threatactor.club

Earlier this year I found a pretty cool vuln, an arbitrary file write in GitLab.

Here’s the details https://gitlab-com.gitlab.io/gl-security/security-tech-notes/security-research-tech-notes/devfile/

Happyxz Easter

Digitalisierung in Deutschland:

Cat content

Jedes Schild hat eine Geschichte.

🤦

Patch NOW

https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/

Happy new year everyone!

Closing off 2023 with something I haven’t done in a while

ping

o.O

👀

http://tiny.cc/37c3voucher

#ccc #37c3 #vouchers

Some things never change

OH: Intellektuelle Massephase

I smell quite some FUD about the alleged Signal 0day.

The recommendation is to turn off link previews, however link previews are generated on the sender side. Just tested, with link previews turned off you’ll still receive them from a device that sends those.

I think this would mean either:

• Turning off link previews isn’t a sufficient mitigation

or

• The vuln is triggering on the sender side that means someone needs to convince you to create a message containing a malicious link

or

• The whole thing is fake and just a nice troll

So hier zieht euch mal rein wie LiveOverflow da einen “Hacker” demontiert:

https://youtu.be/3FeAAQlUSJ4?feature=shared

I’ll play some music at #Geraffel Village tonight starting at about midnight :D #cccamp23

someone hacked @eventphone

:D

derp

Muhahahah brilliant

https://youtu.be/duLJUpptSik