ph3t

3 ms·

1. 1.▲
   by ph3t 3mo ago

   All these security/vulnerability scanning harnesses look more or less the same. Not sure what’s the point of bragging or publishing about them anymore, there’s no moat
2. 2.▲
   by ph3t 2y ago

   Any application that does cross-device authentication is vulnerable to QRLJacking (this type of vulnerability) to some extent, the same way any application with username/password authentication is vulnerable to phishing.
3. 3.▲
   by ph3t 2y ago

   GitHub’s dependency graph is supposed to give us this kind of visibility without any custom scripting, but from my experience it’s pretty spotty and often misses dependencies entirely. Also, the script from the article doesn’t cover transit