Viewing profile — vasuki

I can relate to that very much. Your former friend sounds exactly like one of my friends with whom I am trying to not end friendship and be as empathetic and helpful as I can be. >…

Do you have any go-to public tools for fact-checking or any internal tools that you might have had access to in the past? More generally speaking, how do you defend yourself agains…

I have not responded without listening to what he said, I followed him for quite some time to see what exactly he had to say. I do not like censoring by big tech as well, but when …

It is misinformation because it is outright wrong. Follow Malone for a couple of weeks and you will see he has nothing else to share but: Vaccines are bad, Vaccines are killing peo…

WHO: "As a matter of global equity, as long as many parts of the world are facing extreme vaccine shortages, countries that have achieved high vaccine coverage in their high-risk p…

This is definitely not precise. I confirmed that the lookup is also performed by Proton servers for mails sent to third party mail services, not just from third party mail services…

It might be because of path normalization by your http client. For example, with `curl` you will also need to use `--path-as-is` to correctly test traversal. Another reason could b…

Thank you for the detailed writeup. This is a topic which I think is not discussed much. > We will split public-facing CI from release infrastructure and internal CI infrastructure…

Not that we have public evidence to prove whether it was a nation-state or not, but in my experience as a vulnerability researcher, finding high-impact flaws in popular tools (clos…

Pursuing research in different fields (especially computational physics, bioinformatics) in personal capacity. I had once asked the same question to a scientist friend who actually…

> regularhours.net and holdmydoor.com appeared on a Turkish CERT list in November 2019 > we observed MONARCHY and SNEAKY KESTREL continue to use these domain names in attacks throu…

> I sent random requests using intruder with a CSRF token and random emails with a new password to this endpoint /savepassword So this endpoint simply allowed setting up a new pass…

I have been trying to reach out via the contact email provided on the website but never received a response. How may I disclose a security vulnerability related to simplepay.cloud …