/Hive Five #55 · Jan 31, 2022
Nightingale
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
Escalating Your Bugs With GDPR Impact
GDPR was a landmark piece of data privacy legislation that was passed in the EU, it offers a ton of security for EU citizens, but it also puts some pretty stringent requirements on organizations which process this data. For bug bounty hunting this is great, we can really prove and explain the impact.
Watch : Escalating Your Bugs With GDPR Impact -
State of OSINT 2022
A community project to capture the views and experiences of OSINT practitioners. Read expert's views on the best (and worst) of OSINT, their favorite tools and techniques, and how they think the landscape is changing.
Read : State of OSINT 2022 -
How I hacked my way to the top of DARPA’s hardware bug bounty
Go inside one of the most technically challenging bug bounties ever with the researcher who subverted secure hardware designed by MIT and the University of Cambridge.
Read : How I hacked my way to the top of DARPA’s hardware bug bounty -
Webcam Hacking (again) - Safari UXSS by Ryan Pickren
Gaining unauthorized camera access via Safari UXSS: the story of how a shared iCloud document can hack every website you've ever visited. It's been over a year since their last Apple camera hacking project, so they decided to give it another go.
Read : Webcam Hacking (again) - Safari UXSS by Ryan Pickren -
Solarwinds Web Help Desk - When the Helpdesk is too Helpful
The CVE for this issue is CVE-2021-35232.
Read : Solarwinds Web Help Desk - When the Helpdesk is too Helpful