Gonçalo Valério @dethos@s.ovalerio.net

"Gearbest Hack: Hundreds of Thousands Affected Daily by Huge Data Breach"

https://www.vpnmentor.com/blog/gearbest-hack/

Always knew that a large amount of these privacy policies we see on many websites are just boilerplate and complete BS.

#security #databreach #infosec #netsec

Some recently disclosed vulnerabilities rails developers should be aware of:

- Denial of Service Vulnerability in Action View - https://seclists.org/oss-sec/2019/q1/177

- File Content Disclosure in Action View - https://seclists.org/oss-sec/2019/q1/178

- Possible Remote Code Execution Exploit in Rails Development Mode - https://seclists.org/oss-sec/2019/q1/176

Upgrade your apps.

#rails #ror #security #netsec #appsec #ruby

"Why is no one signing their emails?"

https://arp242.net/weblog/signing-emails.html

Good point. We should push for this to be more common.

#security #email

"3 million vehicles can be unlocked remotely via trivially discovered web API vulnerability"

https://www.pentestpartners.com/security-blog/gone-in-six-seconds-exploiting-car-alarms/

"unhackable" is a very strong word.

#security #netsec #appsec

Very interesting chat about "DevOps at Amazon":

https://www.youtube.com/watch?v=FlZm3nFMIAM

#devops #devsecops #security #software

https://www.youtube.com/watch?v=CyUh9wOp_Rw

#europe #eu #article13

Password Managers: Under the Hood of Secrets Management

https://www.securityevaluators.com/casestudies/password-manager-hacking/

It would be nice read a similar analysis for password managers that also run on Linux such as: keepassX, keepassXC, pass, etc.

#security #infosec #password-manager #passwords

"Incidents — Trends from the Trenches"

https://m.subbu.org/incidents-trends-from-the-trenches-e2f8497d52ed

An overview about the causes of production incidents

"Delegate outcomes, not activities."

https://m.signalvnoise.com/delegate-outcomes-not-activities/

"German Data Privacy Commissioner Says Article 13 Inevitably Leads to Filters, Which Inevitably Lead to Internet "Oligopoly"

https://www.eff.org/deeplinks/2019/03/german-data-privacy-commissioner-says-article-13-inevitably-leads-filters-which

#europe #eu #article13

Grouping logging output in the browser console:

https://mariusschulz.com/blog/advanced-javascript-logging-using-console-group

#javascript

"will only vote for politicians who vote against Article 13", without any doubt.

https://pledge2019.eu

#europe #article13 #eu

"ETS Isn't TLS and You Shouldn't Use It"
https://www.eff.org/deeplinks/2019/02/ets-isnt-tls-and-you-shouldnt-use-it

#security #tls