Gonçalo Valério @dethos@s.ovalerio.net

"Security hardening for GitHub Actions"

https://docs.github.com/en/free-pro-team@latest/actions/learn-github-actions/security-hardening-for-github-actions

"The Surprising Impact of Medium-Size Texts on PostgreSQL Performance"

https://hakibenita.com/sql-medium-text-performance

#postgresql

"GitHub Gist - Account takeover via open redirect"

https://devcraft.io/2020/10/19/github-gist-account-takeover.html

#security #oauth #infosec

"The Zerologon vulnerability has been reported to affect some versions of QTS.

If exploited, this elevation of privilege vulnerability allows remote attackers to bypass security measures via a compromised QTS device on the network. The NAS may be exposed to this vulnerability if users have configured the device as a domain controller..."

https://www.qnap.com/en/security-advisory/QSA-20-07

#security #qnap

"Discord Desktop app RCE "

https://mksben.l0.cm/2020/10/discord-desktop-rce.html

#security #infosec #discord #electron

"Chrome exempts Google sites from user site data settings"

https://lapcatsoftware.com/articles/chrome-google.html

Is anyone surprised?

#privacy #google

"Not all attacks are equal: understanding and preventing DoS in web applications"

https://jacobian.org/2020/sep/11/analyzing-dos-vulnerabilities/

#security #netsec #dos

"Introduction to HashiCorp Boundary"

https://www.youtube.com/watch?v=tUMe7EsXYBQ

Interesting, looking forward to see how it evolves.

#security

"Spotify: happy to let you move playlists to their service, unwilling to let you move them from their service."

https://daringfireball.net/linked/2020/10/12/spotify-songshift

🤷‍♂️ so open

"Google’s Android Security & Privacy team has launched the Android Partner Vulnerability Initiative (APVI) to manage security issues specific to Android OEMs."

https://security.googleblog.com/2020/10/announcing-launch-of-android-partner.html

#security #android

"Typosquatting Is About More Than Typos"

https://www.iqt.org/bewear-python-typosquatting-is-about-more-than-typos/

#typosquatting #python #security

"Gitter is joining the Matrix ecosystem and will become the first major existing chat platform to switch to natively speaking Matrix!"

https://matrix.org/blog/2020/09/30/welcoming-gitter-to-matrix

Awesome news.

#matrix #chat

"Samsung TV owners complain about increasingly obtrusive ads"

"On its webpage intended for business partners, Samsung boasts that is has 50 million Smart TVs in operation and that it has the industry’s largest ACR data set."

https://www.flatpanelshd.com/news.php?subaction=showfull&id=1583755244

So ... we no longer own our things, apparently we just buy direct sales channels into our homes 🤔

#privacy #iot

"What is the Value of Browser Diversity?"

https://daverupert.com/2020/09/the-value-of-browser-diversity/

#web