aviCC

2 tahun yang laludiscuss

Wow if that's true and affects more websites, then it's super cool and huge

2 tahun yang laludiscuss

And a link, if you want to read the official blog post: https://salt.security/blog/security-flaws-within-chatgpt-ext...

2 tahun yang laludiscuss

Technical details: "The plugin does not authenticate the request, which means that the attacker can insert another memberId (aka the victim) and get a code that represents the victim. With that code, he can use ChatGPT and access the GitHub of the victim."

aviCC

3 tahun yang laludiscuss

Invest money on companies who want to improve our life

aviCC

3 tahun yang laludiscuss

https://platform.intervee.io/

Provides practical challenges with guidance for graduates in various subjects including Linux, Network, Security, and more..

Computer Science can sometimes be theoretical and learning from practical example is a must.

aviCC

3 tahun yang laludiscuss

Actually, the CVE-2023-283131 vulnerability was published with the full details just two days ago. In April Expo published a short post but without too much technical information. You can find more details about CVE-2023-283131 in the link I shared here:

https://salt.security/blog/a-new-oauth-vulnerability-that-ma....

Thank you for bringing up the distinction, and I agree that OpenID can help address some of the issues, but not all of them...

aviCC

3 tahun yang laludiscuss

TLDR: A direct link to the interesting technical information: https://salt.security/blog/a-new-oauth-vulnerability-that-ma...

aviCC

3 tahun yang laludiscuss

Original article: https://salt.security/blog/traveling-with-oauth-account-take...

aviCC

3 tahun yang laludiscuss

https://salt.security/blog/traveling-with-oauth-account-take...

Video: https://youtu.be/IK_AV1UFS-0

aviCC

3 tahun yang laludiscuss

This is the link to the research, you provided a link to Reddit: https://salt.security/blog/traveling-with-oauth-account-take...

aviCC

4 tahun yang laludiscuss

Makes sense. They are very useful as a monitor stand.

aviCC

4 tahun yang laludiscuss

Lol, absolutely not

aviCC

4 tahun yang laludiscuss

I use an 11 years old desktop computer, with a few upgrades (memory, SSD). It is good enough for my virtual machines and other heavy programs.

I don't see a reason to invest in a laptop if 90% of the time you work in the same place. For the other 10% - buy a cheap laptop.

aviCC

4 tahun yang laludiscuss

I'm going to add a code design course to: https://platform.intervee.io/courses

with challenges that very similar to the problems you described. But it will take a few weeks to be ready.

For your question: Maybe they undervalue a well design code because it's hard to be measured. At the end of the day, you judge them based on their tasks and not quality. Try to give them a motivation to think like architects. What would happen if you ask them to be reviewed by a team member, before pushing it to your review?

aviCC

4 tahun yang laludiscuss

Sounds great for Pool Roofing companies

Submissions

[untitled]

[untitled]

[untitled]

Ask HN: Print “Hello World” in Python/C/Bash without use W&numbers in your code

OAuth Flaw Exposed Social Media Logins to Account Takeover

[untitled]

A New OAuth Vulnerability in a Framework Used in Hundreds of Websites

Booking.com account takeover shows possible pitfalls in OAuth implementations

Researchers took over Booking.com accounts using a legitimate Facebook link

[untitled]

[untitled]

Ask HN: Programmers – do you still buy/read technical books?

Ask HN: What's the best monitor size and type for heavy programmers?

Ask HN: Programming courses with certificates – does it help you get a job?

Ask HN: Self-learners – how do you give yourself a feedback?

[untitled]

comments