/Hive Five #161 · Feb 19, 2024
Your Security Program Is Sh*t
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
A story of how Ian and Sam were able to bypass Vercel's build protections to access internal and staging deployments for all users via directory traversal and SSRF.
Read : pick 1 -
LLM Agents can autonomously hack websites, performing complex tasks without prior knowledge of the vulnerability.
Read : pick 2 -
Unredacted issue 006 is out
The magazine is community-driven and focuses on privacy and OSINT.
Read : Unredacted issue 006 is out -
Is client-side security dead - or a crucial part of the future?
Read : Is client-side security dead - or a crucial part of the future? -
Andrej Karpathy on the shortification of learning: "I find it helpful to explicitly declare your intent up front as a sharp, binary variable in your mind. If you are consuming content: are you trying to be entertained or are you trying to learn?"
Read : pick 5