Brodetskyi. Tech, VC, Startups
😂
#SolarWinds #hack
https://www.wsj.com/articles/solarwinds-hack-victims-from-tech-companies-to-a-hospital-and-university-11608548402
https://www.wsj.com/articles/solarwinds-hack-victims-from-tech-companies-to-a-hospital-and-university-11608548402
WSJ
WSJ News Exclusive | SolarWinds Hack Victims: From Tech Companies to a Hospital and University
A Wall Street Journal analysis identified at least 24 organizations that installed software laced with malicious code by Russian hackers.
#DNS #hack
https://portswigger.net/daily-swig/cross-layer-attacks-new-hacking-technique-raises-dns-cache-poisoning-user-tracking-risk
https://portswigger.net/daily-swig/cross-layer-attacks-new-hacking-technique-raises-dns-cache-poisoning-user-tracking-risk
The Daily Swig | Cybersecurity news and views
Cross-layer attacks: New hacking technique raises DNS cache poisoning, user tracking risk
PRNG flaw in Linux kernel created multiple security vulnerabilities
#programming #math #quote
There are 10 types of people in this world: Those who know binary, those who don't, and those who didn't expect this to be in base 3.
There are 10 types of people in this world: Those who know binary, those who don't, and those who didn't expect this to be in base 3.
#Clubhouse #security
https://www.bloomberg.com/news/articles/2021-02-22/clubhouse-chats-are-breached-raising-concerns-over-security
https://www.bloomberg.com/news/articles/2021-02-22/clubhouse-chats-are-breached-raising-concerns-over-security
Bloomberg.com
Clubhouse Chats Are Breached, Raising Concerns Over Security
A week after popular audio chatroom app Clubhouse said it was taking steps to ensure user data couldn’t be stolen by malicious hackers or spies, at least one attacker has proven the platform’s live audio can be siphoned.
#video #programming
“A songification of that most holiest of Python Enhancement Proposals, the PEP 8.”
https://youtu.be/hgI0p1zf31k?t=1
“A songification of that most holiest of Python Enhancement Proposals, the PEP 8.”
https://youtu.be/hgI0p1zf31k?t=1
YouTube
🎵 The PEP 8 Song 🎵
A songification of that most holiest of Python Enhancement Proposals, the PEP 8.
Based on an idea by Daniel "Mr. Hemlock" Brown.
Written and performed by Leon Sandøy, A.K.A. lemonsaurus.
Music and melody from Mad World by Roland Orzabal. This version was…
Based on an idea by Daniel "Mr. Hemlock" Brown.
Written and performed by Leon Sandøy, A.K.A. lemonsaurus.
Music and melody from Mad World by Roland Orzabal. This version was…
#password #security #testing
When testing password fields, my preferred password is:
%01%E2%80%AEalert%0D%0A
Let's break it down:
%01 is SOH
%e2%80%ae is RTLO
%0d%0a is CRLF
Test cases on login:
1. can I log in only using %01?
2. without the CRLF in it?
3. is trela accepted instead of alert? (due to RTLO)
https://twitter.com/secalert/status/1353303406044184577?s=20
When testing password fields, my preferred password is:
%01%E2%80%AEalert%0D%0A
Let's break it down:
%01 is SOH
%e2%80%ae is RTLO
%0d%0a is CRLF
Test cases on login:
1. can I log in only using %01?
2. without the CRLF in it?
3. is trela accepted instead of alert? (due to RTLO)
https://twitter.com/secalert/status/1353303406044184577?s=20
Twitter
David Vieira-Kurz
When testing password fields, my preferred password is: %01%E2%80%AEalert%0D%0A Let's break it down: %01 is SOH %e2%80%ae is RTLO %0d%0a is CRLF Test cases on login: 1. can I log in only using %01? 2. without the CRLF in it? 3. is trela accepted instead of…
Cyber Kill Chain.pdf
34.7 MB
#security #journal
Hakin9 (https://hakin9.org), February version — it quite interesting journal for hackers and security engineers.
Hakin9 (https://hakin9.org), February version — it quite interesting journal for hackers and security engineers.
#security
Good info about the ongoing #Microsoft exchange server hacks:
https://www.zdnet.com/article/everything-you-need-to-know-about-microsoft-exchange-server-hack/
Good info about the ongoing #Microsoft exchange server hacks:
https://www.zdnet.com/article/everything-you-need-to-know-about-microsoft-exchange-server-hack/
ZDNET
Everything you need to know about the Microsoft Exchange Server hack
Updated: A new critical vulnerability impacting Exchange Server is being exploited in the wild.