GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Notices by buherator (buherator@infosec.place)

  1. Embed this notice
    buherator (buherator@infosec.place)'s status on Wednesday, 02-Apr-2025 04:17:57 JST buherator buherator
    in reply to
    • Kevin Beaumont
    • CISA KEV Tracker
    @GossiTheDog @cisakevtracker Thanks for the heads up! I'm quite skeptical though given the previous FUD reports, can't wait to see more info about any observed attacks!
    In conversation about 12 hours ago from gnusocial.jp permalink
  2. Embed this notice
    buherator (buherator@infosec.place)'s status on Wednesday, 02-Apr-2025 03:02:11 JST buherator buherator
    in reply to
    • cR0w :cascadia:
    • Will Dormann
    @wdormann @cR0w Reminds me of: https://project-zero.issues.chromium.org/issues/42452353#comment2
    In conversation about 13 hours ago from infosec.place permalink

    Attachments

    1. No result found on File_thumbnail lookup.
      Project Zero
  3. Embed this notice
    buherator (buherator@infosec.place)'s status on Wednesday, 02-Apr-2025 03:02:09 JST buherator buherator
    in reply to
    • cR0w :cascadia:
    • Will Dormann
    @cR0w @wdormann Probably? Gmail definitely does that. Zero-click attack surface ftw!
    In conversation about 13 hours ago from infosec.place permalink
  4. Embed this notice
    buherator (buherator@infosec.place)'s status on Saturday, 29-Mar-2025 08:19:54 JST buherator buherator
    in reply to
    • Paul Cantrell
    @inthehands "Safely rewriting that code would take years" is a massive understatement from Wired too.
    In conversation about 4 days ago from infosec.place permalink
  5. Embed this notice
    buherator (buherator@infosec.place)'s status on Thursday, 20-Mar-2025 00:05:22 JST buherator buherator
    in reply to
    • Caitlin Condon
    @catc0n If by single source you mean Wallarm, that one is factually incorrect at multiple points so IMO it's best to dismiss as FUD:

    https://infosec.place/notice/As2Q4VaBioZNySoR6m
    In conversation about 14 days ago from infosec.place permalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: media.infosec.place
      buherator (@buherator@infosec.place)
      This "analysis" by Wallarm - claiming active exploitation of CVE-2025-24813 Tomcat RCE - is wrong in multiple ways (maybe LLM slop?): https://web.archive.org/web/20250314071219/https://lab.wallarm...
  6. Embed this notice
    buherator (buherator@infosec.place)'s status on Friday, 14-Feb-2025 01:09:29 JST buherator buherator
    in reply to
    • Ryan Castellucci :nonbinary_flag:
    @ryanc X-Trust-Me-Bro: {"alg":"nOnE"...} vulns would be pretty funny actually :) let's hope we'll never get there though...
    In conversation about 2 months ago from gnusocial.jp permalink
  7. Embed this notice
    buherator (buherator@infosec.place)'s status on Friday, 14-Feb-2025 00:31:53 JST buherator buherator
    in reply to
    • Ryan Castellucci :nonbinary_flag:
    @ryanc I was actually thinking whether some (not so) fancy crypto could be used to pass some instead of a bool that the attacker can't forge, then realized reverse proxy configs are not exactly designed to implement such transformations in the first place :)

    Nonetheless, this is an illustrative example that unless we point to some robust solution ppl *will* come up with complex but insecure solutions (see also Schneier's Law).
    In conversation about 2 months ago from gnusocial.jp permalink
  8. Embed this notice
    buherator (buherator@infosec.place)'s status on Thursday, 13-Feb-2025 23:40:53 JST buherator buherator
    Re: CVE-2025-0108

    Can we agree that "X-Trust-Me-Bro: $boolean" headers set by reverse proxies are an anti-pattern?

    If so, what is the best practice?
    In conversation about 2 months ago from infosec.place permalink
  9. Embed this notice
    buherator (buherator@infosec.place)'s status on Thursday, 13-Feb-2025 04:44:32 JST buherator buherator
    in reply to
    • silverwizard
    • cR0w :cascadia:
    @cR0w @silverwizard PR has to show their worth, I'm pretty sure this wasn't composed by the offensive team
    In conversation about 2 months ago from infosec.place permalink
  10. Embed this notice
    buherator (buherator@infosec.place)'s status on Thursday, 13-Feb-2025 04:40:17 JST buherator buherator
    in reply to
    • silverwizard
    • cR0w :cascadia:
    @silverwizard @cR0w To be fair, they could've pushed a silent patch...
    In conversation about 2 months ago from infosec.place permalink
  11. Embed this notice
    buherator (buherator@infosec.place)'s status on Thursday, 13-Feb-2025 04:30:17 JST buherator buherator
    • cR0w :cascadia:
    OK I think this (via @cR0w) deserves some more attention ( #CrowdStrike CVE-2025-1146):

    https://www.crowdstrike.com/security-advisories/cve-2025-1146/

    In short, Crowd Strike agents on Linux can be MitM'd when they connect to their mothership (CS cloud).

    My first Q is: what exactly is delivered to Falcon sensors from the CS cloud?

