News for hackers. Stuff that matters.

michaelermer

Re:Are We Idiocracy Yet? on Tuesday April 07, 2026 @07:11AM (#47673382)
Re:Apple parental controls have more holes than Swiss cheese on Monday January 19, 2026 @10:31AM (#46680074)
This is crazy, friends told me apple was good on this, before we had to get a phone for our self, I now think they simply don't understand whats happening. It looks fine to non-tech parents i guess. The question is, what can be used as an alternative? I had first tried an old Android phone, but theres no way to disable app store, so kid figured out he can watch app store videos with no limit...
Same here, funadocs also integrates OpenAPI seamlessly and you can use blocks of the OpenAPI operations in your actual documentation which is perfect for writing developer guides.
Re:CVE-2022-23529 – node-jsonwebtoken on Tuesday January 10, 2023 @07:20PM (#34333402)
Re:CVE-2022-23529 – node-jsonwebtoken on Tuesday January 10, 2023 @12:54PM (#34328694)
This CVE is a joke, there is no attack vector. If an attacker is able to create an object with an executable function in the scope claimed in the CVE, he may just run the malicious code himself.
This is crazy, heres a video what happens after deleting and opening your URL. https://www.youtube.com/watch?v=DMY7Z9Fe0ic Before testing that I had the app itself removed months ago...
Re:Apple Cancels AirPower Product on Friday March 29, 2019 @07:29PM (#19526477)
Or a credit card ;)
Re:The death of Google on Tuesday October 09, 2018 @04:16PM (#18179462)
They don't tell if it was exploited, all they said was "we have no logs".
Yes, all of them
Re:Blizzard games were vulnerable to DNS rebinding attack on Monday January 22, 2018 @07:03PM (#16209453)
I call BS, it's the responsibility of the server to check Host headers and implement CORS. All browser provide these security measurements. There are valid use cases for having domain aliases for local ips.
Re:Blizzard games were vulnerable to DNS rebinding attack on Monday January 22, 2018 @07:00PM (#16209431)
And/or simply implement CORS headers.
Re:Reading privileged memory with a side-channel on Wednesday January 03, 2018 @05:57PM (#16066241)
Google's post is newer and has more insights, the registry article is now outdated.