infosex.exchange <3
You are probably looking for the infosec.exchange Mastodon instance
This host is mostly for my random stuff, and in little part acts like a well-intentioned placeholder for the typosquatted domain.
Discoverability and Archiving
Currently I'm using this host for saving the items from my own feeds to the Wayback Machine and provide in-links for search engines. I hate that I have to do this, but the non-sense ideology of Mastodon pretty much ruined the search feature for Fediverse as a whole, and this wasn't changed by the fact that they owned their mistake and implemented search eventually.
Yes, I (or anyone else) could do similar things with other peoples published feeds, regardless of the tantrum. No, you can't defederate this, because the process doesn't rely on an instance.
Gluttony Section for Search Engines
I wonder how many blinky boxes embedding ClamAV are affected by CVE-2024-20328...
@joxean You've got it?? Post some TikTok videos or something!!
@fenix Could you summarize this in English? Is there active exploitation?
[Alex Plaskett @ X] RT by @alexjplaskett: What kind of guarantees can our tooling & processes really provide about the security of our software systems? Here are 9 *fundamental* challenges that are routinely exploited to attack a system despite credible assurances about its security.
https://arxiv.org/abs/2402.01944
[Alisa Shevchenko @ X] RT by @alisaesage: Full chain analysis for CVE-2022-4262 to commemorate my time spent on this non-trivial type confusion! Shoutout to @mistymntncop for his crafted artful exploit and discussion with me! And shoutout to @_clem1, @5aelo, @alisaesage for their prior work :)
Type confusion in V8 in Google Chrome prior to 108.0.5359.94
https://github.com/bjrjk/CVE-2022-4262/
Next Page