@kalenjordan I sure am, from a merchant perspective (depending on size, vertical, customisation requirements etc) there are a lot of pro’s. As an agency it’s our job to recommend/implement the best solution for the job.
@LBajsarowicz As others have mentioned, @akoova are top notch. Worked closely with them and multiple clients @zts and @ospadano really know their stuff.
@jhuskisson@jcowie@natashaknowl3s Because luckily kids teach them selves, then go home and look after themselves and never come into contact with adults thus spreading a highly contagious sickness...
@kalenjordan@sansecio It could be they spent time brute forcing a bunch of credentials, then triggered them all in one go. They could have hacked a support portal for a vendor and stole the credentials. It could be a yet unknown vulnerability, so far, nobody seems to know 🤷♂️
@kalenjordan@sansecio downloader, like any other adminhtml controller, require you to be logged in. Give me your username and password and I can replicate the “hack” as shown by logs that have been published. The question is, how they got logged in, or trigger it without doing so.
@philwinkle@MarkShust@kalenjordan@sansecio Downloader was used to upload malicious code, that’s what it’s for, uploading code. The question is how they accessed it without authenticating or if they did authenticate how they got authentication details.
@lukerodgers90@matthewhaworth I bet your search results aren’t as good as googles either. If you can’t compete with a billion dollar specialist on a shoe string budget, why are you even in the business? 🤷♂️
@gwillem@lukerodgers90@AdobeSecurity@magento@maxpchadwick I’m largely with Luke. Without curiousity I don’t think you could be successful at finding issues, but it requires a significant effort to get from “ooh, this can be manipulated” to writing a working PoC / report and getting it fixed by somebody. Time (and sanity) is a valuable.
@max_pronko@fbeardev No, your extension isn’t good enough to give away for free to people who want it on Marketplace... oh, you want to pay us? Let’s just put it in core then and force everyone to have it.
@CentrebusLive@Centrebus@TheRealGJT is canal street, Nottingham closed today, or after today? I.e will the No 19, Nott > Melton leave from the normal place at 5:50 today?
Anybody got advice on how to get FB to unlock an account they claimed breaks their T&Cs? My dads account was closed a month ago, he was using it as OAuth for a game. He’s a real person, can hardly spam, he has no friends... @facebook