Archives/edgar/data/1609711/000160971121000122/gddyblogpostnov222021.htm

#security #infosec #godaddy

"XSS bug in Google Chrome’s ‘New Tab’ page bypassed security features"

https://portswigger.net/daily-swig/dangerous-xss-bug-in-google-chromes-new-tab-page-bypassed-security-features

#security #chrome

"Second, on November 2 we received a report to our security bug bounty program of a vulnerability that would allow an attacker to publish new versions of any npm package using an account without proper authorization. We quickly validated the report, began our incident response processes, and patched the vulnerability within six hours of receiving the report."

https://github.blog/2021-11-15-githubs-commitment-to-npm-ecosystem-security/#security-issues-related-to-the-npm-registry

oucch...

#security #npm #javascript #supplychain

"Microsoft Calls Firefox’s Browser Workaround “Improper,” Will Block It"

https://www.howtogeek.com/768727/microsoft-calls-firefoxs-browser-workaround-improper-will-block-it/

Not your computer... 🙄

#windows #microsoft

"Securing your digital life, part one: The basics"

https://arstechnica.com/features/2021/10/securing-your-digital-life-part-1/

The basics.

#security #basics #privacy

"Apple isn’t actually patching all the security holes in older versions of macOS"

https://arstechnica.com/gadgets/2021/11/psa-apple-isnt-actually-patching-all-the-security-holes-in-older-versions-of-macos/

#security #macos #apple

"How to prevent email spoofing on your domain, using an unholy combination of silly standards."

https://simonandrews.ca/articles/how-to-set-up-spf-dkim-dmarc

#email #security

https://twitter.com/tomahock/status/1459134223739142144

wow 🤯

#security #portugal

New release of PostgreSQL:

https://www.postgresql.org/about/news/postgresql-141-135-129-1114-1019-and-9624-released-2349/

2 important security fixes:

* Server processes unencrypted bytes from man-in-the-middle
* libpq processes unencrypted bytes from man-in-the-middle

#security #postgresql

"You should use forums rather than Slack/Discord to support developer community."

https://www.mooreds.com/wordpress/archives/3451

Totally agree.

#opensource #tech #communities

"This project will only take 2 hours"

https://web.eecs.utk.edu/~azh/blog/thisprojectwillonlytake.html

Exactly...

"npm install is curl | bash"

https://btao.org/2021/09/09/npm-install-is-curl-bash/

#security #programming #webdev