If your code is executed on the attacker's pc then it is not your code anymore
if the attacker's code is executed on your pc, then it is not your pc anymore
The team at @OpenAI just fixed a critical account takeover vulnerability I reported few hours ago affecting #ChatGPT.
It was possible to takeover someone's account, view their chat history, and access their billing information without them ever realizing it.
Breakdown below 👇
1/ There are many ways to manage credentials in Kubernetes, some better than others: 🔐
- Kubernetes Secrets
- Encrypt Secrets (Bitnami, KSOPS)
- External secret stores
- Secrets Store CSI Driver
- Sidecar injectors (Vault, Conjur)
Here's the rundown: 🧵
The Center for Internet Security released the Supply Chain Security Benchmark!
It is SO awesome to see more industry attention on locking down CICD pipelines.
Table of contents attached.
PDF link: https://t.co/WSyOoZme7p
I was today years old when I found out Cloudflare has a wall full of lava lamps they feed into a camera as a way to generate randomness to create cryptographic keys
#WWDC#passkeys#apple
"First you enter the password."
Ok.
"Then, it is usually obfuscated through something like hashing plus salting, and the resulting salted hash is sent to the server."
What!?
Why so many people think passwords are hashed client-side?
https://t.co/4CuPZX41BG
@PincoPallinoQ@JediPerLItalia Era uno dei primi dispositivi passivi, quindi senza batteria. Richiede però una fonte di "alimentare" esterna.
https://t.co/e7zV9jbOj8
13 seconds. That’s the amount of time an OMG Cable had to be connected to my Android for @int0x80 to have ongoing access to my camera, microphone, photos, messages, GPS, etc.
Full episode on @Hak5: https://t.co/2823tfsyFc