HOW THE FUCK DO YOU HAVE SEVERAL MILLION DEVICES CONNECT TO A SINGULAR CHATROOM INSTANCE? WHAT KIND OF INFRASTRUCTURE ARE YOU HOUSING YOUR IRC SERVER ON

Заказ принят

Взлом Burger King позволил получить белому хакеру контроль над 30000 ресторанами и доступ к тысячам аудиозаписей клиентов по всему миру.

В ходе аудита была обнаружена открытая регистрация в AWS Cognito и GraphQL-интроспекция без авторизации. Это позволило создавать новые учётки и генерировать JWT-токены для повышения привилегий.

В итоге хакер получил доступ к тысячам аудиозаписей разговоров с клиентами, которые использовались для AI-аналитики настроения клиентов и эффективности сотрудников. Ну и по-классике, в HTML-коде присутствовали захардкоженные пароли типа «admin» 🫠

После публикации отчёта компания попыталась удалить материалы через DMCA вместо прозрачного исправления и публичного отчёта, но благо интернет все помнит.

Нет, вам не показалось. До этого тот же хакер уже отметился в McDonald’s, поставив Шрека на их дешборд.

НеКасперский

this is the type of music people listen to when they're extorting companies and laundering money on the internet

Nerds angry at ProtonMail today (yesterday?) due to internet drama (as is tradition). People are big mad. Is it a big deal? Are people overreacting? Why did normie accounts comment on the issue like they know what's going on?

Phrack did some silly things on the internet. They were able to get access to North Korean state-sponsored machines, or something, which were being used to attack South Korean government stuff. Specifically, the DPRK was targeting:
- South Korea Defense Counterintelligence Command
- South Korea Ministry of Foreign Affairs
- ???

Phrack was able to do some internet nerd stuff and dump DPRK password sheets (domain, username, password) which were stored in various files unencrypted (literally a .docx). They also dumped screenshots of user stuff, more credentials, tooling, documentation, and 20,000 browser history entries.

Following this, Phrack decided to be nice and notify the South Korean government regarding the DPRK.

I'm not a government nerd, but I'd guess that the South Korean government would like to be notified of any intelligence regarding the DPRK and their offensive cybersecurity actions toward them.

Here is the drama:
Phrack was speaking to South Korean nerds in proxy. Some nerd made a Proton e-mail and contacted the South Korean government from Proton e-mail. On August 15th, proxy nerd had their Proton e-mail magically nuked. Additionally, Phrack nerd had their Proton e-mail magically nuked August 16th.

It doesn't take a rocket scientist to put 2 and 2 together here and determine that Proton, for reasons not explained, took action against them (in some capacity) and terminated their accounts.

Phrack then contacted Proton e-mail requesting an unban, or something. Proton replied with, "your account will cause further damage to our service, therefore we will keep the account suspended."

Phrack then decided to contact Proton legal department. Phrack contacted Proton's legal department on 8 separate occasions and was ignored.

Did Proton violate their privacy stuff by terminating the Phrack accounts? Why was Phrack stuff terminated? Did the South Korean government get big mad and decide to send legal stuff to Phrack? Is Proton illegal and for nerds?

Find out next time on Dragon Ball Z

tl;dr chinas firewall censorship thingy has massive leak. shows code and political ambitions and stuff

idk the significance because i dont study chinese network firewall sciency stuff. maybe one of you nerds is interested. its all available for download online now

https://gfw.report/blog/geedge_and_mesa_leak/en/