Mathieu D.

9.1K posts

Mathieu D. banner
Mathieu D.

Mathieu D.

@_mdeous_

Random infosec worker / Coffee addict / Rum lover

Paris, France Katılım Nisan 2010
740 Takip Edilen826 Takipçiler
Mathieu D. retweetledi
nixCraft 🐧
nixCraft 🐧@nixcraft·
nixCraft 🐧 tweet media
ZXX
18
339
2.6K
95.2K
Mathieu D. retweetledi
Trail of Bits
Trail of Bits@trailofbits·
AWS Nitro Enclaves offer strong isolation for sensitive workloads but require careful security implementation. Learn how to avoid common pitfalls and harden your enclave deployments. blog.trailofbits.com/2024/09/24/not…
English
2
7
16
2.5K
Mathieu D. retweetledi
Hacking the Cloud
Hacking the Cloud@HackingthCloud·
Discover how to determine the AWS account ID associated with access keys using sts or by decoding the key itself. Learn these effective techniques for better AWS environment assessments. Dive into the details here: buff.ly/3RXkPwU
English
0
4
5
496
Mathieu D. retweetledi
Synacktiv
Synacktiv@Synacktiv·
Following on from our #GitHub action exploitation series, @hugow_vincent discovered a new exploitation technique that allowed us to push arbitrary code onto the spring-security project using the Dependabot GitHub app. synacktiv.com/publications/g…
English
1
26
71
8.4K
Mathieu D.
Mathieu D.@_mdeous_·
@florent_viel Il y a Hiya (ce qui est utilise sur les Samsung) par contre en app standalone je ne sais pas ce que ca vaut
Français
0
0
0
56
Mathieu D. retweetledi
Mobile Hacker
Mobile Hacker@androidmalware2·
Bluetooth LE spam attack is now ported to dedicated Android app to push notifications for Android and Windows For Android, is can advertise over 170 devices github.com/simondankelman…
English
16
317
1.2K
169.8K
Mathieu D. retweetledi
Arvind Narayanan
Arvind Narayanan@random_walker·
OpenAI's security team noticed that a group reverse engineered and was abusing ChatGPT's internal API. Instead of shutting them down, they quickly replaced ChatGPT with CatGPT… and then lurked in the attackers' Discord to watch the chaos. Absolute legend. youtube.com/watch?v=PeKMEX…
YouTube video
YouTube
Arvind Narayanan tweet media
English
49
637
4.5K
1.4M
Mathieu D. retweetledi
Kévin GERVOT (Mizu)
Kévin GERVOT (Mizu)@kevin_mizu·
Excited to launch my first browser extension, DOMLogger++! Now available for both Firefox and Chromium! 🎉 DOMLogger++ allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations 🔥 Check it out 👇 github.com/kevin-mizu/dom… 1/5
English
9
106
337
42.5K
Mathieu D. retweetledi
Matthew Green
Matthew Green@matthew_d_green·
PS If a viral report goes around saying there’s a vulnerability and you should turn off link previews, there’s really not a lot of cost to being cautious for a day or two. It’s not like someone is asking you to inject chlorine into your veins.
English
4
3
16
6.7K
Mathieu D. retweetledi
Christian Blichmann 🇺🇦 (on bksy and Mastodon)
In the spirit of "this talk could've been a tweet", I just pushed a button: #BinDiff is now open source. - Snapshot release, no major new functionality - Release binaries later today or tomorrow - This is my 20% and I won't we able to act on PRs until end of Q4 (OOO traveling)
Christian Blichmann 🇺🇦 (on bksy and Mastodon) tweet media
English
8
339
1K
210.8K
Mathieu D. retweetledi
Jake Williams
Jake Williams@MalwareJake·
Repeat after me: no amount of security awareness training will solve the social engineering problem. You might as well be relying on ancient chants and sacred crystals if this is the plan. Thank you for coming to my TED talk...
English
50
87
748
170.7K
Mathieu D. retweetledi
Joseph Cox
Joseph Cox@josephfcox·
New: I tracked the precise movements of an NYC subway rider. Saw what specific time they got on and at what station. It became obvious which station was nearest to their home. This was all because of a 'feature' on the MTA website Wide open to abuse 404media.co/i-tracked-nyc-…
English
21
464
1.1K
289.4K
Mathieu D. retweetledi
🥝🏳️‍🌈 Benjamin Delpy
Just published a little presentation "ST25TB series NFC tags for fun in French public transports" 🥝 It demonstrates why it's not a good idea to use chips without authentication (like SRT512 & ST25TB512-AT) for convenience transport tickets > 1drv.ms/b/s!AlQCT5PF61…
🥝🏳️‍🌈 Benjamin Delpy tweet media🥝🏳️‍🌈 Benjamin Delpy tweet media🥝🏳️‍🌈 Benjamin Delpy tweet media🥝🏳️‍🌈 Benjamin Delpy tweet media
English
3
37
125
43K