jack

security researcher

[strandjs - [email protected] @strandjs]

There has been a lot of talk about BHIS and our maternity and employment policies.

Please check out the following site for more details.

https://t.co/guIv8SkZV5

Thanks!

[Vik Sharɱa - Cake Wallet 🇺🇸 🦞🍰 @vikrantnyc]

I and/or @cake will be donating! Thanks for the heads up @fluffypony

[Riccardo Spagni @fluffypony]

Fund raiser for improving the efficiency of Monero's zk range proofs (Bulletproofs) by two researchers at Australia's CSIRO, Dr. Nan Wang and Dr. Dongxi Liu.

https://t.co/DdAsp3Pbe4

Here's the fundraiser, currently on 27% at time of posting:

https://t.co/Xzx9nXMk0z

Amazingly, these improvements to Monero's zk technology (which Monero has had for the last 8 years) are happening without any centralized dev fund.

[Stephen Sims @Steph3nSims]

0-day Hunting Strategy with Eugene “Spaceraccoon” Lim https://t.co/JMNNnVHgGZ

[Douglas Tuman @DouglasTuman]

If you have never tired mining Monero on your cpu, now’s the time to start.

Go to :
https://t.co/QFK4C6XjId

Download, install. Turn the miner on. It really is simple. Come ask questions here if you run into some issue.

[jack @HacksAndHops]

@notesnook @ProtonSupport @asklumo is this off base?

[jack @HacksAndHops]

@notesnook Agreed. Nothing against proton as I’m a paying customer but this is another marketing failure. No homomorphic encryption. Not open sourced (even though advertised). Nothing special. I intercepted the traffic and it uses minstral. This was strange

[jack @HacksAndHops]

@ProtonSupport “Our servers make dns requests on your behalf” is exactly the issue which DoH would prevent! There is no need for your servers (or any other layer 3 observers) to see my plaintext dns requests. Is Proton really arguing against encrypted dns? Please reconsider this stance.

[jack @HacksAndHops]

@ProtonSupport This is dishonest and a bad take. Traditional dns requests are encrypted (only to your server) and then sent in plain text over the internet to the specified dns server. Adding DoH support would mask the dns query from proton vpn servers and any intermediaries.

[jack @HacksAndHops]

@ryancbarnett Output encoding > input sanitization

[jack @HacksAndHops]

@daniguardio_la Any plans for proton sheets soon?

[jack @HacksAndHops]

@C5pider Sounds good 👍🏼

[5pider @C5pider]

Introducing Havoc Professional: A Lethal Presence

We’re excited to share a first look at Havoc Professional, a next-generation, highly modular Command and Control framework, and Kaine-kit our fully Position Independent Code agent engineered for stealth!

https://t.co/0aPVihoFIU

[jack @HacksAndHops]

@rebane2001 @MtnBer @ProtonMail Right! I’ve reported smtp vulnerabilities to them in the past but while their security team is cool they ignore or downplay serious issues. Its been months so I may just write it up as a blog

[jack @HacksAndHops]

@MtnBer @rebane2001 @ProtonMail It was $750 but still thats embarrassingly low compared to the impact and amount of research that went in to this exploit.
https://t.co/ydmRuuCz9C

[jack @HacksAndHops]

@MtnBer @rebane2001 @ProtonMail IIRC they only paid out $500 for a really cool xss and css exfil exploit through a malicious email.

[Matt Brown @nmatt0]

I'm launching a newsletter!!

The IoT Security Digest is a weekly newsletter where I will share my take on the latest IoT security news, tools and educational resources.

Informative and to the point. First post drops next week!
https://t.co/eDc8C8nw7T

[Monero Research Lab (Unofficial) @MoneroResearchL]

Ring Signature Resiliency to AI Analysis
A test of machine learning attacks on Monero's untraceability (2022)
https://t.co/QuSFEqRmji