Profile for joern
- Display name
- joernchen
- Username
- @joern@threatactor.club
- Role
- admin
About joern
Fields
- Website
- https://0day.click
- Threema
- https://threema.id/K8J68WTX
Bio
Your mom's favorite hacker!
My other account is @joernchen
- Joined
- Posts
- 674
- Followed by
- 1125
- Following
- 261
Stats
Recent public posts
What could possibly go wrong?
![$ python -c 'import yaml;y = yaml.safe_load(open("lol.yaml"));print(y["A"])'
Aaaaah
$ ruby -ryaml -e 'x = YAML.safe_load(File.read("lol.yaml"));puts x["A"]'
LOL!
$](https://threatactor.club/fileserver/016C9XGNWH2G8F4WAXXE00JYE9/attachment/original/01F5PYQBM7RZ2B8KA51W9RHYHW.png)
Unpopular take: .zip domains were a marketing gag targeting security people.
It’s that time of the year again
good old 19:15 double espresso
Stuff one finds buried in a shelf when moving ….
OR: Hot Single Sign Ons in your Collision Domain!
DANN MACHT HALT KEIN l,I 0 UND O IN EURE PASSWÖRTER!
Happy Valentine's Day!
I've got a little something for you all right here https://github.com/git/git/security/advisories/GHSA-r87m-v37r-cwfh
💕 Patch your Gits 💕
IDK but all those AI prompt injections like
seem to rely on in-band signalling which could have been avoided at design time by having separate channels for configuration and user input. But instead the 70s are calling and want their cereal whistles back
Sometimes you just need to look at the right spot and have a good guts feeling to find vulns.
https://about.gitlab.com/blog/2023/01/24/git-security-audit/
Patch you Gits!
End of last year I had the big pleasure to work with @marver and @mumblegrepper in a code review of Git.
Here's what we got for you:
https://www.openwall.com/lists/oss-security/2023/01/17/4
https://x41-dsec.de/security/research/job/news/2023/01/17/git-security-audit-ostif/
Raise your hand if you don’t take proper notes but only rely on the shell history file. 🙋
Christmas Eve RCE ☑️
Let’s see how the reporting goes. :D
My pics of 2022 https://pixelfed.de/c/512299667272592240
Zehkurity made in Germany
For the non german speaking people:
A German solar startup will pair your solar panels in their app solely based on your phone number.
Birdsite
Always impressed to see people talking BS and getting away with it.
Shitposting meta
Shitposting in the fediverse: so much joy.
Birdsite shitposting seems mostly about Mr. Musk nowadays.
Tired: Wie läuft dein Coding Projekt?
Wired: Alles fit im Git?
Covid
Is an asshole.
I’m still testing negative but by now it only seems a matter of time.