John Carroll @n0x00@bladerunner.social
______________________________ https://thecontractor.io/
Joined Nov 2022
John Carroll
boosted
Former #ADSBExchange feeders are moving to a new server, adsb.fi. Coverage is light right now, but hopefully more feeders will come online soon.
If you're feeding #ADSB, please consider adding or switching by pointing to feed.adsb.fi
John Carroll
boosted
#ADSBExchange has been purchased by private equity.
If you're not aware, #ADSBx was the only open, free and uncensored ADSB aggregator. The owner/operator took a payout. People who have been feeding the service for years with a #RTLSDR receiver got nothing.
https://www.jetnet.com/news/jetnet-acquires-ads-b-exchange.html
I’m revisiting the Sopranos and every time I see Anthony Junior (AJ) I wonder if @hdm was a child actor for a while back then
If you’re a fan of #lolbas type things here’s 5 more from Microsoft, using this method you remove the write barrier that might have stood in your way for some programs that reside in program files system32 etc (old research revisited) https://thecontractor.io/blog/exploading/ the post covers some notable points I’d witnessed and there’s a little screencast at the bottom full of inacurate terminology if you want to hear my excellent bingo-calling voice
John Carroll
boosted
🐘
#MSTeams #RCE vulnerability found by @adm1nkyj1@twitter.com & @jinmo123@twitter.com. The deeplink handler for /l/task/:appId in Teams can load an arbitrary URL in webview/#iframe. Attackers can abuse this combined with Teams RPC to get code execution outside the sandbox:
https://blog.pksecurity.io/2023/01/16/2022-microsoft-teams-rce.html
John Carroll
boosted
Every company with a functioning security@ email address gets a cookie.
If it bounces me to HackerOne or something else with strict Terms of Service and mandatory accounts and email spam, I have a policy of defaulting to full disclosure.
John Carroll
boosted
Neither Microsoft, nor Amazon, nor Google, nor Meta are hurting for money. They are not belt tightening so they can survive the coming crunch.
They're doing just fine and could have easily found productive things for all those people to do.
They're laying off tens of thousands of people to make shareholders happy.
John Carroll
boosted
Patch you Gits!
End of last year I had the big pleasure to work with @marver and @mumblegrepper in a code review of Git.
Here's what we got for you:
https://www.openwall.com/lists/oss-security/2023/01/17/4
https://x41-dsec.de/security/research/job/news/2023/01/17/git-security-audit-ostif/
John Carroll
boosted
John Carroll
boosted
John Carroll
boosted
Unauthenticated Remote Code Execution in Cacti 🌵🐛
This vulnerability was literally introduced by a single character:
John Carroll
boosted
Contrary to the popular opinion that algorithms are purely objective these models are opinions embedded in mathematics. ~ Cathy O'Neil's Weapons of Math Destruction
John Carroll
boosted
______________________________ https://thecontractor.io/
Joined Nov 2022
