Extracted Wisdom: Marc Andreessen’s Techno-Optimism Manifesto
SUMMARY: The content is a manifesto of Techno-Optimism by Marc Andreessen. It discusses the transformative power of technology in human progress, arguing that it is…
Category: Mix
2023 OWASP Top-10 Series: Wrap Up
Over the past several months, we’ve taken a journey through the new 2023 OWASP API Security Top-10 list. In the previous 12 weekly posts, we’ve…
How Ethical Hackers Are Securing Elections
Coordinated Vulnerability Disclosure (CVD) or Vulnerability Disclosure Policies (VDP) for technology are key components of a security strategy that builds trust with users and stakeholders.…
Meet 5 Young Hackers Hacking For Good
Recently, a cybercriminal gang targeted the Las Vegas casino scene by extracting an eight-figure ransom from Caesars Entertainment and bringing slot machines to a halt…
ZAP 2.14 Review ⚡️
생각보다 엄청 빠른 주기로 ZAP 2.14 릴리즈가 발표되었습니다 🎉⚡️ 아마도 최근에 ZAP은 OWASP를 나와 별도의 브랜딩을 가진것이 큰 영향을 줬을거라 생각합니다. ZAP 2.13이 나온지 오래되지…
See the current state of security in your org
How do you see the current state of security in your organization when security is constantly evolving? New assets, vulnerabilities, and even human errors like…
XSS via reportError
reportError란 함수를 아시나요? Chrome 95, Firefox 93 버전에 추가된 글로벌 메소드로 JS의 uncaught exception을 콘솔이나 글로벌 이벤트 핸들러로 넘겨주는 기능을 수행합니다. PortSwigger 측에서 reportError 함수를…
[tl;dr sec] #203 – Stealing CI/CD Secrets, Sliver & Cursed Chrome, Career Advice
My heart goes out to those facing violence, loss, and displacement. I hope there is a return to peace soon. In the meantime, I’ll try…
Extracted Wisdom Series: David Perell & Sam Parr
Premium Content This content is reserved for premium subscribers of Unsupervised Learning Membership. To Access this and other great posts, consider upgrading to premium. UpgradeLink…
Jailbreaking Humans vs Jailbreaking LLMs · Joseph Thacker
“Jailbreaking” an LLM and convincing it to tell you things it’s not supposed to is very similar to social engineering humans. This piece draws comparisons…
ZAP Map Local로 쉽게 Fake Response 만들기
보안 테스팅에선 HTTP Response를 자주 변경해야할 경우가 많습니다. 이럴 때 저는 보통 ZAP에선 breakpoint와 replace 기능, 그리고 스크립팅을 주로 사용했었습니다. (+Proxify의 DSL) 최근 일부 Proxy…
Israeli Footage & Analysis, WSFTP + MOVEIT, AI Explainability, Andreessen vs. Perell on Writing, and more…
Unsupervised Learning is a Security, AI, and Meaning-focused podcast that looks at how best to thrive as humans in a post-AI world. It combines original…