Old #bug in #Linux
https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/#history
https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/#history
The GitHub Blog
Privilege escalation with polkit: How to get root on Linux with a seven-year-old bug
polkit is a system service installed by default on many Linux distributions. It’s used by systemd, so any Linux distribution that uses systemd also uses polkit.
#video #live
#Lviv #dotNET community presents:
https://youtu.be/_zrfq1ntUYc
We have invited Igor Fesenko (Microsoft MVP) to show how its done, and Bohdan Makohin is selected to be interviewed. Both Igor and Bohdan are active members of the Lviv .NET community with extended experience in interviewing and being interviewed. So please be ready for some high quality conversation. Please bring questions for post-mortem interview analysis together with Dmytro Zhluktenko.
For more details please visit also Facebook event page:
https://fb.com/events/2866930863621382/
#Lviv #dotNET community presents:
https://youtu.be/_zrfq1ntUYc
We have invited Igor Fesenko (Microsoft MVP) to show how its done, and Bohdan Makohin is selected to be interviewed. Both Igor and Bohdan are active members of the Lviv .NET community with extended experience in interviewing and being interviewed. So please be ready for some high quality conversation. Please bring questions for post-mortem interview analysis together with Dmytro Zhluktenko.
For more details please visit also Facebook event page:
https://fb.com/events/2866930863621382/
YouTube
Lviv .NET #30: Public Architect Interview
Експерт: Ігор Фесенко, Solution Architect @ SoftServe, Microsoft MVP
Кандидат: Богдан Макогін, Presales Architect @ Lobyco
0:13:40 - Ігор Фесенко розповідає про себе
0:14:29 - Богдан Макогін розповідає про себе
0:16:38 - Ігор Фесенко: про інтерв'ю (дисклеймер)…
Кандидат: Богдан Макогін, Presales Architect @ Lobyco
0:13:40 - Ігор Фесенко розповідає про себе
0:14:29 - Богдан Макогін розповідає про себе
0:16:38 - Ігор Фесенко: про інтерв'ю (дисклеймер)…
#security #Google #APK
“Last November, Google announced that developers will be required to publish new apps on the Play Store using the Android App Bundle (AAB) format instead of an APK. Just the other day, Google reminded developers of this upcoming requirement, setting off a firestorm of controversy from users who believe that Google is killing APKs, eliminating sideloading, hindering third-party app stores, and whatnot.
It’s true that Android App Bundles are a pretty big departure from the classic APK format you might be used to, both as a user and as a developer. While there are quite a few benefits to using App Bundles, there’s one key aspect to making them that has some developers and security experts rightly concerned.
In this article, we’ll cover the criticisms we’ve seen of the switch to Android App Bundles as well as some proposed solutions, and we’ll also talk about Google’s proposed solution to these problems.”
https://www.xda-developers.com/google-play-apk-replacement-pros-cons/
“Last November, Google announced that developers will be required to publish new apps on the Play Store using the Android App Bundle (AAB) format instead of an APK. Just the other day, Google reminded developers of this upcoming requirement, setting off a firestorm of controversy from users who believe that Google is killing APKs, eliminating sideloading, hindering third-party app stores, and whatnot.
It’s true that Android App Bundles are a pretty big departure from the classic APK format you might be used to, both as a user and as a developer. While there are quite a few benefits to using App Bundles, there’s one key aspect to making them that has some developers and security experts rightly concerned.
In this article, we’ll cover the criticisms we’ve seen of the switch to Android App Bundles as well as some proposed solutions, and we’ll also talk about Google’s proposed solution to these problems.”
https://www.xda-developers.com/google-play-apk-replacement-pros-cons/
XDA Developers
Why Google Play's APK replacement is scaring some security experts
Google Play will soon force developers to upload App Bundles instead of APKs, raising uncomfortable security questions about the requirement.
#video #security #testing in #Russian
Tools:
- #SonarQube
- #Codacy
- #MobSF
- #OWASPZAP
https://youtu.be/iOI7i4FlJcc
Tools:
- #SonarQube
- #Codacy
- #MobSF
- #OWASPZAP
https://youtu.be/iOI7i4FlJcc
YouTube
Вебинар "Security Test Planning"
😎 Узнай больше и попрактикуй тестирование безопасности на Мини-курсе "Security Testing by static and dynamic analysis methods".
Программа обучения обновлена и дополнена.
🗣️ Преподаватель: Александр Трещов.
◾ Узнай о тестировании безопасности методами и…
Программа обучения обновлена и дополнена.
🗣️ Преподаватель: Александр Трещов.
◾ Узнай о тестировании безопасности методами и…
#security #books
We've teamed up with Packt to make you virtually (and we really do mean virtually) bulletproof! Pick up ebooks like Learn Computer Forensics, Cybersecurity Threats, Malware Trends, and Strategies, Mastering Malware Analysis, and Mastering Python for Networking and Security. Do this, and you’ll learn how to make your computer systems immune to all manner of attacks and intrusions! Plus, your purchase helps support Covenant House!
https://www.humblebundle.com/books/cybersecurity-2021-packt-books
We've teamed up with Packt to make you virtually (and we really do mean virtually) bulletproof! Pick up ebooks like Learn Computer Forensics, Cybersecurity Threats, Malware Trends, and Strategies, Mastering Malware Analysis, and Mastering Python for Networking and Security. Do this, and you’ll learn how to make your computer systems immune to all manner of attacks and intrusions! Plus, your purchase helps support Covenant House!
https://www.humblebundle.com/books/cybersecurity-2021-packt-books