Viewing profile — axsharma

> "even if they've been a malicious actor the whole time" That is a sound argument, even if integrity of the package was to check out (if npm tracks this internally at all). Better…

Why not instead remove 'panya' as a maintainer from legitimate packages that were unaffected? No recent or malicious versions of Stylus have been published (which generally is the …

Interesting, blogged about this Feb 5th https://www.sonatype.com/blog/fake-vs-code-extension-on-npm-...

Close, that's more gray with a tint.

GOV.UK seems conflicted about it lol "You usually do not need a BRP to open a bank account. Contact the bank to check if you’ll need a BRP or if you can use a different document." …

Good point, rather interesting they state "in all our online journeys," rather than in-person. Anytime I've had to verify identity online for bank account opening, it entailed taki…

You need your passport if you've only got a vignette or in-passport visa sticker. BRP is often accepted, in lieu of driving license for bank account opening. https://www.lloydsbank…

While there is minimal or no passport control within the CTA, for example when travelling between UK and Ireland, the expectation is that the passenger is a citizen of a country wh…

The author here. The name eFile(.)com is bound to confuse some readers who may mistake it for IRS' e-file system/API. Probably why the company chose that brand name (SEO or whateve…

Probable explanation for the mysterious hacks on Xfinity accounts despite having 2FA enabled: 2FA bypass allegedly circulating privately "A researcher has told BleepingComputer tha…

Add to it that they reviewed "all recent commits to Okta software repositories." Due diligence or indicative of the threat actor having write access? Many unanswered questions.

Same thought here. The domain appears to be associated with Ningbo Sunning Software, a Chinese vendor and likely a Mediatek partner than anything Android.

How long 'til this gets DMCA'd...

Avanan had reported seeing this exploited by hackers back in July. https://www.avanan.com/blog/sending-phishing-emails-from-pay...

This, as others have pointed out via tweets and Tutanota themselves acknowledging the technicality on Reddit, is why I couldn't report on it (we received the blog from them too) an…