6 ms·
Dumping Yahoo authentication secrets with an out-of-bounds read
- smaili 9y agoFor those wondering, this issue (referred to as YB2 or Yahoobleed #2 by the author) has already been fixed by Yahoo: > Yahoo! fixed YB2 at the same time as YB1, by retiring ImageMagick.
- scarybeast 9y agoFWIW, I've been very impressed with how Yahoo! handled this disclosure.
- tyingq 9y agoOuch. I have a site the generates images with ImageMagick based on user input. Guess I'm off to look for details.
- scarybeast 9y agoThis is YB (Yahoobleed) #2. You might also enjoy YB #1: "*bleed continues: 18 byte file, $14k bounty, for leaking private Yahoo! Mail images": https://scarybeastsecurity.blogspot.com/2017/05/bleed-continues-18-byte-file-14k-bounty.html https://scarybeastsecurity.blogspot.com/2017/05/bleed-contin...
- mdani 9y agoWhat is pointer visualization?
- dom0 9y agoInterpreting memory as an image and suspecting that the memory contains a pointer. https://googleprojectzero.blogspot.de/2014/08/what-does-pointer-look-like-anyway.html https://googleprojectzero.blogspot.de/2014/08/what-does-poin...
- logicallee 9y agoNeo stares at the endlessly shifting river of information, bizarre codes and equations flowing across the face of the monitor. NEO Do you always look at it encoded? CYPHER Have to. You have no idea what the server is running - there's way too much information to decode the Yahoo. You get used to it, though. Your brain does the translating. I don't even see the code. All I see is "pointer", "string compare", "function call". You want a drink?