Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://cyberplace.social/users/GossiTheDog/statuses/111904019600877679">Kevin Beaumont (gossithedog@cyberplace.social)'s status on Saturday, 10-Feb-2024 08:04:34 JST</a><a href="https://cyberplace.social/@GossiTheDog" title="gossithedog@cyberplace.social"><img src="https://gnusocial.jp/avatar/38360-48-20240926225417.webp" width="48" height="48" alt="Kevin Beaumont" style="position: absolute; left: 0; top: 0;">Kevin Beaumont</a><div><ul><li></ul></div></section><article><p>Big security news from <a href="https://mastodon.social/@blowdart">@blowdart</a> that nobody will understand - BinaryFormatter is being removed from .net finally. </p><p>It’s the cause of a whole bunch of high impact vulns, including in Microsoft’s own products and lots of third party apps. </p><p>Will takes years to trickle down but will ultimately lead to better security for all, a great move. </p><p><a href="https://github.com/dotnet/runtime/issues/98245" rel="nofollow noreferrer">https://github.com/dotnet/runtime/issues/98245</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/2698247#notice-5351649">In conversation</a><time datetime="2024-02-10T08:04:34+09:00" title="Saturday, 10-Feb-2024 08:04:34 JST">about 10 months ago</time> <span>from <span><a href="https://cyberplace.social/@GossiTheDog/111904019600877679" rel="external" title="Sent from cyberplace.social via ActivityPub">cyberplace.social</a></span></span><a href="https://cyberplace.social/@GossiTheDog/111904019600877679">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: opengraph.githubassets.com</div><h5><a href="https://github.com/dotnet/runtime/issues/98245">Announcement: BinaryFormatter is being removed in .NET 9 · Issue #98245 · dotnet/runtime</a></h5><div></div></header><div>Ever since .NET Core 1.0, we in .NET Security have been trying to lay BinaryFormatter to rest. It’s long been known by security practitioners that any deserializer, binary or text, which allows its...</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Kevin Beaumont (gossithedog@cyberplace.social)'s status on Saturday, 10-Feb-2024 08:04:34 JSTKevin Beaumont
- barry dorrans
Big security news from @blowdart that nobody will understand - BinaryFormatter is being removed from .net finally.
It’s the cause of a whole bunch of high impact vulns, including in Microsoft’s own products and lots of third party apps.
Will takes years to trickle down but will ultimately lead to better security for all, a great move.
https://github.com/dotnet/runtime/issues/98245
In conversationabout 10 months ago from cyberplace.socialpermalink
Attachments
1. Domain not in remote thumbnail source whitelist: opengraph.githubassets.com
  Announcement: BinaryFormatter is being removed in .NET 9 · Issue #98245 · dotnet/runtime
  Ever since .NET Core 1.0, we in .NET Security have been trying to lay BinaryFormatter to rest. It’s long been known by security practitioners that any deserializer, binary or text, which allows its...

Public

Embed Notice

HTML Code

Corresponding Notice