hacking: security in practice
Just got a phishing email from Coinbase to steal login, who’s up for lulz?

submitted by /u/odinspath
[link] [comments]

hacking: security in practice
Recs for Windows Machine to Run Labs On?

Hi, All,

I've been screwing around with web design for a bit and recently, for fun, have been starting to get into security and hacking. I've been using a Macbook M1 and have found that it's a pain to setup VMs due to compatibility issues with various hypervisors and on top of that, a cool sounding web app security course I recently got on TCM for $1 seems to be pretty much entirely Windows-oriented.

For the most part, I've been able to find workarounds for this and that (VMWare instead of Virtual Box, etc.) but at this point, I'm basically spending more time reading forums and watching YouTube videos than on the course itself and I think I've hit a bit of a wall with some of the lab setups, plus, I only have 8GB of RAM anyway...

Sorry, I'll cut to the chase - I'm basically looking to build a Windows PC with a boatload of RAM without spending more than $1k, which should be doable. I'm not a gamer whatsoever, so this machine will be pretty much entirely dedicated towards amateur dev work and virtual hacking labs.

If anyone has any general recommendations, whether it be rules of thumb or specific parts/brands to look out for, please let me know. Any advice here would be awesome!

I tried posting this in the build a pc sub, but it kept getting taken down immediately.

Thanks, folks.

submitted by /u/DanGleenutz
[link] [comments]

Dark Reading: Attacks/Breaches
How Boards Can Set Enforceable Cyber Risk Tolerance Levels

Boards love to say they have low risk tolerance, but are they willing to make the expensive and painful decisions to make it truly happen?

CVE-2022–26180:qdPM 9.2 CSRF Vulnerability in index.php/myAccount/update URI
https://infosecwriteups.com/cve-2022-26180-qdpm-9-2-csrf-vulnerability-in-index-php-myaccount-update-uri-8f84a4dfc140?source=rss------bug_bounty-5

Unauthorized actions can be performed on behalf of authenticated users, compromising the security of qdPM 9.2Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/cve-2022-26180-qdpm-9-2-csrf-vulnerability-in-index-php-myaccount-update-uri-8f84a4dfc140?source=rss------bug_bounty-5)

CVE-2022–26180:qdPM 9.2 CSRF Vulnerability in index.php/myAccount/update URI

Unauthorized actions can be performed on behalf of authenticated users, compromising the security of qdPM 9.2Continue reading on InfoSec Write-ups »
Read more...

Hacking on Medium
CVE-2022–26180:qdPM 9.2 CSRF Vulnerability in index.php/myAccount/update URI

https://cdn-images-1.medium.com/max/1344/1*OF8P8WIigJNmxoFPEZlU9A.jpeg
Unauthorized actions can be performed on behalf of authenticated users, compromising the security of qdPM 9.2

Continue reading on InfoSec Write-ups »

Hacking on Medium
อะไรคือ Local File Inclusion (LFI)

https://cdn-images-1.medium.com/max/680/0*AKm-1kLjtiD3AngH.png
LFI

Continue reading on SnoopBees »

Hacking on Medium
5 Tips for Secure Coding in Python

https://cdn-images-1.medium.com/max/2240/1*YKo2B1Pj9f5bu9hytUegIA.png
Python is a widely used programming language, known for its simplicity, readability, and ease of use. While Python has many benefits, it’s…

Continue reading on Medium »

Hacking on Medium
ClamAV: An Open Source Antivirus Solution

https://cdn-images-1.medium.com/max/2240/1*ckm6oGy7vJF-si54NwOiXw.png
In the world of computer security, antivirus software is a must-have tool to protect against various types of malware. One popular open…

Continue reading on Medium »

Hacking on Medium
5 Must-Read Books for Secure C and C++ Coding

https://cdn-images-1.medium.com/max/2240/1*POQXEwgOlbcMWGSDUr-Y4A.png
Secure coding is crucial in the development of software to ensure the protection of sensitive data and prevent security breaches. For…

Continue reading on Medium »

hacking: security in practice
Testing a new encrypted messaging app's extraordinary claims

https://external-preview.redd.it/yULTt7UPBex3r8yDtFYjnhrjI9xuNl0USbZBc5UZS-4.jpg?width=640&crop=smart&auto=webp&s=efa02c3a3e9a296c231848b44852d392598f7f9f submitted by /u/crnkovic_
[link] [comments]

hacking: security in practice
How can be possible that in my university they block websites via URL (even if they are https so URL is not "visible" in the package) but I can access the same website via IP?

How can it be possible? How do they block these websites since they don't block IPs or DNS requests (since I have the IPs and I can access the IPs so they don't block with this).

How can they block these websites? These are not clear/plain http, so university shouldn't be able to access the packet request and so the URL can't be seen. So how is possible that the URL is being blocked but NOT the IP?

submitted by /u/New_Dragonfly9732
[link] [comments]