equilibriumuk

@[email protected] · Webdev · 🟨 JS, TS, Go 🦀 Rust · 🔑 Cybersec · 🐧 Linux · 🖋️ Occasional Blogger ·🍵Green Tea · ☕Black Coffee

[equilibriumuk @equilibriumuk]

What's using all my disk space on my development drive ...

#Nodejs
find . -type d -name node_modules -print0 | xargs -0 du -hcd0 | sort -h

#Rust
find . -type d -name target -print0 | xargs -0 du -hcd0 | sort -h

Time to clean 🧹🧹🧹

[hacker.house @hackerfantastic]

Kaspersky now banned by the @FCC along with Huawei, ZTE and Hytera products for government agencies in the USA. It's about time the US acted on ZTE whose handsets we found bugdoors/backdoors in targeting low income and blue collar workers in the US. https://t.co/KLRV9BipGI

[equilibriumuk @equilibriumuk]

#infosec journalism ref: mastodon

"Security experts are laying Mastodon's flaws bare"

content:
- html inj vuln found
- misconfiguration on 1 server
- someone scraping data

html vuln required glitch-soc

misconfig is admin error

the scraping of public data is a vuln now?

[shenetworks @shenetworks]

Dying that this video got taken down 💀

[Tom - https://contextfree.bsky.social @contextfreeinfo]

New video out on memory safety in C++, Zig, & Rust! https://t.co/IyyrT9C2ml

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

The advisory isn't out yet, but the OpenSSL 3.0.7 source archive is.

Here's a rough diff. (There might be some artifacts, as the base comes from git.)

https://t.co/BH3SqrHcV4

https://t.co/pXwuTMhWlv

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

Why don't we release CVE numbers with pre-announcements?

It would be very convenient to name tools and write docs and open issues in advance. The point of CVEs is to get everyone talking about the vuln with the same name, and we are all talking about it already. #OpenSSL

[Igor Wallossek @IgorWallossek]

The horror has a face - NVIDIA’s hot 12VHPWR adapter for the GeForce RTX 4090 with a built-in breaking point. Cut open, analyzed and disposed of in the trash. A feast for the fire fighters #nvidia #rtx4090 #melting

https://t.co/EDK1dMw0GM

[Alex Ellis @alexellisuk]

But will it Linux? Microsoft Dev Kit 2023 ARM64

[Simone Margaritelli @evilsocket]

Reverse Engineering the Apple MultiPeer Connectivity Framework

https://t.co/YdIeGvcukm

[Bill Demirkapi @BillDemirkapi]

The Uber hack is quite severe and wide ranging. Wishing their blue teams the best of luck and love during this understandably difficult period. Some thoughts & observations based on what we've seen so far 👉 1/N

[vx-underground @vxunderground]

Uber is currently responding to a "cybersecurity incident".

[Uber Comms @Uber_Comms]

We are currently responding to a cybersecurity incident. We are in touch with law enforcement and will post additional updates here as they become available.

[Sam Curry @samwcyo]

Someone hacked an Uber employees HackerOne account and is commenting on all of the tickets. They likely have access to all of the Uber HackerOne reports.

[raptor @0xdea]

Pixel6: Booting up

// by @eshard

https://t.co/W1DvIvx7XQ

[Yarden Shafir @yarden_shafir]

If you’re interested in Windows IPC mechanisms, this is an excellent series by @0xcsandker: https://t.co/zzkXSqQ4go