Conversation

Notices

1. Embed this notice
   Cyrus (kagekokoro@bae.st)'s status on Tuesday, 24-Sep-2024 02:51:54 JST Cyrus
   Btw I have a huge favor to ask of this tech community in Fedi, we have received an email at work from an ethical hacker and are unsure as to how to proceed, could anyone spare 5 minutes of time and expertise to help me out? Thanks!
   
   Feel free to repost to increase the reach, thanks
   • Embed this notice
     Pleroma-tan (kirby@lab.nyanide.com)'s status on Tuesday, 24-Sep-2024 02:51:53 JST Pleroma-tan

     in reply to
     @Kagekokoro sparing us the super specific details what did they tell you exactly
   • Embed this notice
     menherahair (menherahair@eientei.org)'s status on Tuesday, 24-Sep-2024 03:13:21 JST menherahair

     in reply to

     • Pleroma-tan
     • kirby
     @Kagekokoro @kirby @kirby don't listen to them your site is gonna esplode if you leave this port open and don't pay me
     ✙ dcc :pedomustdie: :phear_slackware: likes this.
   • Embed this notice
     Cyrus (kagekokoro@bae.st)'s status on Tuesday, 24-Sep-2024 03:13:22 JST Cyrus

     in reply to

     • Pleroma-tan
     • kirby
     @kirby @kirby they are kinda expecting a bounty for it and I have found the exact same text we received on entries on it forums and such
     According to them it's not really a vulnerability, but script kiddies trying to make a quick buck from it illiterate companies
   • Embed this notice
     kirby (kirby@bae.st)'s status on Tuesday, 24-Sep-2024 03:13:23 JST kirby

     in reply to

     • Pleroma-tan
     @Kagekokoro @kirby oh wait I'm logged into my baest account on my phone?? Federation from baest to lab is being wonky right now. If I were you I'd probably be fixing up the bug rn and afterwards communicating to them you fixed the bug and stuff and thanking them for the report. Is that all you're unsure about or is there something more
   • Embed this notice
     Cyrus (kagekokoro@bae.st)'s status on Tuesday, 24-Sep-2024 03:13:24 JST Cyrus

     in reply to

     • Pleroma-tan
     @kirby issues related to ui code injection in our website
     And something related to our domain not being registered on a database, which allows for email spoofing
     Can't remember the technical terms