DevTestSecOps
#airplane #security https://www.wired.com/story/boeing-787-code-leak-security-flaws
www.theregister.co.uk
WTF is Boeing on? Not just customer databases lying around on the web. 787 jetliner code, too, security bugs and all
Fears of cyber-hijackings? That's plane crazy, says Dreamliner maker
#GDPR #security
Turned out that you can send a request on behalf of another person - and if the service does not pay enough attention to verifying the identity of the applicant, you will receive his personal data:
https://www.vice.com/en_us/article/xwe8wz/researchers-show-how-europes-data-protection-laws-can-dox-people
Turned out that you can send a request on behalf of another person - and if the service does not pay enough attention to verifying the identity of the applicant, you will receive his personal data:
https://www.vice.com/en_us/article/xwe8wz/researchers-show-how-europes-data-protection-laws-can-dox-people
VICE
Researchers Show How Europe's Data Protection Laws Can Dox People
A security researcher was able to get companies to give him his fiance’s Social Security Number, passwords, and other sensitive private information with her consent by taking advantage of GDPR’s 'Right of Access' requests.
#drivers #security
https://www.techpowerup.com/258175/drivers-from-over-40-manufacturers-including-intel-nvidia-amd-vulnerable-to-privilege-escalation-malware-attacks
https://www.techpowerup.com/258175/drivers-from-over-40-manufacturers-including-intel-nvidia-amd-vulnerable-to-privilege-escalation-malware-attacks
TechPowerUp
Drivers from Over 40 Manufacturers Including Intel, NVIDIA, AMD Vulnerable to Privilege Escalation Malware Attacks
Cybersecurity research firm Eclypsium published a report titled "Screwed Drivers," chronicling a critical flaw in the design of modern device driver software from over 40 hardware manufacturers, which allows malware to gain privilege from Ring 3 to Ring 0…
Forwarded from 13philia
#programming #git #humor
On your first day at the new job, squash every commit from the repo into a single commit with message "Legacy code" and force-push to master.
(from @codeinthehole)
On your first day at the new job, squash every commit from the repo into a single commit with message "Legacy code" and force-push to master.
(from @codeinthehole)
X (formerly Twitter)
David Winterbottom (@codeinthehole) on X
On your first day at the new job, squash every commit from the repo into a single commit with message "Legacy code" and force-push to master.
#security
Interesting approach: bypass rate limit when recovering a password on #Instagram by changing ip address
https://thezerohack.com/hack-any-instagram
Interesting approach: bypass rate limit when recovering a password on #Instagram by changing ip address
https://thezerohack.com/hack-any-instagram
The Zero Hack
How I Could Have Hacked Any Instagram Account - The Zero Hack
This article is about how I found a vulnerability on Instagram that allowed me to hack any Instagram account without consent permission. Facebook and Instagram security team fixed the issue and rewarded me $30000 as a part of their bounty program. Facebook…
#gamedev #programming
https://www.youtube.com/watch?v=Rf2QdkFoJTg
Other videos from “Games Gathering 2019 Odessa” in Russian only: https://dou.ua/forums/topic/28107/
https://www.youtube.com/watch?v=Rf2QdkFoJTg
Other videos from “Games Gathering 2019 Odessa” in Russian only: https://dou.ua/forums/topic/28107/
YouTube
Tomas Šiukščius — Casual game development. What's the difference?
Tomas Šiukščius
Lead Game Designer, Nordcurrent
Casual game development. What's the difference?
Casual game development is not just oversimplified ideas for the basic consumer. What problems are tackled while making casual games. And does casual game development…
Lead Game Designer, Nordcurrent
Casual game development. What's the difference?
Casual game development is not just oversimplified ideas for the basic consumer. What problems are tackled while making casual games. And does casual game development…
#bug #Excel #history
https://support.microsoft.com/en-us/help/214326/excel-incorrectly-assumes-that-the-year-1900-is-a-leap-year
https://support.microsoft.com/en-us/help/214326/excel-incorrectly-assumes-that-the-year-1900-is-a-leap-year
Docs
Excel incorrectly assumes that the year 1900 is a leap year - Office
Explains why the year 1900 is treated as a leap year in Excel 2000. This article outlines the behaviors that occur if this specific issue is corrected.
#programming
Developers:
lets/
├ store
├ files
├ in
└ some/
├ super
├ organized
└ opinionated/
├ hierarchical
└ structure
Also developers:
import { something } from "../../../../../../../"
https://twitter.com/DavidKPiano/status/1162021799200198656
Developers:
lets/
├ store
├ files
├ in
└ some/
├ super
├ organized
└ opinionated/
├ hierarchical
└ structure
Also developers:
import { something } from "../../../../../../../"
https://twitter.com/DavidKPiano/status/1162021799200198656
#security
It good to generate unique #cards numbers, if it possible in your bank software.
https://techcrunch.com/2019/08/20/moviepass-thousands-data-exposed-leak/
It good to generate unique #cards numbers, if it possible in your bank software.
https://techcrunch.com/2019/08/20/moviepass-thousands-data-exposed-leak/
TechCrunch
MoviePass exposed thousands of unencrypted customer card numbers
Movie ticket subscription service MoviePass has exposed tens of thousands of customer card numbers and personal credit cards because a critical server was not protected with a password. Mossab Hussein, a security researcher at Dubai-based cybersecurity firm…
#comix #security
Stack
https://xkcd.com/2166/
Gotta feel kind of bad for nation-state hackers who spend years implanting and cultivating some hardware exploit, only to discover the entire target database is already exposed to anyone with a web browser.
Stack
https://xkcd.com/2166/
Gotta feel kind of bad for nation-state hackers who spend years implanting and cultivating some hardware exploit, only to discover the entire target database is already exposed to anyone with a web browser.
#security #password
https://security.googleblog.com/2019/08/new-research-lessons-from-password.html
According to the results of this study, Chrome will have built-in functionality to check passwords for leaks:
https://9to5google.com/2019/08/15/google-password-checkup-leak-detection-will-soon-be-built-into-chrome/
https://security.googleblog.com/2019/08/new-research-lessons-from-password.html
According to the results of this study, Chrome will have built-in functionality to check passwords for leaks:
https://9to5google.com/2019/08/15/google-password-checkup-leak-detection-will-soon-be-built-into-chrome/
Google Online Security Blog
New Research: Lessons from Password Checkup in action
Posted by Jennifer Pullman, Kurt Thomas, and Elie Bursztein, Spam and Abuse research Back in February, we announced the Password Checkup ...