Alex

Polymath. Getting to know the world a little bit better every day. Looking for a proper conversation. #Art & #Science & #FreeSoftware & #Encryption enthusiast

[Alex @0xfinch]

Hanc marginis exiguitas non caperet

PGP: 0x1585b378de1b0daa

[Prof. Brian Keating @Briankeating]

My motto is
“ABC: Always Be Curious.”

But abide by the corollary of Marie Curie: “Be less curious about people and more curious about ideas.” [6/6]

[candid wueest 🇨🇭 @mylaocoon]

FYI #Defcon 29 videos are made available on YouTube😎
https://t.co/8koC7fZT4j

[Suraj @PwnFunction]

Yo hackers! I've built a small website that has some #XSS challenges.

🔗 https://t.co/EP3HnJBCvm

The main challenge for the week is `WW3`
All upcoming challenges will be hosted there, so stay tuned :)

Would love to know what you guys think. Have fun!

[Troy Hunt @troyhunt]

Time to increment the number at the end of the password!

[Matthew Green @matthew_d_green]

Lesson: maybe don’t use sensitive data like your ASLR offset as your key.

[Javier Smaldone @mis2centavos]

¿Me ayudan con el HT #SmartmaticMostráElCódigo? No falta mucho hasta octubre. Si le damos visibilidad al asunto, quizás podamos lograrlo.

[matt blaze @mattblaze]

Some “unhackable” voting equipment at ⁦@VotingVillageDC.

[edu3am @jedux]

Just your soul.

[Javier Smaldone @mis2centavos]

¿O les gusta más con esta otra?

[Mudge @dotMudge]

The types of bugs we continue to see from Palo Alto Networks in their products are disconcerting.

They are basic. They are identifiable through static analysis (format strings?!). And some products are built on risky foundations (Linux on MIPS lacks basic safety features).

??

[ivvi @vickyguareschi]

Me volvieron a escribir ahora que lo hice publicop, pero ni a mi ni a todas las otras personas que lo reportaron les dieron bola. Por eso @CableFibertel dejen de mandarme DMs. Despues les paso mi informe... si me pinta. Saludos.

[Florian Grunow @0x79]

@oasace North Korea does similar things to media files on their operating system #RedStarOS. They seemed to be way ahead and started this in 2014 already. Just saying ... ;) https://t.co/FrweKEoBM9

[Dhvl @17haval]

@oasace @nixcraft I dug a little more, seems like facebook has been injecting the identifier recently.
I managed to hexdump some images I uploaded to Facebook
1. 2014 - https://t.co/mWwnNOyJJr (No Identifier)
2. 2017 - https://t.co/AJel2caSXL (Contains Identifier)
Whatsapp isn't injecting though

[ivvi @vickyguareschi]

Hermoso, estamos tan trackeados que black mirror es una serie boluda al lado de estas cosas.

[Alex @0xfinch]

@halvarflake How would you go about enforcing something like that?

[Alex @0xfinch]

#HackNakedNews
https://t.co/CAgJz2Oicg

[James Kettle @albinowax]

This 'Antivirus Oracle' technique potentially enables a whole bunch of different attacks far beyond exploiting blind SSRF. See the discussion at https://t.co/nuBBiGwLRx

[Jonathan Leitschuh - [email protected] @JLLeitschuh]

Heads up @zoom_us:
The fix for the security vulnerability that impacts ~4 million of your users has regressed.
90-day public disclosure deadline was June 24th.
I'm going public tomorrow.
This is unacceptable.