ulldma

7 ms·

1.
Sign in with ANY password into Rocket.Chat EE, found by our open source AI agent(github.blog)
5 points by ulldma 7mo ago|1 comments
2.
by ulldma 7mo ago
Hey! I’m one of the authors of this blog post. We (the GitHub Security Lab) developed an open-source AI-framework that supports security researchers in discovering vulnerabilities. In this blog post we show how it works and talk about the v
3.
by ulldma 4y ago
The relevant part being: "But it has become so dire that large industrial companies are buying washing machines in order to rip out the chips and repurpose them, according to ASML CEO Peter Wennink."
4.
First Arctic Navigation in February Sends a Worrying Climate Signal(bloomberg.com)
4 points by ulldma 6y ago|0 comments
5.
Russian LNG Carrier Completes Winter Trips on the Northern Sea Route(maritime-executive.com)
2 points by ulldma 6y ago|0 comments
6.
Remote code execution in Elixir-based Paginator(alphabot.com)
5 points by ulldma 6y ago|0 comments
7.
Fastjson: Exceptional Deserialization Vulnerabilities(alphabot.com)
2 points by ulldma 6y ago|0 comments
8.
Oil price plunges 20% as Saudis vow to step up production(theguardian.com)
2 points by ulldma 7y ago|0 comments
9.
Java builds might break starting January 13th (repos will disable HTTP)(alphabot.com)
4 points by ulldma 7y ago|0 comments
10.
by ulldma 7y ago
Well, Microsoft often uses suspicious looking URLs for their services. E.g. Office/OneDrive connects to hosts like "oneclient.sfx.ms" and "auth.gfx.ms". So as a user you have to trust these domains and you also have
11.
by ulldma 8y ago
>Signed HTTP Exchanges (or SXG) enables loading Web contents signed by the content publishers from anywhere, e.g. from a fast server, as if they came from the original publishers. Correct me if I'm wrong, but this seems to be part o
12.
by ulldma 8y ago
I don't like this comparison of death toll numbers. At the same time I think the death toll of 9/11 is unfortunately much higher as an alarmingly big number of first responders were diagnosed with cancer and many of them died alre
13.
Uncovering Drupalgeddon 2(research.checkpoint.com)
5 points by ulldma 8y ago|0 comments
14.
How to Sign with Google’s Private Key(medium.com)
3 points by ulldma 9y ago|0 comments
15.
by ulldma 9y ago
I think the project is really needed, but I'm not sure it's quite ready yet. The OpenJDK 10 build shows 25 November 2017 as it's build date and is Linux and macOS only.
16.
by ulldma 9y ago
And their iOS bug bounty program is invitation-only.
17.
by ulldma 9y ago
Yes, this is important: Maven Central/Sonatype only checks if the submitted artifacts are signed (regardless of the used key). The work is shifted to client, but there's currently no standardized way on how to verify dependencies
18.
Friday the 13th: JSON Attacks [pdf](blackhat.com)
1 points by ulldma 9y ago|0 comments
19.
How to configure Json.NET to create a vulnerable web API(alphabot.com)
2 points by ulldma 9y ago|0 comments
20.
by ulldma 10y ago
Small typo in the title: should probably be GNU (not GUN).
21.
by ulldma 11y ago
They state that those two character domains are reserved, but it looks like they're authorized by ICANN to release these domains (Since 04 August 2015): https://www.icann.org/sites/default/files/tlds&#x2F