1 Bug, $50k how Zendesk left a backdoor in Fortune 500 companies
Article, Comments
Article, Comments
Zendesk is a customer service tool used by some of the world’s top companies. It’s easy to set up: you link it to your company’s support email (like support@company.com), and Zendesk starts managing incoming emails and creating tickets. You can handle these tickets yourself or have a support team do it for you. Zendesk is a billion-dollar company, trusted by big names like Cloudflare.
Gist
1 bug, $50,000+ in bounties, how Zendesk intentionally left a backdoor in hundreds of Fortune 500 companies
1 bug, $50,000+ in bounties, how Zendesk intentionally left a backdoor in hundreds of Fortune 500 companies - zendesk.md
Playable Counter-Strike Diffusion World Model (trained on 2x4090, 5M frames)
Article, Comments
> we got AI real time generated games before gta6
Article, Comments
We train a diffusion model to predict the next frame of the game. The diffusion model takes into account the agent’s action and the previous frames to simulate the environment response.
> we got AI real time generated games before gta6
diamond-wm.github.io
💎 DIAMOND
Diffusion for World Modeling: Visual Details Matter in Atari (DIAMOND) 💎
Yesterday Chinese researchers from Shanghai University unveiled a technique to defeat RSA and AES encryption using Quantum Computing.
The paper titled: "Quantum Annealing Public Key Cryptographic Attack Algorithm Based on D-Wave Advantage", is in Mandarin and has lots of maths
“Using the D-Wave Advantage, we successfully factored a 22-bit RSA integer, demonstrating the potential for quantum machines to tackle cryptographic problems,” the researchers wrote in the paper.
You can either read what other journalists wrote, or you can try to read it yourself.
The original paper: http://cjc.ict.ac.cn/online/onlinepaper/wc-202458160402.pdf
Article
The paper titled: "Quantum Annealing Public Key Cryptographic Attack Algorithm Based on D-Wave Advantage", is in Mandarin and has lots of maths
“Using the D-Wave Advantage, we successfully factored a 22-bit RSA integer, demonstrating the potential for quantum machines to tackle cryptographic problems,” the researchers wrote in the paper.
You can either read what other journalists wrote, or you can try to read it yourself.
The original paper: http://cjc.ict.ac.cn/online/onlinepaper/wc-202458160402.pdf
Article
Ichigo: Local real-time voice AI
GitHub, Comments
It has very interesting references:
1. Chameleon: Mixed-Modal Early-Fusion Foundation Models
2. Adam-mini: Use Fewer Learning Rates To Gain More
3. High Fidelity Neural Audio Compression
4. WhisperSpeech: An Open Source Text-to-Speech System Built by Inverting Whisper
GitHub, Comments
It has very interesting references:
1. Chameleon: Mixed-Modal Early-Fusion Foundation Models
2. Adam-mini: Use Fewer Learning Rates To Gain More
3. High Fidelity Neural Audio Compression
4. WhisperSpeech: An Open Source Text-to-Speech System Built by Inverting Whisper
Do It by Code
Photo
All of them have some common patterns in them:
1. the web server is LiteSpeed (LSWS) (It is the 4th most popular web server, estimated to be used by 13.9% of websites as of September 2024)
2. the Content-Type header is
3. they are fucking indexable by Google (!)
4. all of them have "Directory Listing" mode enabled (hence why point3 happens), which is Directory Listing Vulnerability (CWE-548)
1. the web server is LiteSpeed (LSWS) (It is the 4th most popular web server, estimated to be used by 13.9% of websites as of September 2024)
2. the Content-Type header is
text/x-config; which means the web server has recognized the type and is serving the correct type.3. they are fucking indexable by Google (!)
4. all of them have "Directory Listing" mode enabled (hence why point3 happens), which is Directory Listing Vulnerability (CWE-548)