"How to (not) use Docker to share your password with hackers"
"Bundler is Still Vulnerable to Dependency Confusion Attacks"
"Sending webhooks securely"
@aral wow, this subscription abuse and the idea of a person not owning the item that was bought has to stop. In this case it is not a service that is continuously being provided, so a subscription model makes no sense.
"Git Signature Operations via HashiCorp Vault"
"Office 365 leaking BCC domain name"
"A practical guide to writing secure Dockerfiles"
So it seems that "not upgrading docker right away" is paid feature on Windows and Mac 🤔
"QNAP ships/shipped NAS backup software with hardcoded credentials"
Here's the video of today's call with the European Commission, including my talk on "Networked Communities as Essential Infrastructure"! https://conf.tube/videos/watch/9bb55418-5a0d-4bcd-8d41-f2dab5d531c4
Apple sued for terminating account with $25,000 worth of apps and videos
(submitted by imgabe)
"Exploiting vulnerabilities in Cellebrite UFED and Physical Analyzer from an app's perspective"
Full-stack developer, advocate of a free, secure and safe Internet. Nature lover and sports enthusiast.
[Header photo by Colin Watts, source Unsplash]
This is a personal and private instance.