111–120 of 207 posts
Earlier quoted context omitted.
Funnily enough, it is mostly .NET applications running in production that I see stack-traces from these days.
If you even know something is a .Net app then the developer is likely terrible, so it is a self-selecting sample. You don't know most of the .Net MVC apps you interact with because there's no reason to know that.
I used to feel the same way. It’s worth changing.
Earlier quoted context omitted.
No one talks about the working parts of security. Like, in this case, having the application on a separate box, and having that box separated by vlans from important things.
I don't think the solution is to put things you don't care about behind vlans and having applications on separate boxes. This box is/was an attack vector. It was holding secrets. Secrets provide other attack vectors.
But on the other hand, the server or the network should not trust the application to be secure at all. The infrastructural setup should assume the application to be an . And that's why the application should be isolated on a system level, on a network level, and as much as possible. That's the good part I mean - the part that worked.
In contrast, I submitted a bad vulnerability in Facebook’s password reset feature yesterday that lets attacker’s send password reset PIN numbers to email addresses the user doesn’t necessarily control. The security team said to works as designed so they’re not going to fix it. Basically if someone requests a password reset on your account then the PIN number gets sent to all email addresses associated with your accou…
> scanning an IP range that belongs to Facebook (199.201.65.0/24) ping -4 facebook.com results in 157.240.18.35. Maybe, author used some other way to get those IPs. Can anyone throw a light on this?
Run the same query from a bunch of sites with different connectivity in the same town and you might get different answers depending on who's got peering agreements with who. Then spin that query again using other places in the world and you can get even more variety.
That is, assuming the site in question has worked out a way to vary the A/AAAA records for their actual domain (as opposed to the hosts within it, like "www"). Some of them might just point it at a single POP/frontend/whatever, and when that one goes down for whatever reason... things get interesting. Not that I would know anything about that.
He got $5k for an arbitrary remote execution bug? What a rip-off.
He should have gone to the black market, better yet sat on it. How long did it take Facebook to come forward with its user privacy violations?
This is a great concrete example why you should never run debug mode on a public server. Django can only do so much for redacting private info. This is also a great example of how insecure pickle is!
The Django project also has a lot of warnings about the pickle serializer: https://docs.djangoproject.com/en/2.1/topics/http/sessions/
Earlier quoted context omitted.
Funnily enough, it is mostly .NET applications running in production that I see stack-traces from these days.
If you even know something is a .Net app then the developer is likely terrible, so it is a self-selecting sample. You don't know most of the .Net MVC apps you interact with because there's no reason to know that.
Earlier quoted context omitted.
The point is, "for fun and profit" is such an overused and utterly boring cliché. Meaningful titles are pleasant to read and shows that the writer has put some effort to bring clarity into what they're trying to convey. (As someone who sits on a major open source conference talk panel, I cringe when I see one of these clichés slapped into the title without much thought. I politely suggest to rephrase to convey more "…
I'm in absolute agreement. Nerd-culture has been on autopilot for decades and needs to find its next level.
Earlier quoted context omitted.
Funnily enough, it is mostly .NET applications running in production that I see stack-traces from these days.
If you even know something is a .Net app then the developer is likely terrible, so it is a self-selecting sample. You don't know most of the .Net MVC apps you interact with because there's no reason to know that.