Techbrunch

Depending on the target and the severity of the vulnerability the vendor might consider fixing the vulnerability even if EOL.

If the target is an IOT device the vulnerability will likely be mass exploited to create a botnet.

The U.S. government recently ‘took control’ of a botnet run by Chinese government hackers made of 260,000 Internet of Things devices... (Source: https://techcrunch.com/2024/09/18/u-s-government-took-contro...)

"Although the term "zero-day" initially referred to the time since the vendor had become aware of the vulnerability, zero-day vulnerabilities can also be defined as the subset of vulnerabilities for which no patch or other fix is available." - Source: https://en.wikipedia.org/wiki/Zero-day_vulnerability

I found that Anthony Fu's QR Toolkit is a great alternative: https://qrcode.antfu.me/

Is there a ublock origin list that can be used to filter those websites ?

It is but it was proofread by a human with expertise in the domain, and honestly I wouldn't have done better in such a short amount of words. If someone wants to know more they better read the article which I did to make sure the generated text wasn't bullcrap :)

Martin Vigo's article discusses the security vulnerabilities in password reset options for various websites and how these can lead to the exposure of personal phone numbers. Vigo highlights that during a password reset process, websites often partially reveal the user's phone number. This partial display varies across websites; some show the last four digits, others the first, and so on. By initiating password resets across different sites, one can potentially piece together most of the digits of a phone number just from an email address.

I came to say the same thing ^^ Check: https://galactic.run/ for a web implementation :)

“using advanced cloud-specific knowledge to exploit complex cloud infrastructure" = Checking if an environment variable is set

If you are using an up to date version of Firefox, Edge or Chrome it defaults to Lax. The exceptions are Safari, IE and Safari for IOS. I don't think this is worth a 8.1 CVSS.

Source: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Se...

How to solve why the server crashed using the 5 Whys: https://vooza.com/videos/the-5-whys/

I would not recommend OSWE to learn appsec since it is teaching "Advanced Web Attacks" and assume that you know the basics.

Something that is really interesting I think is the whitebox approach that some people in infosec might be missing if they don't come from a developer background and never botherered looking at the code introducing the vulnerabilities.

If you want to learn appsec I recommend Web Security Academy: https://portswigger.net/web-security

An example would be to be able to read source code in different languages (Java, PHP, JavaScript, C#) and be able to identify, chain vulnerabilities and write an exploit script to automate everything.

You can find the syllabus here: https://www.offensive-security.com/awae-oswe/

Similar issues:

- Hacking 3,000,000 apps at once through CocoaPods - https://justi.cz/security/2021/04/20/cocoapods-rce.html

- Remote code execution in Homebrew by compromising the official Cask repository - https://blog.ryotak.me /post/homebrew-security-incident-en/

- Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies - https://medium.com/@alex.birsan/dependency-confusion-4a5d60f...

Mr. Burns is Indestructible: https://www.youtube.com/watch?v=aI0euMFAWF8

I you wanna try: https://galactic.run/g/643193

FYI before you watch an 80 minute video (which I did):

"Amen has built a profitable business around the use of SPECT (single photon emission computed tomography) imaging for purported diagnostic purposes.[6] His marketing of SPECT scans and much of what he says about the brain and health in his books, media appearances, and marketing of his clinics has been condemned by scientists and doctors as lacking scientific validity and as being unethical, especially since the way SPECT is used in his clinics exposes people to harmful radiation with no clear benefit."

Source: https://en.wikipedia.org/wiki/Daniel_Amen

I recommend everyone to check NextDNS. I'ts basically a Pi-hole in the cloud: https://nextdns.io/

I use it in combination with uBlock Origin: https://addons.mozilla.org/en-US/firefox/addon/ublock-origin...

True but FYI if you want to, you can reverse engineer the code of the GitHub enterprise version: https://blog.orange.tw/2017/01/bug-bounty-github-enterprise-...

If you haven't already I suggest you go to Your Github Settings > Emails and check "Keep my email addresses private" and "Block command line pushes that expose my email"

Pretty sure that this Quora answer from DHH is still valid in 2018: https://www.quora.com/What-makes-Rails-a-framework-worth-lea...

Anyone interested in electronic voting, I would suggest reading the article: Internet Voting: A Requiem for the Dream in the last issue of Phrack. It was eye opening for me. http://phrack.org/issues/69/11.html#article

Conclusion:

    1. Internet voting is not compatible with democracy
    2. No amount of technology can change this
    3. Whom you voted for ought to be secret
    4. Who voted should not be secret -- it should be known as widely
       as possible
    5. And who counts the votes, and how, certainly ought not be secret

You might want to have a look at Serverless, a framework to build web, mobile and IoT applications with serverless architectures using AWS Lambda and even Azure Functions, Google CloudFunctions & more. Debugging, maintaining & deploying multiple functions gets easier.

Serverless: https://github.com/serverless/serverless

It would be nice to have a WhatsApp API that could be use for 2FA, banks probably already have your number.

Currently I'm using: https://github.com/awslabs/aws-shell and I love it

I think it makes sense, I was quite reluctant to use another service to do this kind of analysis where you might need to give complete access to your DB. If you are already using aws to host your database then it stays within the Amazon realm.

Reasons from not enabling it by default by @alexstamos (CSO @ Facebook):

- FBM is multi-device, and we'd like to see E2E usability improve to support this. For now, pick one device and keys never leave it

- Secret conversations don't currently support popular features like searching message history, switching devices, voice/video, etc

- Hundreds of millions use Messenger from a web browser. No secure way to verify code or store keys without routing through mobile.

"We don't want to disrupt people's current experience."

Source: https://twitter.com/alexstamos

Reasons from @alexstamos (CSO @ Facebook):

- FBM is multi-device, and we'd like to see E2E usability improve to support this. For now, pick one device and keys never leave it

- Secret conversations don't currently support popular features like searching message history, switching devices, voice/video, etc

- Hundreds of millions use Messenger from a web browser. No secure way to verify code or store keys without routing through mobile.

"We don't want to disrupt people's current experience."

Source: https://twitter.com/alexstamos

You should check this article in the last Phrack: Internet Voting: A Requiem for the Dream - http://phrack.org/issues/69/11.html#article

Anyone interested in electronic voting, I would suggest reading the article: Internet Voting: A Requiem for the Dream in the last issue of Phrack. It was eye opening for me.

http://phrack.org/issues/69/11.html#article

This is the same researcher that found a RCE in Uber: https://hackerone.com/reports/125980

Shameless plug but if you like that kind of articles I suggest signing to my newsletter: http://bugbountyweekly.com. A free, once–weekly e-mail round-up of news and articles about Bug Bounty.