Viewing profile — DBformore

TLDR: The state variable that ChatGPT uses in the integration with plugins, was not random. Attackers could install a malicious plugin on a victim by sending a link that mimic the …

ChatGPT plugins (think mini-apps for ChatGPT) expand functionality to ChatGPT but introduce new attack vectors. Those security researchers could install a malicious ChatGPT, that t…

A lot of developers are not sure about the answer. Security researchers from Salt could install malicious ChatGPT plugins, just because of a minor state mistake that ChatGPT made. …

Amazing!, help to better understand OAuth

https://salt.security/blog/traveling-with-oauth-account-take... https://www.csoonline.com/article/3689869/booking-com-accoun...

According to a recent study by Salt, a Booking.com attack could have potentially affected 100 million users. The attack is related to OAuth, a commonly used mechanism on modern web…

I can understand your company's perspective, they need to survive and probably encountered unexpected difficulties. I hope that at least they gave these candidates some amount of m…

And 90% of software engineers prefer to take 100 vacation days per year :) why not It is interesting to hear what they want, and as an employee, I agree. However most of the compan…

I myself don't use Slack, but a lot of my friends at other companies do, and security is a main issue. It's good to hear that the data is indeed encrypted, so even if your server g…

Nice, it indeed solves a problem. Where is the data stored? (What about privacy and security)

A remote controlled car , using LEGO + Android. I'm also try to insert a simple AI to this, to make the car remember every driver and adapt its sensitivity.

Cool, but I need you should provide some tutorial/how to use it

cool!

There are a lot of events and conferences for team leaders, developers, and entrepreneurs. You should talk with people, but don't look desperate.. say you have an idea and you just…

what do you mean "unscrollable"?