Egregoros

Signal feed

Timeline

Post

Remote status

Context

17
@p @w0rm I made responsible disclosure to all we see often or care about including lain even though it doesn't involve him. going to try to move as many as I can toorrow then I will write up the post mortem. thanks again for providing me the list of people using those specific versions

@graf @w0rm @p I professionally find security bugs for large American corporations who paid sixteen Indians to make Java apps to process electronic medical records.

I assure you there is nothing I haven’t seen before.

The recent mastodon issues have been pretty bad. An arbitrary user email+IP info disc was recent, and before that there was a pretty gnarly SSRF.

Replies

0

Fetching replies…