arkadiyt

54 ms·

751.
Russia refuses to allow European planes to land in Moscow(theguardian.com)
3 points by arkadiyt 5y ago|0 comments
752.
Patch immediately: VMware warns of critical remote code execution in vCenter(zdnet.com)
1 points by arkadiyt 5y ago|0 comments
753.
Chrome extensions are tampering with security headers(therecord.media)
242 points by arkadiyt 5y ago|90 comments
754.
National security officials outline hopes for US data breach notification law(cyberscoop.com)
2 points by arkadiyt 5y ago|0 comments
755.
Brazilian gang defrauds Uber, Lyft, DoorDash using GPS spoofing and stolen IDs(therecord.media)
40 points by arkadiyt 5y ago|4 comments
756.
ExifTool CVE-2021-22204 – Arbitrary Code Execution(devcraft.io)
3 points by arkadiyt 5y ago|1 comments
757.
by arkadiyt 5y ago
If you check their hacktivity you'll see that the previous negative press spurred them into action: https://hackerone.com/valve/hacktivity?type=team
758.
by arkadiyt 5y ago
It's an orthogonal issue - you can store JWTs in cookies and you can store session ids in local storage.
759.
by arkadiyt 5y ago
They're not even good for API tokens. There are valid use cases for storing data in a signed client-side token, but if you're going to do that then don't choose JWT as your serialization format - there have been too many alg:
760.
DST Root CA X3 Expiration (September 2021)(letsencrypt.org)
3 points by arkadiyt 5y ago|0 comments
761.
An Interlude(lethain.com)
2 points by arkadiyt 5y ago|0 comments
762.
Train firm's 'worker bonus' email is cybersecurity test(theguardian.com)
11 points by arkadiyt 5y ago|2 comments
763.
SSH Authentication with Security Keys(github.blog)
4 points by arkadiyt 5y ago|0 comments
764.
Terminal escape injection in AWS CloudShell(bugs.chromium.org)
2 points by arkadiyt 5y ago|0 comments
765.
by arkadiyt 5y ago
As per the article: > The emergency status enables fuel to be transported by road.
766.
by arkadiyt 5y ago
Colonial Pipeline precisely does keep it's control network disconnected from the internet - the only thing that was ransomwared is their corporate network. They shut the pipelines down voluntarily to prevent further spread.
767.
So-Called “Consent Searches” Harm Our Digital Rights(eff.org)
2 points by arkadiyt 5y ago|0 comments
768.
Bundler Is Still Vulnerable to Dependency Confusion Attacks (CVE – 2020 – 36327)(zofrex.com)
1 points by arkadiyt 5y ago|0 comments
769.
iPad Camera Multitasking(blog.thinktapwork.com)
293 points by arkadiyt 5y ago|157 comments
770.
Trump Justice Department obtained Post reporters’ phone records(washingtonpost.com)
3 points by arkadiyt 5y ago|0 comments
771.
The Fortnite Trial Is Exposing Details About the Biggest iPhone Hack on Record(vice.com)
6 points by arkadiyt 5y ago|1 comments
772.
I Hacked Google App Engine: Anatomy of a Java Bytecode Exploit(blog.polybdenum.com)
281 points by arkadiyt 5y ago|41 comments
773.
Tens of Thousands of GoDaddy Certificates Will Break in macOS 11.4 and iOS 14.6(sslmate.com)
1 points by arkadiyt 5y ago|0 comments
774.
About the security content of iOS 14.5.1 and iPadOS 14.5.1(support.apple.com)
3 points by arkadiyt 6y ago|0 comments
775.
Reduce bandwidth usage of PNG transfers over HTTP with this one weird trick(thejh.net)
3 points by arkadiyt 6y ago|0 comments
776.
Turmoil shakes California National Guard with firing, suspension of top generals(latimes.com)
37 points by arkadiyt 6y ago|43 comments
777.
Certificate Transparency Policies Diverge After Apple's Update(hardenize.com)
4 points by arkadiyt 6y ago|0 comments
778.
Password reset code brute-force vulnerability in AWS Cognito(pentagrid.ch)
3 points by arkadiyt 6y ago|0 comments
779.
The ransomware surge(bbc.com)
132 points by arkadiyt 6y ago|208 comments
780.
Click Studios asks customers to stop tweeting about its data breach(techcrunch.com)
3 points by arkadiyt 6y ago|0 comments

More ›