d0bby
Re:Tor Browser disabled NoScript, but can't update
on Sunday May 05, 2019 @11:00AM (#19833127)
> Turns out
an unrelated 3rd party can suddenly remotely disable Tor anonymity protections
at their whim, and possibly endanger TBB users (or deliberately help in
deanonymizing them).
> remotely disable Tor anonymity protections [!]
Maybe a 'certificate is expiring soon' warning on the browser side?
Users would know and Mozilla would be forced to keep certs valid.
OS Command Injection [video]
The Intigriti XSS challenge is over, but still up. Give it a try
Re:The inception bar: a new phishing method
on Sunday April 28, 2019 @02:33AM (#19769711)
I like how this is a trend now, fake popups, fake url bars.
Maybe _unique_ browser designs would help users.
Escaping Alcatraz: Breaking Out of [ ] Sandboxed Environments – Kirk Hayes
Fingerprinting Organizations with Collected Archives
Re:Don't Talk to the Police – James Duane
on Wednesday April 24, 2019 @04:10PM (#19742139)
Giving your license/id when asked does not need talking...
Jk, ofc you need to talk, for example to explain that you won't answer questions because you have the right to do so.
Why my job is so easy and how you can make it harder – Pen Test War Stories
Web Cache Deception Attack – Omer Gil
Don't Talk to the Police – James Duane
Exploiting CORS Misconfigurations for BTC and Bounties – James Kettle
0d0a CRLF Injection and More SSRF Magic
Re:Ask HN: What email client do you use?
on Saturday April 20, 2019 @08:00AM (#19706064)
Yeah mutt is pretty awesome... but since many mails these days are html you'll go through some trouble!
RCE in EA's Origin Desktop Client
Attacking Modern Web Technologies – Frans Rosen
Re:Adblock Plus filter lists may execute arbitrary code in web pages
on Monday April 15, 2019 @02:43PM (#19667729)
> My hunch tells me this is not good.
After some clicking I found this: https://github.com/uBlockOrigin/uAssets/issues/4080#issuecom... , might be interesting
Re:Adblock Plus filter lists may execute arbitrary code in web pages
on Monday April 15, 2019 @02:35PM (#19667651)
People are talking about uBlock Origin...
I really like it, no doubts it's good and everyone should consider using it.
BUT, since we are talking about uBlock Origin, I'd like to mention another awesome extention Raymond Hill made.
uMatrix (https://github.com/gorhill/uMatrix)
uMatrix alone is very powerful, and will prevent most ads.
Yes you as a user need to do the work, but the result is better.
If you like the idea of uMatrix, you may also look at NoScript!
Actually, I live almost ad free using NoScript + uBlock Origin for at least 2 yrs.
$rewrite... what a dumb feature btw!
@albinowax: CTF Writeup [H1-212]
Illustration: How a Bug Bounty Works
Re:Password Reset and Web-Cache Poisoning (and a Little Surprise in RF...
on Tuesday April 09, 2019 @01:59PM (#19617345)
"How does a deployable web-application know where it is? Creating a trustworthy absolute URI is trickier than it sounds. Developers often resort to the exceedingly untrustworthy HTTP Host header (_SERVER["HTTP_HOST"] in PHP)"...
Password Reset and Web-Cache Poisoning (and a Little Surprise in RFC-2616)
Re:How many hours do you reCAPTCHA per week?
on Tuesday April 02, 2019 @12:25PM (#19555836)
I'm using it with a VPN rn, it's working fine.
But yeah using a VPN/TOR increases the risk profile (or whatever they call it). It even slows down the animation of loading new images, it drives me crazy.
Re:How many hours do you reCAPTCHA per week?
on Tuesday April 02, 2019 @12:22PM (#19555789)
I'm trying it out right now. Works! I heard about people using Googles Speech-to-Text to solve the audio challenge some time ago... ty for showing this 1!
Re:How many hours do you reCAPTCHA per week?
on Tuesday April 02, 2019 @12:14PM (#19555696)
I'm trying to do so too, but it's hard.
But it's hard to find alternatives for some sites...
How many hours do you reCAPTCHA per week?
I didn't count, but I've spend too much time solving reCAPTCHAS. Google should be paying us for that. I'd guess an AI creates the tasks and x humans verify it -> the AI learns. Whatever their profitmodel is besides tracking, we should get money for that. For giving our data (another topic) and for every hour of solving those damn captchas https://www.youtube.com/watch?v=7B4bEXLJIl8
Re:How I raised $10M in venture capital
on Sunday March 31, 2019 @08:40AM (#19535286)
ok
Exact String Pattern Recognition [pdf]
Re:How to Stop Article 13?
on Wednesday March 20, 2019 @12:30PM (#19443820)
"Europe-wide protests are planned to take place on 23rd of March"
See you there! ;)
Re:Fanboy’s Anti-Cookie Filters – will remove cookie and privacy warnings
on Sunday March 17, 2019 @02:40PM (#19415575)
Very very nice, some new filters.