threatactor.club

Indicating how to report a vulnerability forcing going through a bug bounty program and its rules is, imho, plain wrong.

Always allow spontaneous and non binding reporting, not everyone wants (or can) submit to a bug bounty, while wanting to serve public interest.

I've been working on a client-side web app to inspect and analyze arbitrary data.

It's like a lightweight CyberChef that automatically builds recipes by recursively detecting and unpacking layers of encoding and compression.

It also lets you select specific parts of the input with your cursor to focus the inspection, which is neat when analyzing data that consists of multiple parts, or for skipping non-data prefixes and data separators.

https://michenriksen.com/inspectra/

#Data #AppSec #Security

I am going to talk at German OWASP Day in Leipzig today and I just learned it will be live streamed.

Tune in if you want to learn about cross-site leaks at 5pm CET (9am US Pacific). There's lots of other interesting stuff before me. The event has already started 😊 https://streaming.media.ccc.de/god2024

Ham wir noch Tabs?
Gar keine mehr?
Wer hat die letzten geschlossen?!
Mein Browser hat öfter mit Tabs zu tun, privat aber.

PSA: If you use GOGS.io (the predecessor to Gitea and friends), please make sure self-registration is disabled. I reported a trivial RCE a couple months ago, received no reply, and it's starting to look intentional.

how many kernel bugs do u think are left

# chroot 🧽

My employer #GitLab is hiring, specifically in the Security division. Security Identity Management is the area, so if you're into #Security and #IAM and you're qualified, apply. If not, a few other positions are available, feel free to poke around. Fully remote. I'm not shopping for a referral, I'm shopping for a work colleague, so apply!

#FediHire #infosec

https://boards.greenhouse.io/gitlab/jobs/7294564002

Terrestrische Astronautinnen und Astronauten für Bettruhestudie gesucht
https://www.dlr.de/de/aktuelles/nachrichten/2024/terrestrische-astronautinnen-und-astronauten-fuer-bettruhestudie-gesucht

Raise your hand if you ever made a paper snake out of tear-off tractor-feed margins.

Today we’re releasing weAudit, the VSCode extension we use during secure code reviews to collaboratively take notes and highlight code regions. https://blog.trailofbits.com/2024/03/19/read-code-like-a-pro-with-our-weaudit-vscode-extension/

weAudit keeps you focused on the code by allowing you to bookmark findings, open detailed GitHub issues, and track audited files without ever leaving VSCode.

Install it through the VSCode marketplace or view the code and send us your feature requests in our GitHub repo vscode-weaudit repo.
https://marketplace.visualstudio.com/items?itemName=trailofbits.weaudit

🚀Last-minute check-in to an academic career?

We're seeking two PhD students to research the security and privacy of machine learning. Fully funded positions in vibrant Berlin!

Deadline is this Friday, March 8th. Apply now: https://mlsec.org/jobs.html#jobs