Posts
3051Following
703Followers
1554
repeated
Transmission64 :c64:
transmission64@c.im
And Transmission64 is live. Head on over to https://t64.to/watch .
0
2
0
repeated
🏳️🌈🖖🏽
repeated
Frederik Braun �
freddy@security.plumbingthrough the machine-generated metadata and look at the titles of each blog post. For those that are recognized as new (it uses a small ini file for config and caching), then it asks whether to publish to my syndication targets (currently mastodon & bluesky), similar to how `git add -p` would. Simple URL+title as the suggestion but allows to reply with yes/no/edit to improve what is being posted. Source here:
https://github.com/freddyb/homepage/blob/main/rss2posse.py
0
1
0
repeated
Frederik Braun �
freddy@security.plumbingI wrote some cool scripts that I want to share with the world but I do not want to start being in the business of maintaining another open source project. I guess I will just describe it in my blog and tell the world that it's cool and they can use it?
Anyway, I now have an #indieweb #POSSE python script for my homepage.
Whenever I build my blog, it also generates an XML Atom feed (many static site generators do that). After adding an article and building, I can loop ... 1/2
3
1
0
buherator
buheratorhttps://github.com/v-p-b/libfuzzer_kfx/blob/main/C2LIBAFL.md
I nice part of making an archive of my Twitter posts is that I realize I wrote stuff like this o.O #fuzzing
0
0
3
0
0
1
buherator
buheratorhttps://github.com/v-p-b/rss2bsky.py
#RSS #Syndication #Bluesky #POSSE
0
0
3
buherator
buheratorShow content
Secure trust data mining linux cache poisoning encapsulation cyclic redundancy check cloud computing PKI signature FTP hijacking. Trust ephemeral port IP forwarding linux stream cipher port exponential backoff internet control message protocol race condition full duplex exposure IP spoofing. Challenge-handshake authentication protocol public key hypertext markup language topology war dialing disaster recovery plan decryption authorized. Account harvesting masquerade NAT stream cipher, cookie intranet certificates patch covert channel penetration test tunnel IP forwarding egress filtering.
https://www.securityipsum.com/
Ephemeral port reverse engineer fingerprint form-based authentication day zero. FTP UDP address resolution protocol boot sector, PPTP ransomware business continuity plan intrusion detection. IP flooding authentication disaster recovery plan corruption decryption MD5 dictionary attack socket egress filtering fragment digital signature exponential backoff worm. Reverse proxy encapsulation shell tunnel bastion host.
0
0
1
repeated
April King
april@macaw.socialHandling Cookies is a Minefield:
inconsistencies in the HTTP cookie specification and its implementations have caused a situation where countless websites (including Facebook, Netflix, Okta, WhatsApp, Apple, etc.) are one small mistake away from locking their users out.
https://grayduck.mn/2024/11/21/handling-cookies-is-a-minefield/
3
10
0
repeated
daniel:// stenberg://
bagder@mastodon.socialDavid Schinazi mentioned @april's cookie blog post and I'm sorry but I had to do a "I told you so".
On the httpbis list.
https://lists.w3.org/Archives/Public/ietf-http-wg/2024OctDec/0231.html
1
1
0
repeated
repeated
Hexacorn 
hexacorn@infosec.exchange
How to debug Windows service processes in the most old-school possible way...
0
1
1
repeated
Max Maass
hacksilon@infosec.exchange
We found our first #Y2K38 bug today, in #Keycloak‘s Client credential rotation feature. https://github.com/keycloak/keycloak/issues/35104
Will probably not be the last one - the runup to 2038 will be interesting.
1
5
0
repeated
2600 Magazine
2600@mastodon.onlineHOPE XV videos just dropped on YouTube! https://www.youtube.com/channel2600
1
1
0
buherator
buherator"protects against malware through rate-limiting and anti-hammering measures"
"biometric credentials protect your privacy and actively authenticate you to query your semantic indices and view associated snapshots."
Sounds like MS did their homework. Still hate the idea though...
1
0
3
buherator
buheratorhttps://blogs.windows.com/windowsexperience/2024/09/27/update-on-recall-security-and-privacy-architecture/
1
0
0
buherator
buheratorhttps://blogs.windows.com/windows-insider/2024/11/22/previewing-recall-with-click-to-do-on-copilot-pcs-with-windows-insiders-in-the-dev-channel/
Here we go again...
0
0
0
repeated
Mr. Bitterness
wdormann@infosec.exchangeWhat's with the "/.js.map" addition to the URI in the first request to a vulnerable server?
Usually PHP installations will be set up with the web server to handle PATH_INFO as passed arguments to a PHP endpoint. For example, a request URI to /target.php/lol.wtf will result in the PHP web server treating "target.php" as the endpoint code to run, and passing "lol.wtf" as a PATH_INFO sent to PHP.
This is all fine and good, EXCEPT for when app authors configure the server to handle endpoints differently depending on what the URI target is. For example, I might say that targets ending in .txt are perfectly safe, so I don't need to do any of that pesky security stuff. So, if I configure my web server to handle requests targeting *.txt to do something, I need to realize that a request for /target.php/lol.txt is NOT a request that is targeting lol.txt. It is targeting target.php, and "lol.txt" is passed to it via PATH_INFO.
What's happening in CVE-2024-0012?
Palo Alto is handling locations that end in .js.map don't need to bother with setting X-pan-AuthCheck header values (no inclusion of proxy_default.conf)
The problem? a request to anything.php/.js.map will match the nginx directive for the location, but at the same time will be sent to anything.php. This isn't the first time such semantic ambiguity leads to vulnerabilities in software. The same technique was used to exploit OwnCloud's CVE-2023-49103:
By requesting "GetPhpInfo.php/.css", an attacker is able to bypass all of the Apache rewrite rules, since the URI ends in .CSS and CSS files are harmless. 😂
Except whoever wrote those rules was apparently unaware of Apache's AcceptPathInfo configuration behavior.
1
4
0
repeated
screaminggoat
screaminggoat@infosec.exchangeTrellix: When Guardians Become Predators: How Malware Corrupts the Protectors
A malware campaign drops a legitimate Avast Anti-Rootkit driver (BYOVD) to terminate security processes, disable protective software, and seize control of the infected system. Indicators of compromise provided.
#byovd #avast #ioc #threatintel #infosec #cybersecurity #cyberthreatintelligence #cti
0
1
0