eMudhra Login Bypass(mastodon.catgirl.cloud)

5 points by _ache_ 2 days ago | 1 comments

The rise of ChatGPT-enabled GitHub spam(mastodon.social)

96 points by luu 3 years ago | 64 comments

Potential third critical PHP CVE(elk.zone)

50 points by mpaepper 4 days ago | 17 comments

A Mastodon thread by security researcher Elise describing a newly found PHP double-free vulnerability affecting 8.4 and 8.5, reported to [email protected] with details withheld.

A complete bypass of eMudhra’s 1FA OTP login system(mastodon.catgirl.cloud)

131 points by tensegrist 3 days ago | 53 comments

Mastodon thread describing a bypass of eMudhra's OTP login by encrypting OTP requests with an exposed public key, enabling brute-forcing of logins to steal certificates.

Show HN: Mephisto – A RAM-only, ad-free disposable email PWA built with React(mephistomail.site)

18 points by benmxrt 10 months ago | 21 comments

Since Linux 6.9, LUKS suspend stopped wiping disk-encryption keys from memory(mathstodon.xyz)

516 points by IngoBlechschmid 3 months ago | 217 comments

Mastodon thread by Ingo Blechschmidt describing how since Linux 6.9 the LUKS suspend tool silently failed to wipe disk-encryption keys from memory.

Is Telegram really an encrypted messaging app?(blog.cryptographyengineering.com)

523 points by md224 2 years ago | 473 comments

Blog post by cryptographer Matthew Green examining whether Telegram actually qualifies as an encrypted messaging app, given its default lack of end-to-end encryption.

I'm being cyberattacked by Tesla, Inc(dreamstation.systems)

389 points by robinpie 1 month ago | 109 comments

Personal blog post describing persistent attack traffic in nginx logs from IPs with Host/Referer headers pointing to pool-ntp.tesla.com.

New Linux udisks flaw lets attackers get root on major Linux distros(bleepingcomputer.com)

336 points by smig0 1 year ago | 227 comments

BleepingComputer news article about a udisks vulnerability that lets attackers gain root privileges on major Linux distributions.

Someone at BrowserStack is leaking users' email addresses(shkspr.mobi)

329 points by m_km 6 months ago | 88 comments

Blog post by Terence Eden describing how a unique email address he gave BrowserStack ended up with a third party via Apollo.io, implying a leak.

Encrypting private data and private communications is now an ethical duty(blog.tripu.info)

416 points by gasull 3 years ago | 200 comments

A personal blog essay arguing that end-to-end encrypting private data and communications has become an ethical duty, using a glass-walls analogy.

Plex vulnerabilities being exploited in the wild to drop a cryptominer(boredhackerblog.info)

193 points by mindracer 7 days ago | 92 comments

Blog post analyzing in-the-wild exploitation of Plex Media Server vulnerabilities used to deploy a cryptocurrency miner.