Posts
2517Following
574Followers
1284Heretek of Silent Signal
repeated
tj usiyan
griotspeak@soc.mod-12.com
Them: “This is not a paywall.”
Me: “whew”
Them: Provide your Email address”
Me: “that’s a payment, though. Personal information is a payment”
2
13
0
repeated
lcamtuf 
lcamtuf@infosec.exchange
Analog filters, part II: let it ring
https://lcamtuf.substack.com/p/analog-filters-part-2-let-it-ring/?1
0
2
0
buherator
buheratorhttp://www.righto.com/2024/09/f4-attitude-indicator.html?m=1
0
0
0
buherator
buherator
0
0
1
repeated
Tom Stuart
tom@social.tomstu.artI’m happy to see that the GOV.UK Service Manual’s “Building a robust frontend using progressive enhancement” page was updated this week and made it to the top of Hacker News today. The technology industry would collectively save unimaginable quantities of time, money, energy and stress if this single page were required reading for everyone involved in building a web site. https://www.gov.uk/service-manual/technology/using-progressive-enhancement
1
6
0
repeated
Marco Ivaldi
raptor@infosec.exchange
0
2
0
repeated
Marco Ivaldi
raptor@infosec.exchange
"Sometimes, hacking is just someone spending more time on something than anyone else might reasonably expect.”
— Jerry Gamblin
0
7
0
buherator
buheratorShow content
While I don't agree with the conclusion of the article (optimizing commute), this pretty much confirms my experience.
I like to stare at my nothing box.[2]
[1] https://behavioralscientist.org/are-we-too-impatient-to-be-intelligent/
[2] https://www.youtube.com/watch?v=SZ6mVumHY9I
0
0
0
repeated
exploits.club
exploitsclub@bird.makeup40th Weekly Vuln Research newsletter is OUT NOW 📰
iOS kernel exploitation from @alfiecg_dev
Elgato hacking from @dt_db
@_tsuro bypasses CET
RCU Internals from @u1f383
Google Teams check off their OKRs
➕ Jobs and more 👇
0
3
0
repeated
AttackerKB
attackerkbTopic description: "HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate user's request ..."
"HAProxy's HTTP/3 implementation fails to block a **malformed HTTP header field name**, and **when deployed in front of a server that incorrectly process this malformed header**, it may be used to conduct an HTTP request/response smuggling attack ..."
Link: https://attackerkb.com/assessments/410b285d-5724-4300-bcc4-603cc4c726ac
0
1
0
repeated
Thijs Alkemade
xnyhps@bird.makeupWe had a short look at the buffer overflow found by fuzzing `process_browse_data` to determine its exploitability. Conclusion: this bug alone won't give you RCE, or even an info leak.
0
4
0
repeated
Rick de Jager
rdjgr@bird.makeupHere's my quick and dirty PoC for the CUPS vulns. I wrote it after spotting the patches in the public CUPS repo. As always, expect CTF-quality code :D
0
2
0
buherator
buheratorFinally I got myself to write a script to generate documentation for #Ghidra - now I host the latest info about 11.2, including but not limited to:
- The latest javadoc
- Documentation of the Decompiler Plugin
- Documentation of the Random Forest Function Finder Plugin
I took this opportunity to redo the directory structure that broke most search engine links, sorry about that (this will improve with time ofc)!
0
6
9
repeated
Michael Lucas 
mwl@io.mwl.io
Normal authors: release book to the public early in the week, with much fanfare.
Me, late Friday afternoon, from a dark alley: "psst! Hey, you! Yeah, you! #sysadmin! Buddy! You ever wanted to Run Your Own Mail Server?" #ryoms
https://www.tiltedwindmillpress.com/product/ryoms-ebook/
(boosts appreciated! 
)
5
19
0
repeated
Fight for the Future
fight@mastodon.fightforthefuture.org“It’s the time of Orwell but with corporations." https://www.wired.com/story/internet-archive-memory-wayback-machine-lawsuits/
This is a must-read on the existential battle of @internetarchive
If you wanna take action after, we've got a list of things to do at https://www.battleforlibraries.com/
1
7
0