Gonçalo Valério @dethos@s.ovalerio.net

"Discovering Unsecured Firebase Databases"

https://goonsecurity.com/discovering-unsecured-firebase-databases/

#security #infosec #firebase

"Firefox 79 includes protections against redirect tracking"

https://blog.mozilla.org/security/2020/08/04/firefox-79-includes-protections-against-redirect-tracking/

#security #firefox #tracking

"Windows 10: HOSTS file blocking telemetry is now flagged as a risk"

https://www.bleepingcomputer.com/news/microsoft/windows-10-hosts-file-blocking-telemetry-is-now-flagged-as-a-risk/

🤷‍♂️

#security #windows #telemetry

Small intro to XSS and details to take into consideration when developing websites using the Django Framework

https://tonybaloney.github.io/posts/xss-exploitation-in-django.html

#python #django #security

"Zoom Security Exploit – Cracking private meeting passwords"

https://www.tomanthony.co.uk/blog/zoom-security-exploit-crack-private-meeting-passwords/

#security #infosec #zoom

"New" security features added to recent versions of Chrome (and Firefox).

https://security.googleblog.com/2020/07/towards-native-security-defenses-for.html

#security #web #browsers

"HTML sanitization bypass in Ruby Sanitize < 5.2.1"

https://research.securitum.com/html-sanitization-bypass-in-ruby-sanitize-5-2-1/

#security #web #ruby

"Breach Exposed More Than One Million DNA Profiles On A Major Genealogy Database"

https://www.buzzfeednews.com/article/peteraldhous/hackers-gedmatch-dna-privacy

#security #privacy

"Clipboard injection on the Financial Times"

https://andrewyoon.art/blog/ft-clipboard

"The European Court of Justice has declared invalid one of the two legal methods companies use to transfer EU citizens' data to the United States."

https://www.bbc.com/news/technology-53418898

#eu #privacy #security

"13% of my website visitors block Google Analytics"

https://markosaric.com/google-analytics-blocking/

The real value can be even bigger, since the other analytics tool, used in the comparison, could also have been blocked.

"Cultivate good ideas. But don't be in a rush to execute on all of them; let the bad ideas fall away. Wait until you feel the strong pull of the market; then start executing."

https://justinjackson.ca/good-ideas

"django-two-factor-auth versions 1.11 and before store the user's password in clear text in the user session (base64-encoded)."

https://github.com/advisories/GHSA-vhr6-pvjm-9qwf

#security #django #python #2fa

"Estonian Electronic Identity Card: Security Flaws in Key Management"

https://www.usenix.org/conference/usenixsecurity20/presentation/parsovs

Nice read

#security #infosec

epidemiology 101 with nice playable simulations (related to covid-19)

https://ncase.me/covid-19/

#covid19 #simulations

"Fixers Know What ‘Repairable’ Means—Now There’s a Standard for It"

https://de.ifixit.com/News/35879/repairability-standard-en45554

👍

#righttorepair

"Written communication is remote work super power"

https://snir.dev/blog/remote-async-communication/