Collaborate Disseminate
By Ben Reardon, Corelight Security Researcher In this blog we aim to provide a little insight into part of the lifecycle of Corelight Lab’s response to a critical HTTP vulnerability. We’ve open-sourced many such responses over the last year (see Append… Continue reading Detecting CVE-2021-31166 – HTTP vulnerability
Should be the header Expect-CT be set by a server that exposes a SOAP web service over SSL?
Continue reading Should a server set Expect-CT for a SOAP web service?
When it comes to cleaning your hands, [Arnov Sharma] is not messing around. He built an automatic soap dispenser using ultrasonic sensors, a stepper motor for activating the pump, and 3D printed components for housing a bottle of soap – a spectacular display of over-engineering. At least he won’t be …read more
I am working on a new project with a team of developers. The SOPA web services will be the main channel to publish the services.
I’d like to make secure those services from the begging and give the developers the guidelines on how to secur… Continue reading Session Management Verification Requirements from ASVS 3.0.1 and SOAP web services
I’m looking into implementation of SOAP API’s and understanding the security of these when using utilizing them on internet facing endpoints.
Regarding the security of data sent to these API’s, from research it seems two common options ar… Continue reading Do you need TLS when using WS-Security?
What are the security risks of basic authorization in SOAP requests?
I know that the username and password are concatenated and sent in Base64 in an HTTP header on every subsequent request, but it is still popular in SOAP WS.
Continue reading What are the security risks of basic authorization in SOAP requests?
Blowing bubbles is a pastime enjoyed by young and old alike. The pleasant motion and swirling colors of the bubbles can be remarkably relaxing. With the right tools and techniques, it’s possible to take striking photos of these soap film phenomena, and that’s exactly what [Eric] and [Travis] did.
After …read more
Blowing bubbles is a pastime enjoyed by young and old alike. The pleasant motion and swirling colors of the bubbles can be remarkably relaxing. With the right tools and techniques, it’s possible to take striking photos of these soap film phenomena, and that’s exactly what [Eric] and [Travis] did.
After …read more
If you’ve been hanging out here at Hackaday for awhile, you’ve certainly seen projects that were based around the concept of putting a miniature computer inside the carcass of some other piece of electronics. In fact at this point it’s something of a running joke, certainly we must have seen an Arduino or Raspberry Pi shoehorned into every type of consumer gadget ever built by this point. But if you thought this would be another example of that common trope by the headline, you might be in for something of a surprise.
[zapta] didn’t put an Arduino inside this GOJO …read more
Continue reading Automatic Soap Dispenser Hides Arduino Board
[Fmilburn] was having fun with his grandkids, playing around with a small Radio Shack solar panel, some supercapacitors and a Zener diode when the kids eventually moved on to blowing bubbles with their grandmother. To regain their interest he got an inexpensive battery powered, soap Bubble Blaster and converted it to run on the solar panel and supercapacitors instead.
His write-up is a pretty fun read, walking through his process, including an oscilloscope measurement showing how the capacitors’ voltage drops from 5.26 V to 3.5 V when the trigger is pressed, and interestingly, slowly recovers until it’s released a second …read more
Continue reading Hacking A Solar Bubble Blaster With Grandkids