Giorgio Fedon 🕸️

Co-founder and Technical Director @ Minded Security. Application security and bug researcher. Flash-to-Bang vulns are the bugs I love.

[Giorgio Fedon 🕸️ @n0def]

@antirez And … llm are memory demanding

[Giorgio Fedon 🕸️ @n0def]

@elonmusk when you sell you have nore taxes to pay. Or probably you just think that #Tesla is overvalued?

[Giorgio Fedon 🕸️ @n0def]

@elonmusk @elonmusk are you selling Tesla stocks, your beloved Tesla stocks to pay crypto taxes for Floki, Doge and other coins? Hope not

[Giorgio Fedon 🕸️ @n0def]

@lastknight @lastknight @cgiustozzi avevano quindi abilitato il copy-on-write? (Funzionalità presente in alcuni filesystem e non abilitata di default es. btrfs e zfs che permette di preservare i dati originali)

[Stefano Zanero @raistolo]

After 23 years of looking at security vulnerabilities, hacking into things and trying to characterize adversaries, I am more and more convinced that the real difference between professional security experts and amateurs is the ability to properly model and assess threats.

[Stefano Di Paola @WisecWisec]

Brilliant research by @samykamkar! Wondering about Client Side Defense? *Behave!* extension warns the user about the malicious scan when slipstream tries to access private IPs. ;) https://t.co/4slntsgI9o

[Giorgio Fedon 🕸️ @n0def]

@dotMudge Otello the mimetic cat

[The Hacker News @TheHackersNews]

Here's a browser extension, called "Behave!" that monitors and warns users if a web-page performs any following actions:

✅ Browser-based Port Scan
✅ Access Private IPs
✅ DNS Rebinding attacks to Private IPs

https://t.co/IsMBGeC748

#infosec #chrome #firefox #cybersecurity

[IMQ Minded Security @mindedsecurity]

[Blog] Read now our brand new post on "Remote Working - Web Chats: Threats and countermeasures"
https://t.co/btlS4yn1ZZ

[Giorgio Fedon 🕸️ @n0def]

@ctrlshifti John’s envy is The nasty bitch

[Giorgio Fedon 🕸️ @n0def]

@pdp Many Vulnerability amplification issues are a blend of internal administrive issues combined with publicly exploitable vuln. Such as second order Xss, Rce on the administrative panel for example

[∫КჄ⎩∣⋂ᕮᗤ @berendjanwever]

yo dawg we heard u like bugs so we put an error in ur error reporting so u can crash while u crash!

But seriously... what if by crashing an application using a non-security bug, you can exploit a real vulnerability in Windows Error Reporting?

[Stefano Zanero @raistolo]

Stamattina molte persone mi hanno chiesto se fosse phishing. Invece è tutto drammaticamente vero.

[Giorgio Fedon 🕸️ @n0def]

@wbm312 Glengoyne single malt

[Databeers Padova @DataBeersPD]

🧐Quando ti arriva un muletto di ottima @EstrellaDammEs può voler dire soltanto una cosa...

Che il #databeers è alle porte! 🙌🎉

Ci vediamo domani sera per 4⃣ fantastiche storie di dati e tanta birra!!!

📅 29 Novembre 18:30
🌍@Uqido
🍻@EstrellaDammEs
Grazie ai nostri sponsor!

[altf2o @altf2o]

I'm sorry to do this to ya'll, but lmao hahahaha!!! Happy Thanksgiving everyone!

[Giorgio Fedon 🕸️ @n0def]

AWS on the track for mitigating SSRFs impact against EC2 instances. Due to their architecture design exposure to SSRFs (usually low risk) has been unusually high. Time to fix that, without opt-in

[Luca Carettoni @lucacarettoni]

It appears that I may retire while still doing SSRF on AWS...

[vangelis @vangelis_at_POC]

At #POC2019, Xpl017Elz will give the second round of “New Reliable Android Kernel Root Exploitation”(first round at POC2016). He will talk about bypassing attack against KASLR, PXN, RKP, JOPP, EPV, etc. If you are interested in making a fullchain in Android, come to #POC2019.

[vangelis @vangelis_at_POC]

One of @qwertyoruiopz’s plans in #POC2019(Nov. 7~8) is to release a forever jailbreak. I hope his plan will go well.

https://t.co/m13YzLMgts

[Willy Woo @willywoo]

Just looking into this privacy breach by BitMEX. Customers were emailed with other customer's email addresses visible in the To: field.