Joe Beeton

[Joe Beeton @JosephBeeton]

@taviso PNA keeps getting announced and then pulled due to as far as i can tell, compatibility issues with existing systems. But its a great area for finding vulnerabilities. https://t.co/H1HhkBgEHg lists some ive found. Inc a spring mcp vuln.

[Joe Beeton @JosephBeeton]

@jasonsaayman @icanvardar Its weird seeing a crossover between the two big security stories I'm following today.

[Joe Beeton @JosephBeeton]

@DealsFinderUK Very soom this is going to be cheaper than diesel

[Joe Beeton @JosephBeeton]

@DJSnM @Matt_Lowne Don't forget handsome!

[Joe Beeton @JosephBeeton]

@thinkdefence Chickenwire and some poles. Thats all you need.

[Joe Beeton @JosephBeeton]

@PositivFuturist I think you are missing the point, when talking about paid for software. If you can pay 1/10 of the price for something that is "good enough". You will pick that.

[Joe Beeton @JosephBeeton]

@PositivFuturist Bitbucket

[Joe Beeton @JosephBeeton]

@trufflesec Im guessing part of the reason its taking so long to fix, is working out the best way to unravel this mess. Do you block older keys from accessing gemini? Create a new type of key meant to be publicly accessible? Any fix breaks some existing users workflows.

[Joe Beeton @JosephBeeton]

@Dinosn I imagine they have lost alot more than that in lost customers/sales.

[Joe Beeton @JosephBeeton]

https://t.co/qmJM9ENNrc Ive done a few talks on this attack vector especially as a way to target developers that run services on localhost. Essentially js running in the browser can be used to interact in some circumstqnces with services bound to localhost leading to RCE on the devs machine in Spring, Quarkus, spring mcp. Several POCs can be found at https://t.co/wRBRPs8TlY its good to see it fixed at the browser level. Although another popup is not the way to do it.

[Joe Beeton @JosephBeeton]

You can if course. You shouldnt Esp in a business Apart from the technical issues of limited library support, memory safety etc. The main issue is you find it impossible to get skilled enough developers to maintain it after you have moved on. Java web devs are cheap and plentiful

[Joe Beeton @JosephBeeton]

@Osinttechnical Im suprised they still havent built relatively cheap hangars for their aircraft. These are relatively light fpv drones. Either hangars or just netting would have made this attack less effective. I know this is far from the front, but still.

[Joe Beeton @JosephBeeton]

@jaketeater @Osinttechnical Thats true, that makes fibre optic unlikely. So radio link to the container is most likely. I doubt they had rf jammers running at a airfield that far away.

[Joe Beeton @JosephBeeton]

@UKDefJournal 5 inches, thats the size of a tooth brush, how can they defend themselves with that!

[Joe Beeton @JosephBeeton]

Why are cash machines so intent on convincing me to check my bank balance?

[Joe Beeton @JosephBeeton]

@JackRhysider Also works for LLM prompt injection

[elttam @elttam]

New blog post: plORMbing your Django ORM - Part one of a series about ORM Leak vulnerabilities and attacking the Django ORM.

https://t.co/qAYSyHIHJp

[Joe Beeton @JosephBeeton]

POC for Netflix Genie Path Traversal to RCE ( CVE-2024-4701 ) is available https://t.co/aQcpMkpGHU

[hackaday @hackaday]

Who else learned in high school that you could use a file open or file save dialog to run executables?