Show more

"Discovering a zero day and getting code execution on Mozilla's AWS Network"

blog.assetnote.io/bug-bounty/2

The issue was on the webpagetest project but it was a nice read nevertheless.

"Gearbest Hack: Hundreds of Thousands Affected Daily by Huge Data Breach"

vpnmentor.com/blog/gearbest-ha

Always knew that a large amount of these privacy policies we see on many websites are just boilerplate and complete BS.

Some recently disclosed vulnerabilities rails developers should be aware of:

- Denial of Service Vulnerability in Action View - seclists.org/oss-sec/2019/q1/1

- File Content Disclosure in Action View - seclists.org/oss-sec/2019/q1/1

- Possible Remote Code Execution Exploit in Rails Development Mode - seclists.org/oss-sec/2019/q1/1

Upgrade your apps.

"Why is no one signing their emails?"

arp242.net/weblog/signing-emai

Good point. We should push for this to be more common.

170 years of German publishers demanding special copyrights for the press because of new technology.

The snippet taxes of Article 11 will be used to enrich publishers at the expense of actual journalism.

#Artikel11 #SaveYourInternet

techdirt.com/articles/20190307

"3 million vehicles can be unlocked remotely via trivially discovered web API vulnerability"

pentestpartners.com/security-b

"unhackable" is a very strong word.

"W3C approves #WebAuthn as the web standard for password-free logins"

webauthn.guide/

Password Managers: Under the Hood of Secrets Management

securityevaluators.com/casestu

It would be nice read a similar analysis for password managers that also run on Linux such as: keepassX, keepassXC, pass, etc.

-manager

Show more
Social feed

This is a personal and private instance.