Category: Mix

Why and How I Believe We'll Attain AGI by 2025-2028
31
Aug
2023

Why and How I Believe We’ll Attain AGI by 2025-2028

I have a strong intuition about how we’ll achieve both AGI and consciousness in machines. Keep in mind: it’s just…

Hackerone logo
31
Aug
2023

Why You’re Doing Pentesting Wrong (And 2 Ways to Fix It)

Pentesting has been around for decades, but it hasn’t undergone the revolution that other security practices have. Organizations tend to…

[tl;dr sec] #197 - Career Resources, Modern Security Podcast, Smashing the State Machine
31
Aug
2023

[tl;dr sec] #197 – Career Resources, Modern Security Podcast, Smashing the State Machine

If you don’t know Dev, he’s currently Head of Security at Figma, and was Director of Security Engineering at Dropbox…

My Current Definition of AGI
30
Aug
2023

My Current Definition of AGI

People throw the term “AGI” around like it’s nothing, but they rarely define what they mean by it. So most…

Yes. LLMs can create convincingly human output. · rez0
30
Aug
2023

Yes. LLMs can create convincingly human output. · rez0

Why LLMs don’t sound human, strategies to fix it, and real examples. I’ve talked to a lot of people that…

Reborn XSpear 🔱
29
Aug
2023

Reborn XSpear 🔱

제가 Dalfox 를 개발하기 전에 Ruby로 작성했었던 XSpear란 도구가 있었습니다. 동일하게 XSS를 테스팅하기 위한 도구였고, 현재 성능은 당연히 Dalfox쪽이 압도적으로…

Hackerone logo
29
Aug
2023

Improve DevOps Security With Code Security Audit

Use Code Security Audit for DevOps DevOps teams may care about security, but it is not their area of expertise…

Hackerone logo
29
Aug
2023

Proposed Legislation Requires Federal Contractors Implement VDPs

Federal contractors play a critical role in supporting the U.S. government. Because of their access to federal systems and data,…

ShareFile Pre-Auth RCE (CVE-2023-24489) – Assetnote
29
Aug
2023

Advisory: Flarum LFI – Assetnote

Summary An attacker with a basic user forum account can specify a malicious avatar URL that discloses the contents of…

ShareFile Pre-Auth RCE (CVE-2023-24489) – Assetnote
29
Aug
2023

Leaking File Contents with a Blind File Oracle in Flarum – Assetnote

Flarum is a free, open source PHP-based forum software used for everything from gaming hobbyist sites to cryptocurrency discussion. A…

API5:2023 Broken Function Level Authorization
26
Aug
2023

API5:2023 Broken Function Level Authorization

Welcome to the 6th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a…

API Abuse – Lessons from the Duolingo Data Scraping Attack
25
Aug
2023

API Abuse – Lessons from the Duolingo Data Scraping Attack

It’s been reported that 2.6 million user records sourced from the Duolingo app are for sale. The attacker apparently obtained…