arkadiyt

67 ms·

871.
Leaked Location Data Shows Another Muslim Prayer App Tracking Users(vice.com)
12 points by arkadiyt 6y ago|0 comments
872.
Auditing PassRole: A Problematic Privilege Escalation Permission(ermetic.com)
2 points by arkadiyt 6y ago|0 comments
873.
Defense secretary orders NSA to install former GOP operative as top lawyer(washingtonpost.com)
3 points by arkadiyt 6y ago|0 comments
874.
Law enforcement gets around your smartphone’s encryption(arstechnica.com)
5 points by arkadiyt 6y ago|0 comments
875.
Notes on the threat model of cross-origin isolation(docs.google.com)
1 points by arkadiyt 6y ago|0 comments
876.
Intent to Prototype: SameParty cookie attribute(groups.google.com)
1 points by arkadiyt 6y ago|0 comments
877.
A Glossary of Blind SSRF Chains(blog.assetnote.io)
1 points by arkadiyt 6y ago|0 comments
878.
Signal down after getting flooded with new users(bleepingcomputer.com)
4 points by arkadiyt 6y ago|0 comments
879.
In-the-Wild Series: Chrome Exploits(googleprojectzero.blogspot.com)
7 points by arkadiyt 6y ago|0 comments
880.
Leaking silhouettes of cross-origin images(blog.mozilla.org)
195 points by arkadiyt 6y ago|43 comments
881.
AWS Security Maturity Roadmap 2021(summitroute.com)
2 points by arkadiyt 6y ago|0 comments
882.
Hacker used ransomware to lock victims in their IoT chastity belt(bleepingcomputer.com)
5 points by arkadiyt 6y ago|0 comments
883.
Ransomware gangs are going after top execs to pressure companies into paying(zdnet.com)
4 points by arkadiyt 6y ago|0 comments
884.
SolarWinds hires former Trump cyber security chief Chris Krebs(ft.com)
2 points by arkadiyt 6y ago|0 comments
885.
How to Enable Logging on Every AWS Service in Existence (Circa 2021)(matthewdf10.medium.com)
4 points by arkadiyt 6y ago|0 comments
886.
by arkadiyt 6y ago
I'm only going to address 1) and 2) since the rest doesn't seem related to Chrome extensions. 1) Again, anyone who is willing to audit extension code can easily download it. 2) Extensions are auto-updating, so under the proposed s
887.
by arkadiyt 6y ago
What's the difference between auditing an extension's code on github vs auditing the code from the Chrome store? It seems like anyone who is willing to do an audit can just as easily download the code directly. Sites like Duo&#x27
888.
Insecure wheels: Police turn to car data to destroy suspects' alibis(nbcnews.com)
23 points by arkadiyt 6y ago|7 comments
889.
by arkadiyt 6y ago
It just lowers the cost of exploit development, that's all.
890.
Ticketmaster will pay $10M for hacking rival ticket seller(theverge.com)
8 points by arkadiyt 6y ago|2 comments
891.
by arkadiyt 6y ago
I built a tool [1] for collecting audit logs from all your SaaS tools (Dropbox, Github, Okta, GSuite, Zendesk, etc) and pushing them into your log collection tool of choice (Splunk, Sumologic, Elastic, etc). It solved a personal pain point
892.
Another Arrest, and Jail Time, Due to a Bad Facial Recognition Match(nytimes.com)
33 points by arkadiyt 6y ago|7 comments
893.
Deep Dive into Site Isolation (Part 2)(microsoftedge.github.io)
1 points by arkadiyt 6y ago|0 comments
894.
The New York School District That Used Facial Recognition Now Has to Stop(buzzfeednews.com)
1 points by arkadiyt 6y ago|0 comments
895.
by arkadiyt 6y ago
IPv6 has internal ranges defined just like IPv4 does - anything in an internal range should be blocked, and anything in an external range is safe to pass through.
896.
by arkadiyt 6y ago
The US is in fact attempting to move power grids away from digital tech and more to analog/manual controls for precisely this reason [1]. [1]: https://www.zdnet.com/article/us-wants-to-isolate-power-grid...
897.
by arkadiyt 6y ago
Rails doesn't provide any standard mechanism/library for sending http requests, so I don't think there's anything in Rails to apply the gem to
898.
by arkadiyt 6y ago
These different representations also lead to frequent server side request forgery (SSRF) bypasses - someone might be blocking local IPv4 but you can still access their AWS metadata endpoint at ::ffff:169.254.169.254, etc. For anyone using R
899.
With Hacking, the United States Needs to Stop Playing the Victim(nytimes.com)
15 points by arkadiyt 6y ago|14 comments
900.
GoDaddy employees told they were getting a holiday bonus in a phishing test(coppercourier.com)
199 points by arkadiyt 6y ago|251 comments

More ›