Creează un cont pentru a te abona la acest blog și a-i urmări articolele pe pagina Lectură.
-
Port knocking is mostly a bad idea.
-
A look at how a newline character in SSH usernames could confuse ProxyCommand in OpenSSH, leading to command injection and potential RCE.
-
Progress on progressive enhancement with new CSS features.
-
Answering the question of how big a TXT record can be.
-
tl;dr: On Unix-like platforms, if you use git clone --recursive on an untrusted repo, it could achieve remote code execution.
-
Ancient history meets modern terminals...
-
Blink, the mobile shell for iOS had a URL handler that handled more than expected.
-
A simple anti-scraper solution for haproxy.
-
Exploring a security bug in Ghostty that is eerily familiar.
-
A script to restrict SFTP to some directories, without needing chroot or other privileged configuration.
-
A paper detailing how unescaped output to a terminal could result in unexpected code execution, on many terminal emulators.