Mast Security @mastsec@noc.social
Infosec, Networking and Hacking stuff - on Mastodon.
Joined Aug 2020
How I hijacked the top-level domain of a sovereign state
https://labs.detectify.com/2021/01/15/how-i-hijacked-the-top-level-domain-of-a-sovereign-state/
He registered an expired domain used by the .cd ccTLD. Great report.
NSA warns against using DoH inside enterprise networks
The NSA urges companies to host their own DoH resolvers and avoid sending DNS traffic to third-parties.
https://www.zdnet.com/article/nsa-warns-against-using-doh-inside-enterprise-networks/
Mast Security
boosted
Ubiquiti: Change Your Password, Enable 2FA.
Ubiquiti, a major vendor of cloud-enabled Internet of Things (IoT) devices such as routers, network video recorders, security cameras and access control systems, is urging customers to change their passwords and enable multi-factor authentication. The company says an incident at a third-party clo...
https://krebsonsecurity.com/?p=53996
Mast Security
boosted
Anyone else think that in times of national crisis, legitimate media sources should drop their freaking paywalls so they don't lose viewers to conspiracy-pushing right-wing sites that don't have such paywalls?
I mean, leave it up for the sports section if you want, but c'mon!
Stealing Your Private YouTube Videos, One Frame at a Time
https://bugs.xdavidhu.me/google/2021/01/11/stealing-your-private-videos-one-frame-at-a-time/
Really cool discovery and great bug bounty $$.
Mast Security
boosted
If you have a young child, remember to check what he is doing online and harden his personal (and school supplied) devices.
Sad story that could be prevented:
If you are looking for a solution, check https://cleanbrowsing.org
Mast Security
boosted
I am so glad to see that a judge threw out Apple's lawsuit against Corellium! ❤
The idea that running a virtual device is a violation of Apple's intellectual property rights is just obscene.
Mast Security
boosted
#SolarWinds wrote a blog post a in 2019 about how #FLOSS is dangerous because anyone can push malicious code to FLOSS projects:
https://thwack.solarwinds.com/t5/Geek-Speak-Blogs/The-Pros-and-Cons-of-Open-source-Tools/ba-p/478665
The irony could not be sweeter.
#InfoSec #IronySec #SupplyChainAttacks
/via @cguess
SolarWinds, whose software was backdoored to allow hackers to breach U.S. government agencies, was warned last year that anyone could access its update server using the password "solarwinds123"...
... APT they said... ?
Mast Security
boosted
Mast Security
boosted
"Amazon owns more than $2B worth of IPV4 addresses"
https://dangoldin.com/2020/12/11/amazon-owns-more-than-2b-worth-of-ipv4-addresses/
Not sure about the $2B value, but what I found interesting about this article is that based on his numbers, Amazon owns ~3% of all the IPv4 addresses available - and growing.
Over the last months, hackers have quietly added a subtle security flaw to over 50 large online stores, only to exploit them right before Black Friday...
The backdoor would ensure future access for the attackers, even if their primary operation was blown.
Sansec has been tracking this developing campaign since April this year, and found numerous stealthy tactics to dodge detection.
Good research:
Why is the Google Cloud UI so slow?
https://www.debugbear.com/blog/slow-google-cloud-ui
"Here's what happens when the browser wants to run some JavaScript code.
-Parsing
-Compilation (also happens lazily)
Initialization – the browser runs module initialization code,
-Running core app code – renders the application using the initialized modules
For the whole Google Cloud page, just parsing the source code takes 250ms, and compilation takes another 750ms ...
Mast Security
boosted
Linkedin is a weird social network.
https://divinations.substack.com/p/linkedins-alternate-universe
Nearly 70% of smart TVs and 46% of game consoles were found to contain hardcoded DNS settings - allowing them to simply ignore your local network’s DNS server entirely.
On average, Smart TVs generate an average of 60 megabytes of outgoing Internet traffic per day, all the while bypassing tools like PiHole - and DNS filters.
...
Earlier this year, Apple patched one of the most breathtaking iPhone vulnerabilities ever: a memory corruption bug in the iOS kernel that gave attackers remote access to the entire device -- over Wi-Fi, with no user interaction required at all. Oh, and exploits were wormable...
Just wow..
Mast Security
boosted
Drupal sites vulnerable to double-extension attacks | ZDNet: https://www.zdnet.com/article/drupal-sites-vulnerable-to-double-extension-attacks/
Mast Security
boosted
#PHP 8.0 is out!
https://www.php.net/archive/2020.php#2020-11-26-3
The migration to 7 was fairly straightforward for me and there aren't as many incompatibilities because of the way I've been writing since.
Of course, since my site is on OpenBSD, it would be some time before I see the 8.0 branch and 7.4 still the latest package
Infosec, Networking and Hacking stuff - on Mastodon.
Joined Aug 2020
