CoolKoon

🇭🇺​🇸🇰​🇨🇿​🇺🇸​ IT guy, Linux, Windows, Python, PHP, Javascript, C, bash and some electronics of course. Among others...

[CoolKoon @coolkoon]

@trytorix @imatrix Ono ne vsechno je na internetu pravda, ze jo...

[CoolKoon @coolkoon]

@imatrix Nejen v USA. Pokud bych mel legalne koupenou Office 2019 licenci tak bych je udal na SOI taky.

[CoolKoon @coolkoon]

@cljack Yes. And if you're interested in a guy belonging to the second half then you better be able to deal with the first. Nobody said that it's gonna be easy.

[CoolKoon @coolkoon]

@smrt_a_divka Zeleni zmrdi tvrdi ze jo, dle jejich dusevni nemoci doprava je to mensi zlo.

[CoolKoon @coolkoon]

@allie__voss Yep, it also sends the signal that the only thing she might be usable for is sex, if at all.

[CoolKoon @coolkoon]

@zapatas_mom @fixournews @allie__voss Because that's the most adequate response for a fleecing proposal like that, that's why.

[CoolKoon @coolkoon]

Such a lovely FAFO moment for Micro$oft 🤗

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: Another researcher skipped coordinated disclosure entirely and dropped a critical 1-click GitHub token theft in public because he doesn't want to deal with MSRC. In his own words: "I really don't want to deal with MSRC on VSCode bugs."

The bug: just clicking a link can hand an attacker a GitHub token that reads AND writes to all your repos, including private ones. It lives in github[.]dev, GitHub's browser-based VSCode editor, which passes the browser an OAuth token that isn't scoped to a single repo. That token can touch everything you can.

Researcher Ammar Askar found that VSCode's sandboxed "webviews" leak keyboard events to the main editor. A malicious repo opened via one link can simulate keystrokes, install a local extension that skips VSCode's publisher-trust check, and exfiltrate your token. He published a working proof-of-concept.

He says when he reports github[.]dev bugs, GitHub tells him they're out of scope and to go report to MSRC, and a prior VSCode bug he reported was silently fixed with no credit. One commenter summed up the mood: "MSRC has turned into Feedback Hub."

[CoolKoon @coolkoon]

@IntCyberDigest He did the right thing, f|_|ck Micro$oft.

[CoolKoon @coolkoon]

@veronikaruut @Zasilkovna @Alzacz @dpd_cz @Allegro_Group "Město by mohlo reagovat na stížnosti obyvatel a řešit konkrétní problematické případy." - Presne o tohle by slo vsem zmrdum, stezovali by se na kazdy box, protoze nesnesou kdyz neco funguje dobre.

[CoolKoon @coolkoon]

@f_kalenda Kdyz se Trump sekne, jeste i pravdu rekne...

[CoolKoon @coolkoon]

@1ssve "Observational feedback"=source: trust me bro...

[CoolKoon @coolkoon]

@BratBranko Mojmirovce nie su nahodou ciganskou dedinou....?

[CoolKoon @coolkoon]

@f_kalenda Jakchce usporadat knihkupectvi krt kdyz nemaji jeste ani ty mikrofony a aktivni repraky (a maly mixazni pult na ovladani)? To predpokladaji ze se tam sejde jenom 10 lidi nebo co?

[CoolKoon @coolkoon]

@annierubyjane Nic se nemusi, jenom umrit a platit dane. 18 leta holka po ucnaku asi nebydli sama, ze jo...

[CoolKoon @coolkoon]

@jjelinekCZ @UPS Chtelo by to stezovat se spis na SOI, to zabere lepe...

[CoolKoon @coolkoon]

@AAdlerrrrrrrr It obviously didn't happen because of Transnistria.

[CoolKoon @coolkoon]

@l8explorer Kdyz nekdo dostane sok z vykrvaceni tak taky je uplne vybledlej.

[CoolKoon @coolkoon]

@signulll Probably a new dynamic price gouging algorithm or something like that...

[CoolKoon @coolkoon]

@_promar_ Opravdu se nemuzu rozhodnout jestli tohle je jenom rage bait anebo je to doopravdy...

[CoolKoon @coolkoon]

@randomrecruiter Every single company where HR scum has unlimited veto power over a candidate like that is doomed to crash and burn. HR that does this should be fired.