    I present my second Q as a meme for higher reach:
    In conversation about 2 months ago from infosec.place permalink

    Attachments


    1. https://media.infosec.place/infosec-place/57b8275762f6d9e3ab442a0c84b3d8d083729f348d1209075e8c131aeae9a341.jpeg
    2. No result found on File_thumbnail lookup.
      CVE 2025-1146 - crowdstrike.com
  12. Embed this notice
    buherator (buherator@infosec.place)'s status on Saturday, 08-Feb-2025 03:13:43 JST buherator buherator
    in reply to
    • Kevin Beaumont
    • Zeljka Zorz
    • screaminggoat
    @screaminggoat @zeljkazorz @GossiTheDog "However, due to inadequate server configurations, attacks become possible if *the serialized data is not verified* (CWE-642)" - this sounds more like disabled MAC than leaked key to me
    In conversation about 2 months ago from gnusocial.jp permalink
  13. Embed this notice
    buherator (buherator@infosec.place)'s status on Saturday, 08-Feb-2025 02:33:14 JST buherator buherator
    • Kevin Beaumont
    @GossiTheDog Thanks! Now I'm more confused: npm does .NET these days? Or we're talking NuGet?
    In conversation about 2 months ago from gnusocial.jp permalink
  14. Embed this notice
    buherator (buherator@infosec.place)'s status on Saturday, 08-Feb-2025 02:17:09 JST buherator buherator
    • Kevin Beaumont
    @GossiTheDog Forgive my ignorance, what is nom?
    In conversation about 2 months ago from gnusocial.jp permalink
  15. Embed this notice
    buherator (buherator@infosec.place)'s status on Friday, 07-Feb-2025 20:56:45 JST buherator buherator
    • Kevin Beaumont
    @GossiTheDog 1) 3000 is not a big number on the Internet (quality matters though) 2) This is an overestimation because not all keys are useful (as the captured text also implies)

    I haven't touched ASP.NET for a while, but I'd risk to say that app configuration also affects exploitability as i) not all apps rely on signed ViewState (IIRC) ii) deserialization gadgets are not universal.

    These are of course solvable problems, but still need to be taken into account for risk assessment.
    In conversation about 2 months ago from gnusocial.jp permalink

    Attachments


  16. Embed this notice
    buherator (buherator@infosec.place)'s status on Friday, 07-Feb-2025 17:35:04 JST buherator buherator
    in reply to
    • Kevin Beaumont
    @GossiTheDog That is technically true, but scanners already look for exposed web.configs, so any affected, but not already exploited Internet-facing sites would be simultaneously extremely negligent and lucky.

    https://github.com/projectdiscovery/nuclei-templates/blob/2390fd195ab00f2bb1142dd27ac2ab888622d9bd/http/exposures/configs/web-config.yaml#L22
    In conversation about 2 months ago from infosec.place permalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: opengraph.githubassets.com
      nuclei-templates/http/exposures/configs/web-config.yaml at 2390fd195ab00f2bb1142dd27ac2ab888622d9bd · projectdiscovery/nuclei-templates
      Community curated list of templates for the nuclei engine to find security vulnerabilities. - projectdiscovery/nuclei-templates
  17. Embed this notice
    buherator (buherator@infosec.place)'s status on Monday, 20-Jan-2025 23:04:43 JST buherator buherator
    Serious question: Is there an open-source 2D printer (the type with paper and ink)?

    If not, why not? Is there some serious production bottleneck that only HP&co can meet?
    In conversation about 2 months ago from infosec.place permalink
  18. Embed this notice
    buherator (buherator@infosec.place)'s status on Monday, 13-Jan-2025 16:24:51 JST buherator buherator
    "Even if I wanted to improve the app, I really didn't understand how to achieve the increasingly difficult goal I was aiming for. So, rather than writing an automation script that helped me skip over /the hard details/ I focused on learning the science I was trying to ignore."

    https://seclists.org/dailydave/2025/q1/3

    #fuzzing #llm
    In conversation about 3 months ago from infosec.place permalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: seclists.org
      Dailydave: Re: (the root of the root and the bud of the bud)
      from Don A. Bailey via Dailydave
  19. Embed this notice
    buherator (buherator@infosec.place)'s status on Monday, 13-Jan-2025 02:03:58 JST buherator buherator
    Old digital cameras turn out to be great for kids:

    - They come without all the invasive crap of smart phones
    - They boost creativity
    - They teach user interfaces and controls outside "push shiny moving button"
    - They teach basic software concepts like files (yes, knowing about files is a skill) and how to move them around

    And probably more.

    Coming up next: MP3 players!

    #parenting
    In conversation about 3 months ago from infosec.place permalink
  20. Embed this notice
    buherator (buherator@infosec.place)'s status on Thursday, 26-Dec-2024 00:18:45 JST buherator buherator
    What are the online #book stores that are neither a) monopolistic giants built on enshittification nor b) copyright bullies?

    If I ask for a unicorn, which ones do at least give authors a more fair share for their work?
    In conversation about 3 months ago from infosec.place permalink
  • Before

User actions

    buherator

    buherator

    A drunken debugger

    Tags
    • (None)

    Following 0

      Followers 0

        Groups 0

          Statistics

          User ID
          105742
          Member since
          9 Mar 2023
          Notices
          38
          Daily average
          0

          Feeds

          • Atom
          • Help
          • About
          • FAQ
          • TOS
          • Privacy
          • Source
          • Version
          • Contact

          GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

          Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.