Egor Homakov on Twitter: "Redmine! We can leak REDMINE/boards/1/topics/quote/1.js iterate id to leak all comments. Sensible again, I guess? And token too, dig sources"

the grugq ‏@thegrugq 29 Nov 2013

@homakov find a way to access redmine “embargoed” patches so someone can steal unpatched bugs from a redmine instance.
Expand Collapse
Egor Homakov ‏@homakov 29 Nov 2013

@thegrugq pardon?
Expand Collapse
Hey ‏@friestog 29 Nov 2013

@homakov @thegrugq i guess he means patches in the bug control system that have been hidden for security reasons
Expand Collapse
Egor Homakov ‏@homakov 29 Nov 2013

@friestog @thegrugq actually the bug i tweeted can do so. Simply make author to visit special page
Expand Collapse
the grugq ‏@thegrugq 29 Nov 2013

@friestog @homakov exactly. If you've a technique for stealing unreleased security bugs from projects, that's at least interesting
Expand Collapse
Egor Homakov ‏@homakov 29 Nov 2013

@thegrugq it requires admin or author with access to visit special page. Web..
Expand Collapse

Country	Code	For customers of
United States	40404	(any)
Canada	21212	(any)
United Kingdom	86444	Vodafone, Orange, 3, O2
Brazil	40404	Nextel, TIM
Haiti	40404	Digicel, Voila
Ireland	51210	Vodafone, O2
India	53000	Bharti Airtel, Videocon, Reliance
Indonesia	89887	AXIS, 3, Telkomsel, Indosat, XL Axiata
Italy	4880804	Wind
Italy	3424486444	Vodafone
» See SMS short codes for other countries

Add a location to your Tweets