Microsoft Patches Six Zero-Day Security Holes

Re:Microsoft Patches Six Zero-Day Security Holes by 1vuio0pswjnm7 on Tuesday June 08, 2021 @08:03PM (#27442655)

Microsoft is asking the user to enable Javascript. There is no technical reason in this case why Javascript is necessary.

https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/...

To add insult to injury, Microsoft's server refuses to honour the Accept-Encoding header, e.g., setting the value to "identity" has no effect. It returns compressed content no matter what, even when the content size is very small.

To create a simple HTML page with all the info you need, no Javascript required

    sed '/^e/!s/^/url=/'<<eof|curl -K-|gzip -dc|sed 's/",/\"<br>/g;s/\\n//g' > 1.htm
    https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-33742
    https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-31955
    https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-31956
    https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-33739
    https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-31201
    https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-31199
    https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-31959
    https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-31963
    eof 
    firefox ./1.htm

[ Parent | on HN ]

Re:Microsoft Patches Six Zero-Day Security Holes by 1vuio0pswjnm7 on Wednesday June 09, 2021 @10:07AM (#27448006)

   tnftp instead of curl
   
   ftp -4o'|zcat' $(printf "%s\40" $(cat<<eof
   https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-33742
   https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-31955
   https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-31956
   https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-33739
   https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-31201
   https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-31199
   https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-31959
   https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-31963
   eof
   ))|sed 's/",/\"<br>/g;s/\\n//g' > 1.htm;
   firefox ./1.htm

[ Parent | on HN ]

Re:Microsoft Patches Six Zero-Day Security Holes by hulitu on Wednesday June 09, 2021 @05:10AM (#27445841)

There is a technical reason: they want to track you.

[ Parent | on HN ]

Re:Microsoft Patches Six Zero-Day Security Holes by 1vuio0pswjnm7 on Wednesday June 09, 2021 @05:34AM (#27445994)

s/you/members of the public/

[ Parent | on HN ]

Re:Microsoft Patches Six Zero-Day Security Holes by fidesomnes on Wednesday June 09, 2021 @06:12AM (#27446215)

I love your use of piped commands in your comment history, thanks so much for these examples.

[ Parent | on HN ]