New LTS version of Django released. 👍 good stuff.
"Facebook Stored Hundreds of Millions of User Passwords in Plain Text for Years"
An example of the File Content Disclosure one:
"Four Wikipedias to ‘black out’ over EU Copyright Directive"
I think all of them should have participated in the protest
"Discovering a zero day and getting code execution on Mozilla's AWS Network"
The issue was on the webpagetest project but it was a nice read nevertheless.
130 EU businesses sign open letter against Copyright directive Art. 11 & 13 https://nextcloud.com/blog/130-eu-businesses-sign-open-letter-against-copyright-directive-art-11-13/ #nextcloud #pressrelease #blog #news
Some recently disclosed vulnerabilities rails developers should be aware of:
- Denial of Service Vulnerability in Action View - https://seclists.org/oss-sec/2019/q1/177
- File Content Disclosure in Action View - https://seclists.org/oss-sec/2019/q1/178
- Possible Remote Code Execution Exploit in Rails Development Mode - https://seclists.org/oss-sec/2019/q1/176
Upgrade your apps.
As requested, I also uploaded it to PeerTube: https://peertube.social/videos/watch/d9bd2ee9-b7a4-44e3-8d65-61badd15c6e6
170 years of German publishers demanding special copyrights for the press because of new technology.
The snippet taxes of Article 11 will be used to enrich publishers at the expense of actual journalism.
The ACME Protocol is an IETF Standard https://letsencrypt.org/2019/03/11/acme-protocol-ietf-standard.html
"3 million vehicles can be unlocked remotely via trivially discovered web API vulnerability"
"unhackable" is a very strong word.
Password Managers: Under the Hood of Secrets Management
It would be nice read a similar analysis for password managers that also run on Linux such as: keepassX, keepassXC, pass, etc.