Gonçalo Valério @dethos@s.ovalerio.net

"AWS RDS Vulnerability Leads to AWS Internal Service Credentials"

https://blog.lightspin.io/aws-rds-critical-security-vulnerability

#security #aws #rds

"Unikernels"

https://unzip.dev/0x005-unikernels/

#unikernels

"What is Money, Anyway?"

https://www.lynalden.com/what-is-money/

Long but interesting read.

"Stripe: Thinking Like a Civilization"

https://www.readthegeneralist.com/briefing/stripe

🤔

"Early Security for Startups"

https://devd.me/log/posts/startup-security/

Lucid tips!

#security #infosec #startups #saas

"CERT-EU Security Guidance 22-002 - Hardening Signal"

https://media.cert.europa.eu/static/WhitePapers/TLP-WHITE-CERT-EU_Security_Guidance-22-002_v1_0.pdf

#security #infosec #signal #chat

"Longer term, it’s likely these weaponizations are like spitting into the wind: The downsides of vandalizing open source projects far outweigh any possible benefit, and the blowback will ultimately damage the projects and contributors responsible. By extension, all of open source is harmed."

https://opensource.org/blog/open-source-protestware-harms-open-source

#protestware #opensource

https://www.sewerynszwarocki.pl/those-who-cannot-learn-from-history-are-doomed-to-repeat-it/

😓

So... "protestware" is now a thing. 🤨

https://krebsonsecurity.com/2022/03/pro-ukraine-protestware-pushes-antiwar-ads-geo-targeted-malware/

#opensource #supplychain #security

"Alert: peacenotwar module sabotages npm developers in the node-ipc package to protest the invasion of Ukraine"

https://snyk.io/blog/peacenotwar-malicious-npm-node-ipc-package-vulnerability/

#security #npm #nodejs #javascript

"Some discouraging anecdotes on how services handle account deletions"

https://www.ctrl.blog/entry/account-deletions-2021.html

wow, this is really sad!

#gdpr #web

"Microsoft is testing ads in the Windows 11 File Explorer"

https://www.bleepingcomputer.com/news/microsoft/microsoft-is-testing-ads-in-the-windows-11-file-explorer/

Why use such an OS? One that you no longer own or control. There has to be a very strong reason. 🤯

#windows #microsoft #ads

"An unexpected Redis sandbox escape affecting only Debian, Ubuntu, and other derivatives"

https://www.ubercomp.com/posts/2022-01-20_redis_on_debian_rce

#security #redis #ubuntu #debian

https://www.youtube.com/watch?v=xguam0TKMw8

🤔

🤔

https://danielmiessler.com/blog/crypto-exciting-changes-incentives/

"The perils of the “real” client IP"

https://adam-p.ca/blog/2022/03/x-forwarded-for/

Long but a good read

#security #http #webservers

"Unveiling the Anonymous Author: Stylometry Techniques"

https://serhack.me/articles/unveiling-anonymous-author-stylometry-techniques/