vecsix

@7h3h4ckv157 Bug bounty is dead, not just xss...

Hey, bug hunters… XSS is dead or worth searching?? Share some tips.

@FrancescoCiull4 @jcmartinezdev They should erase Microsoft...

@jcmartinezdev you mean erase 😂

Should Microsoft rewrite Teams in Rust?

I will solely focus on broker programs in the future. Fuck those shit bug bounty programs. They deserve to be breached!!!!

Guys, during my last weeks credentials discovering session I found multiple keys with ChatGPT cyber enabled. It's not rare anymore. I will likely leak them in the future as companies refuse to pay bug bounty as stated. Bug bounty became so useless

@0x45o You bought lamacun 😂

I started a new tradition

@kernelshark Say, nah babe I only have session, simplex or tox, which u want

@MissEve0109 VPNs will be logged soon and require id verification or "signals", i.e. metadata who you are, from the IP address. Its called ProtectEU, previously known as GoingDark. China circumvented it successfully, Europe will also if necessary

So wie es immer schon Systeme gab, um Menschen zu überwachen, so gab es immer schon Menschen, die diese Systeme überlistet haben und es gibt VPN und das teilweise wirklich schon günstig. Niemand muss dieses dümmliche Spiel mitspielen.

@ravikiran_dev7 I have to measure my Linux from scratch base install, but 64mb is tight 😬.

Linux RAM requirements are wild 🤯 • 🟠 Ubuntu - 6 GB • 🎮 SteamOS - 4 GB • 🚀 Pop!_OS - 4 GB • 🔵 Fedora - 2 GB • 🎩 Red Hat Enterprise Linux - 2 GB • 🦎 openSUSE - 2 GB • 🍃 Linux Mint - 2 GB • 🪟 Zorin OS - 2 GB • 🛡️ Kali Linux - 2 GB • 🏔️ Manjaro - 2 GB • 🏔️ Rocky Linux - 2 GB • 🎯 CentOS Stream - 2 GB • 🕊️ Lubuntu - 1 GB • 📦 Debian - 512 MB • 🐧 Arch Linux - 512 MB • 🪶 Puppy Linux - 256 MB • 💿 Tiny Core Linux - 64 MB Linux can run on everything from a potato to a workstation. Which distro are you using right now? 👀

@_BashBunny_ @blindma1den Honest take? Likely they used u for a small task. Shit behavior of them. Don't invest too much in certs, but in opportunities. You are skilled. Don't let them fool you. Recognize your value and monetize it. In reality they need you more than you them. Don't forget this Gold luck

@blindma1den El ghosting de RR. HH. ya lo conocía. Lo de que te suplante tu doble malvado dentro del proceso era nuevo para mí. ¿Qué opináis? ¿Confusión real o excusa improvisada para quitarse el marrón de encima?

Como tengo algo de tiempo mientras terminan unas tareas y veo a @blindma1den contar bastantes cosillas sobre procesos de selección, os voy a contar una anécdota cuanto menos curiosa que me pasó en uno. Pillad palomitas, que la cosa es un poco peliculera... 🍿

@chiunngua @Itsfoss Yeah, if you need anything beyond a personal Cloud storage and simple shares, NextCloud or PHP based OwnCloud is likely what you want. But cool that you took a look ✌️

@vecs1x @Itsfoss Thanks! I did some research on and tried ownCloud OCIS with Docker, and found many Nextcloud groupware features are necessary for me while I didn't realize it before. It's still a good alternative for simpler application like FileBrowser.

This German state is ditching SharePoint in favor of Nextcloud. itsfoss.com/news/german-st…

@chiunngua @Itsfoss OwnCloud OCIS is better if you only need a file server. It uses modern technology (Go). That's what I use.

@Itsfoss I have been using self-hosted Nextcloud for 6 years. It's old and hopeless due to Germans' way of developing software but it keeps being open-sourced and actively interacts with users on their forum, so it serves my need well. I also use OpenMediaVault which is also from Europe.

@Itsfoss Insane. They have paid millions for SharePoint and just used it as a fileserver 😭.

@_BashBunny_ It would then be download file, do on demand scan. The daemon is for continous filesystem monitoring (Download file, automatic scan).

@_BashBunny_ I know. ClamAV uses yara under the hood for it's signature based detection. It keeps the rules in memory to speed up scanning. Plain yara engines or even Clam on demand scanning reduces the time of the memory consumption to the time of scanning.

I'm starting to play with nushell more and... How is consuming 1.3TB??!!

@_BashBunny_ It is OpenSource. While marketed as a Kubernetes security tool, it also works directly on the host. It intercepts syscalls via BPF and can block them according to rules. github.com/cilium/tetragon

@_BashBunny_ Browsers need a lot of memory cause every tab runs as a separate process. You can take a look at a plain Yara engine as a replacement for Clam, they usually need less memory. For Realtime advanced exploit detection and prevention you could take a look at Tetragon by Cilium.

@lnxsec @The_Cyber_News Hmm, maybe they should read the handbooks and apply least privileges and don't leak their keys. It could be easily prevented, they are just too lazy to run free scanners on their code before they commit and push.

@The_Cyber_News The speed at which AI can orchestrate familiar cloud techniques is concerning. How are organizations currently detecting and mitigating AI-driven attack speed and scale beyond traditional methods?

🛡️ A Hacker Used AI to Compromise an AWS Cloud Environment in Just 72 Hours Source: cybersecuritynews.com/aws-cloud-comp… A large-scale AWS intrusion reveals how AI-assisted attackers can chain familiar cloud techniques to move from initial access to full environmental compromise in roughly 72 hours, not through novel exploits, but through unprecedented speed, scale, and orchestration. The threat actor gained an initial access key to an AWS account by exploiting a weakness in an internet-facing application, then pivoted across applications, cloud infrastructure, source-control repositories, CI/CD pipelines, and runtime services. #cybersecuritynews

@techspence But if you couldn't attack without AI, you can with AI.

If you couldn’t defend well before AI, you’re not going to defend well with AI.

@rekdt Yeah... Ever heard of LetsEncrypt? Likely not

Reduced lifetime of TLS certificates is a scam propagated by big certificate to sell more certificates