News for hackers. Stuff that matters.

exec

Re:Log4j RCE Found on Friday December 10, 2021 @06:30PM (#29516775)
Yes. I managed to reproduce the issue with slf4j + log4j2.
Not using HTTPS is a critical mistake. Adversary can just do MITM attack and send modified code to the user's browser to steal passwords.

It's not best idea to share sensitive documents without using HTTPS.

Re:Java Hangs When Converting 2.2250738585072012e-308 on Tuesday February 01, 2011 @12:46PM (#2166403)
Most of internet banking systems in my country run on Java. And most of them can be affected if you know where to put this number.
I never heard back from dmoz.org. I have tried to add my customer's website years ago...