veit

@fenceposterror

Mainly information security related posts.

Vrijeme pridruživanja: rujan 2014.

Tweetovi

Blokirali ste korisnika/cu @fenceposterror

Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @fenceposterror

  1. Prikvačeni tweet
    14. tra 2016.

    Some thoughts on Cross-Site Script Inclusion (XSSI)

    Poništi
  2. proslijedio/la je Tweet
    26. sij

    The claim in the FTI forensics report on Bezos’ iPhone that, “due to end-to-end encryption employed by WhatsApp, it is virtually impossible to decrypt the contents of the downloader [.enc file]...” bugged me so much that I coded up how to do it:

    Prikaži ovu nit
    Poništi
  3. proslijedio/la je Tweet
    7. sij

    As promised a few months ago, with we computed a chosen-prefix collision for SHA-1 for much cheaper than 100k$. Application example with impersonation on PGP Web-of-trust. website: paper:

    Poništi
  4. proslijedio/la je Tweet
    2. sij

    To bring in the new year here's a new blog post about empirically testing Windows Service Hardening to see if it is really not a security boundary even on Windows 10. h/t

    Poništi
  5. proslijedio/la je Tweet
    25. pro 2019.

    Nice bugs, despite the quite limited attack surface

    Poništi
  6. 11. pro 2019.

    Experiences with anyone? How does it compare to Sonar?

    Poništi
  7. proslijedio/la je Tweet
    9. pro 2019.

    We are hiring! Work on extremely interesting tech in a small and friendly team. Have big impact. Reduce computational waste, save customers money, reduce energy waste/CO2, and have fun while doing so. Full job description here:

    Poništi
  8. proslijedio/la je Tweet
    19. stu 2019.

    I presented about Site Isolation in Google's event called 🙂 / "The world of Site Isolation and compromised renderer" Slide: Video:

    Prikaži ovu nit
    Poništi
  9. proslijedio/la je Tweet
    27. stu 2019.

    When I start to think I understand Kubernetes:

    Poništi
  10. proslijedio/la je Tweet
    15. stu 2019.

    Paged Out! #2 Thanks to all the authors and the institute! Enjoy!

    Poništi
  11. proslijedio/la je Tweet
    7. stu 2019.

    After a longer time, we had again a look at SAML...resulted in a complete signature bypass in SimpleSAMLphp and xmlseclibs, and my coolest (public) Signature Wrapping exploit. Please patch. Writeup: (CVE-2019-3465) // cc

    Prikaži ovu nit
    Poništi
  12. 14. lis 2019.
    Poništi
  13. proslijedio/la je Tweet
    3. lis 2019.

    Dont forget to mark your calendar 11.-12.June 2020 Area41 conference at Kaufleuten Zurich more details to follow...

    Poništi
  14. proslijedio/la je Tweet
    29. ruj 2019.
    Poništi
  15. proslijedio/la je Tweet
    26. ruj 2019.

    Hey! I recently crafted a surprising payload when solving XSS Challenge on Twitter and wrote a whole article about my findings. “𝘊𝘭𝘰𝘣𝘣𝘦𝘳𝘪𝘯𝘨 𝘵𝘩𝘦 𝘤𝘭𝘰𝘣𝘣𝘦𝘳𝘦𝘥 — 𝘈𝘥𝘷𝘢𝘯𝘤𝘦𝘥 𝘋𝘖𝘔 𝘊𝘭𝘰𝘣𝘣𝘦𝘳𝘪𝘯𝘨” Hope you like it!

    Prikaži ovu nit
    Poništi
  16. 20. ruj 2019.

    Is there anyone I should meet while I'm in Indianapolis? Are there any pentester meetups there you know of?

    Prikaži ovu nit
    Poništi
  17. proslijedio/la je Tweet

    Hey, Apple! I fixed your press release for you.

    Prikaži ovu nit
    Poništi
  18. proslijedio/la je Tweet
    30. kol 2019.

    What the actual fuck? How is this not a violation of my privacy expectations, and how is this justified?

    Poništi
  19. 29. kol 2019.

    Impressed by the open communication on vulnerabilities with and ! A pleasure to work with!

    Poništi
  20. proslijedio/la je Tweet

    Today I am announcing Verifpal, my greatest work yet.

    Prikaži ovu nit
    Poništi
  21. proslijedio/la je Tweet

    What genius made this?! It’s amazing.

    Prikaži ovu nit
    Poništi

Čini se da učitavanje traje već neko vrijeme.

Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.

    Možda bi vam se svidjelo i ovo:

    ·