Likes from 20 April 2024

Back to /kind/likes/, 2024, April 2024.

 Like

Liked kf (@kf@666.glitchwit.ch)
Post details
guy VP of engineering on linkedin: “women who code is shutting down? what a travesty! there’s so much money in tech! how can this be happening? can nothing be done?” idk guy, perhaps as a VP OF ENGINEERING YOURSELF you could say what you are doing to help pick up the slack?

 Like

Liked Ryan Castellucci :nonbinary_flag: (@ryanc@infosec.exchange)
Post details
It's been ten years, so a short story about the "gotofail" bug. Someone came to me about a catastrophic vulnerability in Apple's TLS implementation. I shit you not, they'd overheard someone at a bar drunkenly bragging about how they were going to sell it to a FVEY intelligence agency for six figures. They didn't know exactly what it was, just some vague details and the key point that it allowed use of the real certificate. This was enough for me to find the bug (yay open source), which would go on to be known as "gotofail", and produce a working exploit in less than a day. The details were anonymously back channelled to Apple, who released a fix. @matthew_d_green@ioc.exchange posted on Twitter about it, concerned by Apple's vague release notes. I used a burner phone to share the details with him anonymously. Then everyone forgot about the whole thing because heartbleed. ¯\\\_(ツ)\_/¯

← 19 April 2024 21 April 2024 →

April
  1. 1
  2. 2
  3. 3
  4. 4
  5. 5
  6. 6
  7. 7
  8. 8
  9. 9
  10. 10
  11. 11
  12. 12
  13. 13
  14. 14
  15. 15
  16. 16
  17. 17
  18. 18
  19. 19
  20. 20
  21. 21
  22. 22
  23. 23
  24. 24
  25. 25
  26. 26
  27. 27
  28. 28
  29. 29
  30. 30