“Shared responsibility”, my ass. If you did the work to find a bug, you do you. If they want it so bad they can pay you for it or they should have found it themselves. End of.
Vendors are afraid of the asymmetry, and try to turn it back on you with shaming, mistreatment, and failing that, threats. Screw that.
Since we are on the MSRC drama bandwagon.. I'll share a story. Microsoft sent their attorneys after me in 2009, shutting down all my hosting servers and registrar account using DMCA despite not hosting any Microsoft products. All for some research I did against Microsoft COFEE.
PICARD: Data, shields up
DATA: Brilliant! Shields can reduce damage we sustain. Not immunity. Not hubris. Just prudence. It's not precaution—it's strategy.
[camera shakes]
WORF: HULL BREACHES ON NINE DECKS
DATA: Here's what happened: you told me to raise shields, and I didn't
Microsoft has banned Nightmare Eclipse from GitHub: https://t.co/EmeiJnJ0Ps
This is the researcher who disclosed several zero-days after Microsoft also deleted their MSRC account.
They have now moved on to GitLab: https://t.co/Npj0gplSum
(h/t to: @[email protected])
Hey @airtelindia@Airtel_Presence, connection request AJUKP8ZFZ7. Your own team is rejected request because your own team absolutely inept and is asking to wait for 3 months. Are you insane? Here is a customer ready for you, and your team is rejecting this. What is wrong with you
Personal update: I've joined Anthropic. I think the next few years at the frontier of LLMs will be especially formative. I am very excited to join the team here and get back to R&D. I remain deeply passionate about education and plan to resume my work on it in time.
@abanteindia@pankajbansalm3m Residents of #Smartworld Gems 89 are fed up 3rd class service + CAM hiked by ₹1.5/sqft — when previous charges were already irrational. This is daylight robbery. Residents deserve accountability, not exploitation. STOP LOOTING! @SMARTWORLDDEV
‼️🚨 Microsoft calls this "intended behaviour," so here we go.
How to dump the credentials of every user stored in Microsoft Edge:
1. Open Edge. Don't browse anywhere, just open it.
2. Flip to Task Manager, find Edge, expand the task.
3. Highlight the "browser" sub-task, right-click, and choose "Create Memory Dump."
4. Open the dump file and look for credentials.
The logged-in Windows user can dump every stored Edge credential with no additional rights. Which means any malware that user executes has those credentials for the asking.
Thanks to Rob VandenBrink at SANS: https://t.co/ebtVZxne4L
Car Hacking with GearGoat Simulator
GearGoat is a realistic environment for learning automotive hacking by simulating a vehicle’s internal CAN network
https://t.co/SpdNGO4qCU
@three_cube@_aircorridor#hacking
The internet has survived a period where a handful of late teens and early 20s kids were the only ones that knew about pre-malloc integer overflows as a bug class, and you could "grep malloc | grep \*" to find a bug in OpenSSH.
This is why I am pretty chill about Mythos.
@PanasonicIndia and once again. Bad hold times, no support. @jagograhakjago would soon come to you since Panasonic has shown no obligations post sale. This is an absolute joke.
@PanasonicIndia you may have great products, but your customer service is really bad. Request I29042627236230, and many more. I purchased 4 ACs, and no one is interested in installing them. Other brands like @LGIndia chase us, you avoid us. What a crying shame.