Posts
2528
Following
648
Followers
1466
"I'm interested in all kinds of astronomy."
repeated

🧙‍♀️

0
1
0
[RSS] Using AFL++ on bug bounty programs: an example with Gnome libsoup (2024.10.30)

https://offsec.almond.consulting/using-aflplusplus-on-bug-bounty-programs-an-example-with-gnome-libsoup.html
0
3
4
[RSS] Paranoids' Vulnerability Research: NetIQ iManager Security Alerts | Paranoids | Yahoo Inc.

https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-netiq-imanager-security-alerts
0
0
0
[RSS] Exploiting a Blind Format String Vulnerability in Modern Binaries: A Case Study from Pwn2Own Ireland 2024

https://www.synacktiv.com/en/publications/exploiting-a-blind-format-string-vulnerability-in-modern-binaries-a-case-study-from
0
1
2
repeated
repeated

e-voting fail including a "hidden" tab in an Excel file.
My bingo card for this year is getting full.

The Colorado Secretary of State’s Office inadvertently posted a spreadsheet to its website with a hidden tab that included voting system passwords.
https://apnews.com/article/colorado-election-voting-system-passwords-0a71d0c1fe85fc9712d895280fd519a2

1
3
0
repeated

Smashing the limits: Installing Windows XP in DOSBox-X

A couple of months ago, I tried to install (the unsupported) Windows XP in DOSBox-X. Well, it was not easy.

https://fabulous.systems/posts/2023/07/installing-windows-xp-in-dosbox-x/

1
4
0
repeated

Special Authority Data Mart created to allow me to see which profiles have special authorities, and to capture the information over time into a file.
💙
https://www.rpgpgm.com/2024/10/special-authority-data-mart.html

0
1
0
repeated

Put up the slides for my Bluehat 2024 presentation on improvements to OleView.NET https://github.com/tyranid/infosec-presentations/blob/master/Bluehat/2024/DCOM%20Research%20for%20Everyone!.pdf You can also grab v1.15 of OleView.NET from the PS Gallery which has the new features to generate proxy clients on the fly.

0
3
1
repeated

Outstanding. I am glad that more folks are picking on what I have been saying for quite some time. Confidential Computing is something we should continue pursuing and developing, but the tech, currently, is not there yet. Excellent work on formalizing a quite important (and hard) aspect of the discussion (remote attestation).

https://bird.makeup/@gabrielkerneis/1851664264895123736

0
1
0
Edited 8 months ago
mpg123 buffer overflow in versions before 1.32.8

https://seclists.org/oss-sec/2024/q4/45

#NoCVE yet - Edit: Got assigned CVE-2024-10573
0
2
4
repeated

Our security researchers @cod_rse@twitter.com and @inode conducted a security assessment on , identifying significant vulnerabilities impacting this open-source solution.

Read the full article at https://security.humanativaspa.it/an-analysis-of-the-keycloak-authentication-system

0
4
0
repeated

The Vanishing Culture report arrives today at a critical moment: While Internet Archive recovers from a cyberattack, it’s a reminder of how fragile our access to knowledge can be. Preserving culture & history requires resilience—and collective action.

🔗 https://blog.archive.org/2024/10/30/vanishing-culture-a-report-on-our-fragile-cultural-record/

1
11
0
repeated

Another Masto Instance going down. But not because moderation or something but because running bigger instances on Mastodon gets really expensive.

I think this is an issue that we need to put more work into: Not just finding better ways to sustainably fund the operation of instances but also the technical means to make running it on smaller hardware easier. This includes mechanisms to maybe push certain data into "archives" as to not have it in the live database/asset store.

(Original title: RIP botsin.space)

https://muffinlabs.com/posts/2024/10/29/10-29-rip-botsin-space/

5
3
0
When I place my mug right my ThinkPad keeps my coffee warm.

Take this, M1!
1
2
8
repeated

Annoyed Redditors tanking Google Search results illustrates perils of AI scrapers | Ars Technica
https://alecmuffett.com/article/110533

0
1
0
repeated

Consider: James Bond movie but his gadgets constantly fail and show him ads and he gets caught because the company that made his laser nose-hair trimmer nunchuck gets hacked.

3
7
1
Is it me or Keycloak became the de facto OSS IdP practically overnight? If so, yhy is that?
3
2
4
repeated

I’m doing Movember this year with a focus on raising awareness about colon cancer, since it typically kills more men than prostate & testicular cancer & it took my Dad. I’d appreciate it if you shared my page, joined me, or donated for cancer research. https://ex.movember.com/mospace/15243648

1
3
0
Show older