News for hackers. Stuff that matters.

luxoria

Re:Multiple Vulnerabilities in Pocket on Tuesday August 18, 2015 @12:12PM (#10079991)
>Grab ssh private keys from autoprovisioned EC2 user’s home directory using 301 redirect to file URI (after all, we’re running as root, we can read them).

This is not a fair assumption to make. Maybe they are running a LSM like AppArmor.