Posts
3373Following
712Followers
1579
buherator
buherator
OMG I just realized at the end of the episode Needful Things was bought by *Google*
https://rickandmorty.fandom.com/wiki/Needful_Things
1
0
3
repeated
stacksmashing
stacksmashing@infosec.exchangeI am looking for padlock or similarly visual device that has bluetooth vulnerabilities (i.e. just uses an "unlock" command or so and no decent cryptography). Any tips welcome!
1
2
0
repeated
lcamtuf 
lcamtuf@infosec.exchange
We misunderstood the concept of afterlife. What the religious texts meant to say is that the essence of your online life will be preserved as the weights of an LLM that handles airline customer support and prescribes Viagra in a telehealth app.
4
8
0
repeated
Jeff Moss
thedarktangent@defcon.socialTIL: https://ladybird.org a truely independent browser built by engineers not motivated by data driven revenue. DNSSEC, DANE, no shady CA list, etc. Theyvare always looking for help. #Browser
2
2
0
repeated
Romain THOMAS
rh0main@infosec.exchangeI'm happy to share that LIEF (extended)
is now providing an API to disassemble code (backed by the LLVM MC layer).
This disassembler is integrated with other functionalities
like dyld shared cache support or DWARF debug info.
You can checkout https://lief.re/doc/latest/extended/disassembler/index.html for the details.
0
4
0
repeated
Transmission64 :c64:
transmission64@c.imAnd Transmission64 is live. Head on over to https://t64.to/watch .
0
2
0
repeated
🏳️🌈🖖🏽
repeated
Frederik Braun �
freddy@security.plumbingthrough the machine-generated metadata and look at the titles of each blog post. For those that are recognized as new (it uses a small ini file for config and caching), then it asks whether to publish to my syndication targets (currently mastodon & bluesky), similar to how `git add -p` would. Simple URL+title as the suggestion but allows to reply with yes/no/edit to improve what is being posted. Source here:
https://github.com/freddyb/homepage/blob/main/rss2posse.py
0
1
0
repeated
Frederik Braun �
freddy@security.plumbingI wrote some cool scripts that I want to share with the world but I do not want to start being in the business of maintaining another open source project. I guess I will just describe it in my blog and tell the world that it's cool and they can use it?
Anyway, I now have an #indieweb #POSSE python script for my homepage.
Whenever I build my blog, it also generates an XML Atom feed (many static site generators do that). After adding an article and building, I can loop ... 1/2
3
1
0
buherator
buheratorhttps://github.com/v-p-b/libfuzzer_kfx/blob/main/C2LIBAFL.md
I nice part of making an archive of my Twitter posts is that I realize I wrote stuff like this o.O #fuzzing
0
0
3
0
0
1
buherator
buheratorhttps://github.com/v-p-b/rss2bsky.py
#RSS #Syndication #Bluesky #POSSE
0
0
3
buherator
buheratorShow content
Secure trust data mining linux cache poisoning encapsulation cyclic redundancy check cloud computing PKI signature FTP hijacking. Trust ephemeral port IP forwarding linux stream cipher port exponential backoff internet control message protocol race condition full duplex exposure IP spoofing. Challenge-handshake authentication protocol public key hypertext markup language topology war dialing disaster recovery plan decryption authorized. Account harvesting masquerade NAT stream cipher, cookie intranet certificates patch covert channel penetration test tunnel IP forwarding egress filtering.
https://www.securityipsum.com/
Ephemeral port reverse engineer fingerprint form-based authentication day zero. FTP UDP address resolution protocol boot sector, PPTP ransomware business continuity plan intrusion detection. IP flooding authentication disaster recovery plan corruption decryption MD5 dictionary attack socket egress filtering fragment digital signature exponential backoff worm. Reverse proxy encapsulation shell tunnel bastion host.
0
0
1
repeated
April King
april@macaw.socialHandling Cookies is a Minefield:
inconsistencies in the HTTP cookie specification and its implementations have caused a situation where countless websites (including Facebook, Netflix, Okta, WhatsApp, Apple, etc.) are one small mistake away from locking their users out.
https://grayduck.mn/2024/11/21/handling-cookies-is-a-minefield/
3
10
0
repeated
daniel:// stenberg://
bagder@mastodon.socialDavid Schinazi mentioned @april's cookie blog post and I'm sorry but I had to do a "I told you so".
On the httpbis list.
https://lists.w3.org/Archives/Public/ietf-http-wg/2024OctDec/0231.html
1
1
0
repeated
repeated
Hexacorn 
hexacorn@infosec.exchange
How to debug Windows service processes in the most old-school possible way...
0
1
1
repeated
Max Maass
hacksilon@infosec.exchange
We found our first #Y2K38 bug today, in #Keycloak‘s Client credential rotation feature. https://github.com/keycloak/keycloak/issues/35104
Will probably not be the last one - the runup to 2038 will be interesting.
1
5
0