The internet runs on free open-source software

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   Sam and co. found some fun vulns on Instapage and Hubspot

   Here's a thread with a couple mini writeups for them, with @bbuerhaus, @sshell_, and @xEHLE_.

   Read : Sam and co. found some fun vulns on Instapage and Hubspot
2. /02

   Jack is heading to Congress

   "Some news! I've now finished at Stanford and will be headed to Congress, via the TechCongress program. I'll be working full-time for a Congressional office on tech policy. Excited to dive into the world of policy!"

   Read : Jack is heading to Congress
3. /03

   Cache Poisoning at Scale

   Even though Web Cache Poisoning has been around for years, the increasing complexity in technology stacks constantly introduces unexpected behaviour which can be abused to achieve novel cache poisoning attacks.

   Read : Cache Poisoning at Scale
4. /04

   PHP LFI with Nginx Assistance

   This post presents a new method to exploit local file inclusion (LFI) vulnerabilities in utmost generality, assuming only that PHP is running in combination with Nginx under a common standard configuration.

   Read : PHP LFI with Nginx Assistance
5. /05

   The internet runs on free open-source software. Who pays to fix it?

   Yazici is a member of the Log4J project, an open-source tool used widely to record activity inside various types of software. Also read The Asymmetry of Open Source.

   Read : The internet runs on free open-source software. Who pays to fix it?