http (@[email protected])

I tweet mainly about IT security, iOS / iPhone jailbreaking. I have a Microsoft background. Administrator on theiphonewiki․com. Blue team.

[blasty @bl4sty]

Decided to publish the Lexmark printer exploit + writeup + tools instead of sell it for peanuts. 0day at the time of writing: https://t.co/YptEXw3CjJ -- enjoy!

[http (@[email protected]) @SwissHttp]

@spale75 @S1D_ @lufthansa You cannot use two tickets for the same passenger, so they have to refund. If they refuse, simply undo the original charge with your card issuer. Works pretty well.

[kennyog @kennyog]

We (@winterdeaf @kientuong114 and I) took a deep dive on Threema, a Swiss-made secure messaging app. We found 6 new cryptographic vulnerabilities. Full paper at https://t.co/XMu8SZBCc3; mini-thread follows. #threema

[http (@[email protected]) @SwissHttp]

@esizkur @nervoir Sure, you cannot guarantee bug-freeness, but you can get pretty close. At $1000 per line of code.
https://t.co/NH5blsH8e4

[http (@[email protected]) @SwissHttp]

@ptracesecurity @KitPloit Isn’t there a typo in the ASCII-art title? #Exhange

[Sam Curry @samwcyo]

Super excited to release our car hacking research discussing vulnerabilities affecting hundreds of millions of vehicles, dozens of different car companies:

https://t.co/xCHG5oLYWK

Contributors:
@_specters_ @bbuerhaus @xEHLE_ @iangcarroll, @sshell_ @infosec_au @NahamSec @rez0__

[dragosr @dragosr]

Hi Auto Industry. It's the internet calling...
(Subtitle: How to take over a Ferrari account with zero interaction.)
https://t.co/OEemOgKmLT

[http (@[email protected]) @SwissHttp]

@iagox86 Yes, I found that one too. Too bad that it’s empty.

[http (@[email protected]) @SwissHttp]

Does anyone have a copy or working link to original netcat 1.00 (version 951010), file nc100.tgz or is that lost forever? I can only find dead ftp links or a MinGW fork or v1.10 versions.

[http (@[email protected]) @SwissHttp]

@plntxtoffenders @omervk Is your site still active? I see last entry from 2021. If yes, please add:
https://t.co/ruewbwF3ea

[tihmstar @tihmstar]

TIL: @netzclub speichert Passwörter im Klartext, gibt Mitarbeitern eine API um "die ersten 3 Zeichen abzufragen" und der Support fordert von den Kunden ihr passwort zu verraten.

WTF!?
Sogar als 2010 der Laden gegründet wurde war sowas schon absolutes No-Go o.O

[http (@[email protected]) @SwissHttp]

@tihmstar @netzclub not sure if still active, but start page has entries from 2021:
https://t.co/v7hfd1NJ1T

[http (@[email protected]) @SwissHttp]

@noahkagan @esizkur “My phone number is only for friends” is hard to say at a startup.

[http (@[email protected]) @SwissHttp]

@paulg @mikko and all sources it was trained on.

[http (@[email protected]) @SwissHttp]

@red5heep I did try the archive, but only searched for the file name. It could be on some iso file of distributed CDs of course. If you have an idea on how to search there and find it, let me know.

[vx-underground @vxunderground]

If you sent an API request to Twitter with an e-mail address, and an incorrect password, the API returned a JSON response containing the username associated with the account.

A Threat Actor compiled 221,608,279 entries.

This list includes celebrities, politicians, and more...

[http (@[email protected]) @SwissHttp]

@RandChange @jerblack @Slav636 @vxunderground If I read that documentation and there is a limit on authentication, that would be the 450 requests per 15 minutes, right?
With 1000 bearer tokens in parallel, you can check 1 billion emails in 23 days.

[http (@[email protected]) @SwissHttp]

@LiveOverflow @TomLawrenceTech @_JohnHammond I would guess your viewers are more educated and click+buy less of those products in the ads.

[http (@[email protected]) @SwissHttp]

@PwnFunction Maybe I just got distracted by the funny typo.