Collaborate Disseminate
Application news, DevOps food for thought, learning & tools from BitHubLab, and bugs, breaches, and more! News Bugs, Breaches, and More! 1.) FireFox uXSS and CSS XSS 2.) Windows 10 April 2018 Update Breaks SMBv1 3.) Some Signal Disappearing Message… Continue reading FireFox, Windows 10, DevOps, and BitHubLab – Application Security Weekly #19
via the inimitable Adam Shostack (author of The New School of Information Security) and Threat Modeling; a leader in the Threat Modeling arena), whilst writing at his fascinating blog, comes a sterling discussion of the DREAD method; or How To Name A … Continue reading DREAD, The Pirate Approach
While nobody is exactly sure on the exact etymology of the term, Thomas Edison mentioned some of his inventions being riddled with “bugs” in a letter he wrote all the way back to 1878. In the context of computers, any loyal Hackaday reader should know Grace Hopper’s infamous account of a moth being caught in an early electromechanical computer’s relays. To this pantheon of troublesome insects, we would humbly summit the story of a Sonoff TH16 switch being destroyed by a lowly ant.
According to [CNX Software], the Sonoff TH16 had been working perfectly for a year and a half …read more
A security researcher found a serious vulnerability that allowed hackers to take control of a Steam user’s computer. Continue reading An Exploit Left Millions of Steam Users Vulnerable for the Past 10 Years
A bug in Comcast’s router and modem activation process potentially exposed the private data of millions of customers who rented hardware from the company. Continue reading For the Love of God, Stop Renting Routers From Comcast
When is a bug not a bug? That’s the question raised by researcher Marius Tivadar’s latest Windows-crashing proof of concept. Continue reading Windows-crashing bug not patch-worthy, says Microsoft
If you use the Signal desktop app, be careful with your notification settings. Continue reading ‘Disappearing’ Signal Messages Are Stored Indefinitely on Mac Hard Drives
Peter Cao, writing at 9to5Mac, has penned a particularly interesting article, detailing Crowdfence, an Emirati based company, poised to garner beucoup dinero in the Windows, Android, iOS and macOS bug and exploitation marketplace, the legal marketplac… Continue reading Crowdfence, Bug and Exploit Mercantile
A new startup in Dubai is offering six and seven figure payouts for zero-day exploits for Android, iOS, Windows and Mac. Continue reading Startup Offers $3 Million to Anyone Who Can Hack the iPhone
Humans and insects think on a different scale, but entomologists study the behavior of these little organisms, so they’re not a complete mystery. There isn’t much intelligence in a single ant or a cubic millimeter of gray matter, but when they all start acting together, you get something greater than the sum of the parts. It is easy to fall into the trap of putting all the intelligence or programming into a single box since that’s how we function. Comparatively, itty-bitty brains, like microcontrollers and single-board computers are inexpensive and plentiful. Enter swarm mentality, and new tasks become possible.
[Kevin …read more