@Eggfreckles that headstrap ...

#TGIF game: Name your favorite useless infoleaks commonly present in #pentest reports!

I'll start:

- Internal IP leak (esp. on intranet services)
- HTTP Server header exposes target runs Apache 2.6/IIS8/...

#SpamBug #SPUG

#reverseengineering

(/by pupOnSecurity@X)

#Electron hackers: What the hell does "just pass" mean in this context?

The example seems to "just pass" the callback to ipcRenderer.on(), but I tested it, and .sender is filtered from the event object when it's received by the callback. (Also I really hope they don't share vulnerable examples)

Taken from: https://www.electronjs.org/docs/latest/tutorial/ipc#2-expose-ipcrendereron-via-preload

@jacob

Shit, now I know what I'll do this afternoon instead of finding actual 0days...

https://wh40k.lexicanum.com/wiki/Zero_Day_Exploit_(Short_Story)

What are typical #vulnerability types of 90s/early 2000s that are now more or less irrelevant/rare?

(I'm less interested in easy to exploit memory corruptions, more in "logical" bugs)

This explains a lot of tech-Fedi

@molly0xfff Is the font supposed to look like this? I don't usually care about these things but this one is annoyingly hard to read for me.

This piece on TUI IDE's[1] reminded me of an interesting learning experience I had with programming:

Like most in my country back in the day, I didn't know *any* English[2]. So when a compiler error like the one on the image came up (after you somehow figured out which menu to choose to compile) you mostly had the position of the problem, but no info about what the problem actually was.

I think this helped developing a "debugging eye" that helps with spotting inconsistencies.

[1] https://blogsystem5.substack.com/p/the-ides-we-had-30-years-ago-and
[2] Talk about being unprivileged in IT...

I was pretty surprised to find these #Chinese (?) inscriptions on an old cannon in Budapest. Can someone tell me what they say?

I meant to say...

@jasonkoebler

@simplenomad Batman approves!

@foone

Is it just me or those "tooltips" at #37c3 streaming site are super annoying? /cc @c3voc

@bert_hubert I'm sure ultramarines will handle that situation too.

@jerry