Do It by Code
54 subscribers
712 photos
99 videos
14 files
1.24K links
We uhhhhh... do things by coding them.
Download Telegram
1 Bug, $50k how Zendesk left a backdoor in Fortune 500 companies
Article, Comments

Zendesk is a customer service tool used by some of the world’s top companies. It’s easy to set up: you link it to your company’s support email (like support@company.com), and Zendesk starts managing incoming emails and creating tickets. You can handle these tickets yourself or have a support team do it for you. Zendesk is a billion-dollar company, trusted by big names like Cloudflare.
Playable Counter-Strike Diffusion World Model (trained on 2x4090, 5M frames)
Article, Comments

We train a diffusion model to predict the next frame of the game. The diffusion model takes into account the agent’s action and the previous frames to simulate the environment response.


> we got AI real time generated games before gta6
git can be extremely dumb sometimes
Yesterday Chinese researchers from Shanghai University unveiled a technique to defeat RSA and AES encryption using Quantum Computing.

The paper titled: "Quantum Annealing Public Key Cryptographic Attack Algorithm Based on D-Wave Advantage", is in Mandarin and has lots of maths

“Using the D-Wave Advantage, we successfully factored a 22-bit RSA integer, demonstrating the potential for quantum machines to tackle cryptographic problems,” the researchers wrote in the paper.

You can either read what other journalists wrote, or you can try to read it yourself.

The original paper: http://cjc.ict.ac.cn/online/onlinepaper/wc-202458160402.pdf

Article
MP3 to EXE (1999) (yeah, it's funny at 2024😂)
Article, Comments

The idea is to enable songs to be distributed with no concern whether the recipient will have an MP3 player installed (which was a valid concern in the late nineties. Certainly not a concern anymore for any modern operating system).
LLM pollution destroying the internet.
Try googling this:

yahoo_site_admin/credentials/db.conf
Do It by Code
Photo
All of them have some common patterns in them:

1. the web server is LiteSpeed (LSWS) (It is the 4th most popular web server, estimated to be used by 13.9% of websites as of September 2024)
2. the Content-Type header is text/x-config; which means the web server has recognized the type and is serving the correct type.
3. they are fucking indexable by Google (!)
4. all of them have "Directory Listing" mode enabled (hence why point3 happens), which is Directory Listing Vulnerability (CWE-548)