Fighting bots is fighting humans

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   Evernote's security vulnerabilities allowed for remote code execution through PDF.js font injection and Electron's exposed ipcRenderer.

   Read : pick 1
2. /02

   PySkyWiFi: completely free, unbelievably stupid wi-fi on long-haul flights

   Read : PySkyWiFi: completely free, unbelievably stupid wi-fi on long-haul flights
3. /03

   Universal Code Execution by Chaining Messages in Browser Extensions, breaking both Same Origin Policy and the browser sandbox.

   Read : pick 3
4. /04

   Chaining Three Bugs to Access All Your ServiceNow Data, allowing full database access and full access to any MID servers configured. The following CVEs were assigned for these issues: CVE-2024-4879, CVE-2024-5178, and CVE-2024-5217.

   Read : pick 4
5. /05

   The Right Kind of Stubborn

   In his new essay, YC founder Paul Graham differentiates two types of stubborness: persistence and obstinance.

   Read : The Right Kind of Stubborn