How to Hack: A Step-by-Step Journey, acropalypse, and 25 years of curl

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   Simon Aarons introduced acropalypse: a serious privacy vulnerability in the Google Pixel’s inbuilt screenshot editing tool, Markup. Enabling partial recovery of the original, unedited image data of a cropped and/or redacted screenshot.

   Read : pick 1
2. /02

   Disclosed report: CVE-2022-44268 - Arbitrary Remote Leak via ImageMagick

   A critical bug that was rewarded $25,000.

   Read : Disclosed report: CVE-2022-44268 - Arbitrary Remote Leak via ImageMagick
3. /03

   How does Bug Bounty work anyway?

   In this first video of a new series by InsiderPhD, in partnership with Bugcrowd, you’ll learn how to go from knowing nothing about hacking to finding your first bug, to getting more consistent bounties and everything in between.

   Watch : How does Bug Bounty work anyway?
4. /04

   Twenty-five years of curl

   Daniel worked on curl longer than he’s worked for any company. None of his kids are this old. 25 years ago he did not live in his house yet. 25 years ago Google didn’t exist and nether did Firefox.

   Read : Twenty-five years of curl
5. /05

   Use multi-repository variant analysis (beta) to run CodeQL queries at scale

   CodeQL is the static code analysis engine that powers GitHub code scanning. one of its superpowers is its versatility and customizability: you can use it to find virtually any pattern in source code.

   Read : Use multi-repository variant analysis (beta) to run CodeQL queries at scale