/Hive Five #191 · Sep 30, 2024
It's More Fun To Be Competent
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
Eva gained access to anyone's browser without them even visiting a website
Hint: firebase was involved. She downloaded Arc and started analyzing. The first thing they noticed that Arc requires an account to use, but why?
Read : Eva gained access to anyone's browser without them even visiting a website -
Insecurity through Censorship: Vulnerabilities Caused by The Great Firewall
Assetnote breaks down attack vectors and also created an interactive tool to test if your domain is affected.
Read : Insecurity through Censorship: Vulnerabilities Caused by The Great Firewall -
A Guide To Subdomain Takeovers 2.0 by none other than EdOverflow
Who famously published the initial version of "A Guide To Subdomain Takeovers" six years prior.
Read : A Guide To Subdomain Takeovers 2.0 by none other than EdOverflow -
David Heinemeier Hansson, the creator of Ruby on Rails, unveiled Rails 8 with built-in Authentication, Propshaft, Solid Cache, Solid Queue, Solid Cable, Kamal, and Thruster, making it a complete "One Person Framework" that requires no additional Platform as a Service (PaaS) services.
Watch : pick 4 -
Remotely controlling cars with just a license plate
On June 11th, 2024, Sam, Neiko, Justin, and Ian discovered a set of vulnerabilities in Kia vehicles that allowed remote control over key functions using only a license plate.
Read : Remotely controlling cars with just a license plate