I found vulnerabilities in another Bitcoin Miner! and unlike @skot9000 and the super impressive guys at BitAxe, the manufacturer of this one don't appear to be taking these very seriously! 🤷‍♂️ @Joe Nakamoto @TFTC

Snotra

Avalon Nano 3s XSS and CSRF Vulnerabilities

Finding more vulnerabilites in Bitcoin Miners

#mining #pentesting #security #xss #csrf #btc #bitcoin #cyber

New Release! scan your AWS accounts for Security issues with the Snotra Cloud Scanner.

Scanner

#aws #pentesting #cloud #redteam

Understanding and Preventing Cross-Service Confused Deputy Vulnerabilities in AWS

Snotra

AWS Cross-Service Attacks

Understanding and Preventing Cross-Service Confused Deputy Vulnerabilities in AWS

#aws #cyber #security #pentesting #cloud

Been working with fedora bootc and universal blue containers recently to build my own custom Linux distro. Well worth for any Linux user checking out. It's like your own chrome OS just boot off the image, good to go. #linux

Thinking of upgrading my laptop. 🤔

Democracy works because the majority is good and knows how to pick moral and selfless leaders. So why do we need a government? Because everyone is amoral and selfish. 🤔

Something not really talked about in regards to the op return debate, is what we call in the security "the tyranny of the default". Default settings should ideally be in the most restrictive state and if you want remove restrictions by changing settings and potentially reducing security that is a trade off and decision you can make within your own risk appetite. The reason you don't make the default open is because 99% of users will just use the default settings and won't even consider changing them. that said, does it not make sense for core to have the most restrictive reference implementation and allow people to configure more permissive op return and other settings as their use case requires? And additionally have to persuade others of their case. #opreturn #btc #core #knotts

@Final does grapheneos have any protections against

Pixnapping Attack

I know it's early days but exploits only ever get better.

New Blog Post

Snotra

Securing Service Principals

How Entra ID App Registrations / Enterprise Applications are commonly misconfigured and can be used by attackers to elevate privileges, access sens...

#azure #pentesting #cloud

Notifications seem to be really flaky for me atm.

Is anyone heating their house with miners in the uk? #asknostr

Been running laptops the last decade, it's nice to build a big beasty desktop again.

@calle has anyone set up a cashu mint that uses liquid and atomic swaps? Would save the ball ache of running a lightning node.

A cashu mint that uses liquid and on chain would make then easier to run for more people. No need to manage a lightning node.

It seems you can't crack kerberos krb5 hashes for usernames that start with a dollar 😕