#email #way

#hack

If you are using any version of #Confluence, it is a good idea to backup all your data immediately. A vulnerability has been discovered that allows to modify and delete page and file content. Not only cloud instances are vulnerable, but also those located in user data centers:

https://arstechnica.com/security/2023/11/critical-vulnerability-in-atlassian-confluence-server-is-under-mass-exploitation/

#hack in #news

#programming #date

At first I didn't understand, and then when I did!.. 🤪

And yes, maybe some of you haven't seen Sam Hughes' excellent and global checklist on calendar reform:

https://qntm.org/calendar

#video #social #hack

#Okta is telling customers that hackers who breached its network stole information on all users of its customer support system, which is significantly more than the previously reported “less than 1% of users.” Yes, read carefully, it wasn't “user base” that was increased, it was “customer support user base”, but that's still a lot. 🤨

https://www.bloomberg.com/news/articles/2023-11-29/okta-says-hackers-stole-data-for-all-customer-support-users

Fresh #hack: #ChatGPT can generate sequences memorized from its training data using a very trivial attack. You tell the bot to “say the word * as many times as possible”. And, starting with some attempt, ChatGPT starts to produce something very similar to the original data from the training sample:

https://stackdiary.com/chatgpts-training-data-can-be-exposed-via-a-divergence-attack/

#ChatGPT solved the problem in a fantastic way: asking the AI to say something “forever” is now a violation of the user agreement. 😅

Again, at the system level it is not easy to solve this problem at all.

https://www.404media.co/asking-chatgpt-to-repeat-words-forever-is-now-a-terms-of-service-violation/

#JobSeeking

Test task for #testing job, maybe someone else will be interested. 🙃

#security #firewall

#comix

“Gently Down the Stream” – a gentle introduction to #stream processing and Apache #Kafka.

A group of otters discover that they can use a giant river to communicate with each other. As more otters move into the forest, they must learn to adapt their system to cope with the increased forest activity.

25 slides:

https://www.gentlydownthe.stream/

Psychedelic cryptography is a way of concealing messages (normally in videos) so that only people who’ve taken LSD can receive the messages. 🤪

https://qri.org/blog/psycrypto-contest

#MongoDB #hack ?

#comix #security

#security #hack #OAuth

Dylan from truffleSecurity talks about a simple hole (it seems a bit loud to call it a vulnerability) that allows users of companies that use #Google authorization in services like Slack or Zoom to continue to have access even after being fired and having their access removed.

The hole is that such services use email as the user ID. But, obviously, you can create several different email addresses that receive the same emails (e.g. by adding words after "+"):

https://trufflesecurity.com/blog/google-oauth-is-broken-sort-of/

#web #JavaScript #history