Infosec company pwned by 4chan user
maia.crimew.gay
Infosec company pwned by 4chan user
1–10 of 234 posts
Re: Infosec company pwned by 4chan user
#2"however, they made one of the most comedic mistakes you can still make while setting up jenkins (im actually not sure which misconfiguration leads to this): the build information for each past build contains a link to the git repository, including the bitbucket credentials in the url. genius."
Re: Infosec company pwned by 4chan user
#3Who makes their Jenkins instance world accessible!
Re: Infosec company pwned by 4chan user
#4Who makes their Jenkins instance world accessible!
Anyone setting up a honey pot. Half of 4chan posts are 3 letter agencies trying to bait people into violence.
Re: Infosec company pwned by 4chan user
#5Who makes their Jenkins instance world accessible!
Who still uses Jenkins? It's an abomination of an obsolete system that is just a pain to use, manage, maintain, setup, etc. while there are much better, more featured, easier to use and maintain alternatives out there. And it has been like this for close to ten years now. It should have been ripped out in favour of either the "native" CI/CD (e.g. GitLab CI if GitLab is used for VCS, GitHub Actions if GitHub, etc.) or a modern one like Drone/Concoure/etc. years ago in any place that isn't ~two decades behind (so legacy airlines and banks?).
Re: Infosec company pwned by 4chan user
#6This page reminds me of the old web. I kind of miss it, auto-playing MIDI songs and custom cursors and all.
I'll take that over having to wade through Reddit 12 times out of 10.
Re: Infosec company pwned by 4chan user
#7Found this on the same blog. Wild read. Apparently they found a copy of the nofly list from 2019. https://maia.crimew.gay/posts/how-to-hack-an-airline/
Re: Infosec company pwned by 4chan user
#8Re: Infosec company pwned by 4chan user
#9Who makes their Jenkins instance world accessible!
Who still uses Jenkins? It's an abomination of an obsolete system that is just a pain to use, manage, maintain, setup, etc. while there are much better, more featured, easier to use and maintain alternatives out there. And it has been like this for close to ten years now . It should have been ripped out in favour of either the "native" CI/CD (e.g. GitLab CI if GitLab is used for VCS, GitHub Actions if GitHub, etc.) o…
“Who still uses Jenkins?”
I think you may have perhaps misjudged just how entrenched Jenkins is in corp/enterprise.
Re: Infosec company pwned by 4chan user
#10Who makes their Jenkins instance world accessible!
Who still uses Jenkins? It's an abomination of an obsolete system that is just a pain to use, manage, maintain, setup, etc. while there are much better, more featured, easier to use and maintain alternatives out there. And it has been like this for close to ten years now . It should have been ripped out in favour of either the "native" CI/CD (e.g. GitLab CI if GitLab is used for VCS, GitHub Actions if GitHub, etc.) o…
Oh they have come up with some new trash I have to learn? Great...
Say you were developing inn Angular and Python. Which one of these "alternatives" should I look in to? ie. Which is most requested by typical requiters?