adam_baldwin

4 ms·

1. 1.▲
   by adam_baldwin 17y ago

   MiFi fun. http://www.evilpacket.net/2010/jan/14/mifi-geopwn/
2. 2.▲
   by adam_baldwin 17y ago

   You are absolutely right here. I guess I want to point out that I was not wrong but simply vague (I guess I need to have a bit more peer review on these things). I never said to put it in the cookie, I did say session (I meant server side).
3. 3.▲
   by adam_baldwin 17y ago

   Defense in depth. Nothing wrong with multiple solutions. You are absolutely correct that what they implemented as a great defense tactic. However, sometimes asking for credentials again to perform a privileged action is not acceptable for a
4. 4.▲
   by adam_baldwin 17y ago

   Thomas, I believe in responsible disclosure, but mistakes happen and I have apologized to CloudKick with a personal email and here in the comments. The intention of evilpacket.net is to educate on the true impact of low hanging fruit. I don
5. 5.▲
   by adam_baldwin 17y ago

   So I need to apologize to CloudKick for dropping this on them without notice. It was not my intention and it was not my intention to surprise them with this. I have a laundry list of vulns that I'm trying to get organized and communication
6. 6.▲
   CloudKick.com account takeover.(evilpacket.net)

   22 points by adam_baldwin 17y ago|22 comments
7. 7.▲
   Rackspace Cloud: XSS to Root(evilpacket.net)

   4 points by adam_baldwin 17y ago|0 comments