August Garcia @256Kilobytes@infosec.exchange

Blog post - Hunting for Insecure Docker Registries - https://medium.com/@artemlogutov/hunting-for-insecure-docker-registries-d87d293e6779
Published: 05/19/2019

6 Methods to bypass CSRF protection on a web application by Shahmeer Amir https://medium.com/p/methods-to-bypass-csrf-protection-on-a-web-application-3198093f6599

if someone shakes thier head as you board the train listen to them, something is up. that's my NYC subway advice of the day

The @torproject #Tor project on GSOD to help improve Tor documentation

https://blog.torproject.org/google-season-docs-2019-help-tor-improve-our-documentation

https://trac.torproject.org/projects/tor/wiki/doc/GoogleSeasonOfDocs2019

#2019 This is what happens in an internet minute

Federation report: in the last hour, https://mastodon.host received 10556 toots from 476 instances. We can see at the moment 59.37% (62.58% excluding mstdn.jp) of the network statuses and are connected to 7209/5255 known instances.

Every FireFox extensions disabled due to expiration of intermediate signing cert

https://www.reddit.com/r/netsec/comments/bkj77y/every_firefox_extensions_disabled_due_to/

German police have shut down one of the world's largest black marketplace in the #darkweb, the 'Wall Street Market,' and arrested its operators.
https://securityaffairs.co/wordpress/84881/deep-web/wall-street-market-darkweb.html

Got my Python Host discovery script working properly finally. Not bad for a first shot at scripting in Python.
https://github.com/siliconshecky/Python-Nmap-Discovery-Scan

When you're high and leaving Amazon product reviews, don't forget to include all your drugs and booze in the photo 😂

Mysterious hacker has been selling #Windows #0days to APT groups for three years
https://www.zdnet.com/google-amp/article/mysterious-hacker-has-been-selling-windows-0-days-to-apt-groups-for-three-years/