Skip to content
/ Bee Gagliardi Ecosystem Engineer

/Hive Five #191 · Sep 30, 2024

It's More Fun To Be Competent

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

  1. Eva gained access to anyone's browser without them even visiting a website

    Hint: firebase was involved. She downloaded Arc and started analyzing. The first thing they noticed that Arc requires an account to use, but why?

    Read : Eva gained access to anyone's browser without them even visiting a website
  2. Insecurity through Censorship: Vulnerabilities Caused by The Great Firewall

    Assetnote breaks down attack vectors and also created an interactive tool to test if your domain is affected.

    Read : Insecurity through Censorship: Vulnerabilities Caused by The Great Firewall
  3. A Guide To Subdomain Takeovers 2.0 by none other than EdOverflow

    Who famously published the initial version of "A Guide To Subdomain Takeovers" six years prior.

    Read : A Guide To Subdomain Takeovers 2.0 by none other than EdOverflow
  4. David Heinemeier Hansson, the creator of Ruby on Rails, unveiled Rails 8 with built-in Authentication, Propshaft, Solid Cache, Solid Queue, Solid Cable, Kamal, and Thruster, making it a complete "One Person Framework" that requires no additional Platform as a Service (PaaS) services.

    Watch : pick 4
  5. Remotely controlling cars with just a license plate

    On June 11th, 2024, Sam, Neiko, Justin, and Ian discovered a set of vulnerabilities in Kia vehicles that allowed remote control over key functions using only a license plate.

    Read : Remotely controlling cars with just a license plate

Get the next one in your inbox. Join 4,300+ readers.

Most Mondays. Under 10 minutes.