Dev Miscellaneous

Windows 10 RCE Code execution vulnerability on Windows 10 via IE11/Edge Legacy and MS Teams, triggered by an argument injection in the Windows 10/11 default handler for ms-officecmd: URIs https://positive.security/blog/ms-officecmd-rce @DevMisc #windows #microsoft #security #bugbounty

AWS: IPv6-only subnets and EC2 instances https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-ipv6-only-subnets-and-ec2-instances @DevMisc #cloud #extra

Open .NET Open-source fork of .NET https://github.com/open-dotnet @DevMisc #extra

Decompressing a gzip file by hand https://ttay.me/blog/gzip_investigations @DevMisc #gzip #learn

Please stop "fixing" font smoothing https://usabilitypost.com/2012/11/05/stop-fixing-font-smoothing @DevMisc #extra #learn

Is my cat Turing-complete? https://belaycpp.com/2021/11/24/is-my-cat-turing-complete @DevMisc #extra #meme

Overengineering can kill your product https://www.mindtheproduct.com/overengineering-can-kill-your-product @DevMisc #extra

Recording myself finding an SSRF in Google A full video recording all the process from finding an SSRF in Google Cloud, stealing the auth token, and bypassing the fix 2 times ($10 000) https://youtu.be/UyemBjyQ4qA @DevMisc #security #bugbounty #google

GitLab: Turning SSRF into RCE https://youtu.be/RCJdPiogUIk @DevMisc #bugbounty #security

Fun with Red Star OS Red Star OS is a North Korean Linux distribution, with development first starting in 1998 at the Korea Computer Center (KCC). Prior to its release, computers in North Korea typically used Red Hat Linux and Windows XP. https://sizeofcat.ru/post/fun-with-redstar-os/ @DevMisc #extra

25 nooby Python habits you need to ditch These nooby Python habits give away your inexperience in Python. Improve your code and your prestige just a bit by ditching those habits and doing things the Pythonic way. https://youtu.be/qUeud6DvOWI @DevMisc #python #learn

SSRF in Google worth $164 674 Yes, that's an insane bounty amount. The exploit happens on Google Cloud Computing, and finding it requires a ton of perseverance. https://youtu.be/g-JgA1hvJzA @DevMisc #security #bugbounty #google

Why IndexedDB is slow and what to use instead https://rxdb.info/slow-indexeddb.html @DevMisc #performance #web

Flatpak (and Snap) are not the future Flatpak calls itself "the future of application distribution". I am not a fan. I’m going to outline here some of the technical, security and usability problems with Flatpak and others. https://ludocode.com/blog/flatpak-is-not-the-future @DevMisc #store

The Rust CUDA Project An ecosystem of libraries and tools for writing and executing extremely fast GPU code fully in Rust. https://github.com/RDambrosio016/Rust-CUDA @DevMisc #rust #gpu

The New Life of PHP - The PHP Foundation https://blog.jetbrains.com/phpstorm/2021/11/the-php-foundation/ @DevMisc #php #web #extra

🧵 TIL the assumption that string length does not change when upper-cased is false! https://chaos.social/@movonw/107316601658567746 @DevMisc #extra

Only 90s Web Developers Remember This https://zachholman.com/posts/only-90s-developers/ @DevMisc #meme #extra #web

Code execution as root via AT commands on the Quectel EG25-G modem Do you remember the guy who got into his PinePhone modem via ADB and hosted his blog on it? He also found an RCE in it. https://nns.ee/blog/2021/04/03/modem-rce.html @DevMisc #security #bugbounty #telephony

What's a CA anyway? Explaining the chain of trust that secures the Web Are Certificate Authorities just a hoax to steal your money? https://blog.nocturn9x.space/whats-a-ca-anyway-explaining-the-chain-of-trust-that-secures-the-web @DevMisc [#Original ❤️] #security #web #learn