HackerTrans
TopNewTrendsCommentsPastAskShowJobs

llui85

no profile record

Submissions

Hacking Google with A.I. For $500k

brutecat.com
16 points·by llui85·지난달·0 comments

Unauthenticated Object Write Vulnerability in MinIO

github.com
2 points·by llui85·3개월 전·1 comments

Hacking Google Support: Leaking call logs and deanonymising agents

michaeldalton.au
15 points·by llui85·3개월 전·2 comments

Hacking Google Support: Leaking millions of customer records ($14k bounty)

michaeldalton.au
2 points·by llui85·3개월 전·0 comments

Australia: Kids under 16 to be banned from social media after Senate passes laws

abc.net.au
282 points·by llui85·2년 전·465 comments

comments

llui85
·3개월 전·discuss
MinIO (a widely-used "high-performance, S3 compatible object store" published this advisory, which allows for unauthenticated overwrites of any file.

Their open-source AGPL repository is no longer maintained and no patch has been provided - you must download the closed-source binaries to get the fix.
llui85
·3개월 전·discuss
This is the write up from my first Google vulnerability which exposed a whole bunch of call logs. It was a fun thing to discover and a nice reminder that even Google isn't infallible to these sorts of breaches.
llui85
·작년·discuss
I've always used the <plaintext> tag - an unclosable element that converts the rest of the document into raw HTML. It's very obvious.

https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/...
llui85
·작년·discuss
(2022)
llui85
·2년 전·discuss


    (i) the sole purpose, or a significant purpose, of the service is to enable online social interaction between 2 or more end-users;
    (ii) the service allows end-users to link to, or interact with, some or all of the other end-users;
    (iii) the service allows end-users to post material on the service;
Linked to the legislation in another comment.
llui85
·2년 전·discuss
https://parlinfo.aph.gov.au/parlInfo/download/legislation/bi... (explanatory memorandum here: https://parlinfo.aph.gov.au/parlInfo/download/legislation/em...)

And the amendment to the first reading which was agreed to today which has the bits about ID verification being disallowed: https://parlinfo.aph.gov.au/parlInfo/download/legislation/am... (supplementary explanatory memorandum here: https://parlinfo.aph.gov.au/parlInfo/download/legislation/em...)
llui85
·2년 전·discuss
I believe that myID is also explicitly excluded as part of the bill.
llui85
·2년 전·discuss
Some notes:

* It is illegal for a platform to provide children with a social media account, not for the child to create an account. Circumvention of this by the child is not illegal.

* No grandfathering - all accounts under 16 once this takes effect (which won't be until this time next year at earliest) must be deactivated.

* Maximum fine (per instance?) is 50 million AUD (about 32 million USD)

* The legislation is vague on the technical details, although it does specifically mandate that platforms cannot use government-issued ID of any kind (including digital ID).