Toggle sidebar

OT: 118th Obsequious Banter Thread: February is the month of food days

  • Work is still on-going to rebuild the site styling and features. Please report any issues you may experience so we can look into it. Click Here for Updates

What are your favorite food(s) celebrated by a special day in February? (Choose up to three)

  • Total voters
    26
  • Poll closed .
Status
Not open for further replies.
JojoTheWhale said:
@Beef Invictus This is the worst API problem I’ve ever seen. Ever. I’ve never even heard of anything this bad at a bar during a conference.

www.troyhunt.com

How Spoutible’s Leaky API Spurted out a Deluge of Personal Data

Ever hear one of those stories where as it unravels, you lean in ever closer and mutter “No way! No way! NO WAY!” This one, as far as infosec stories go, had me leaning and muttering like never before. Here goes: Last week, someone reached out to me with what
www.troyhunt.com www.troyhunt.com
Click to expand...

I loled early when he revealed it returned his email and phone number. These guys have 1998 "I made this site for a High School project" levels of security. It's been years since hiding that has become a basic thing.

Edit: AND A PARAGRAPH LATER THE PASSWORD HASH
 
  • Haha
Reactions: JojoTheWhale
@JojoTheWhale This is incredible. It just keeps getting worse. Every time I think "well at least X probably isn't the case" I soon learn it is actually the case.

"Well, at least Spoutible is probably so small that it probably doesn't have any kind of federated access anywhere else."

Yes it does! Why wouldn't it, of course it does. The other sites granting those linkages did no digging apparently before tying their security to this. Someone has their account snagged here, their accounts at Bluesky and Mastodon will now spout whatever the snagger wants too. Good stuff. Both those sites should immediately disable crossposting from Spoutible.

And I don't think "What does F12" show is exactly the kind of digging that requires a security specialist.
 
  • Haha
Reactions: JojoTheWhale
@JojoTheWhale my mind always ends up going to "whats the federated identity situation?" If there was something I'd cut off as step 1 if I were running security for a platform and were given draconian power, that would be it. If it isn't all in-house, it's out. FB/Twitter linkage? No way. Logging in using FB/Twitter/Google? Absolutely not. We would not be risking our users becoming compromised in any fashion thanks to a screwup at some other company. The convenience is nice and all, and I'll use it sometimes, but I sure do hate it.

And speaking of this, good timing on the whole security thing. I just got an email from a connection about checking on their server environment. They have no cash so "we pay in experience" is their favorite price. At this point I'm getting rusty on some stuff but I can refresh fast and dumber people than myself have faked it more severely.
 
  • Like
Reactions: JojoTheWhale
Magua said:
This brilliant woman is the Montreal Sexpos Trivia Queen, @Young Sandwich .

Click to expand...

1707353821015.jpeg


that freak knew what she was doing
 
  • Wow
  • Like
Reactions: Young Sandwich, JojoTheWhale and Magua
Flybynite said:
It's almost like the AI is potentially capable of acting the way warned of in tons of 'fiction' over the last half-century...

If only there were warnings.
Click to expand...

Back when people read magazines, I was reading one. The article was about new technology and this was late 90's/early 2000's. It described an interface where you could put a camera down on this flat screen, and it's contents would appear on the screen. You could drag them around with your finger, open up pictures and organize them. This was brand spanking new tech. Well before smartphones.

One of the first things I thought when I read that was, I will see kids at school with the "desk" from Ender's Game in my near future. Now every kid in school has a tablet. We live in a pretty crazy time of what's been imagined, and what's been realized.

Then again, this is all a simulation, soooo
 
  • Like
Reactions: Jack Straw
Chicken N Raffls said:
Back when people read magazines, I was reading one. The article was about new technology and this was late 90's/early 2000's. It described an interface where you could put a camera down on this flat screen, and it's contents would appear on the screen. You could drag them around with your finger, open up pictures and organize them. This was brand spanking new tech. Well before smartphones.

One of the first things I thought when I read that was, I will see kids at school with the "desk" from Ender's Game in my near future. Now every kid in school has a tablet. We live in a pretty crazy time of what's been imagined, and what's been realized.

Then again, this is all a simulation, soooo
Click to expand...
Do you have a smart watch that you can use as a phone?

IMG_2800.jpeg


Get Smart was more advanced than Star Trek. Capt Kirk had to use those flip open communicators.
 
  • Like
  • Love
Reactions: BackToTheBrierePatch and Chicken N Raffls
Lord Defect said:
I’m tempted to buy the contra game they’re selling for the switch, but I’ve bought a few games lately and should take a little break in buying them, and it’s pretty much double the digital price.
Click to expand...

Those are long sold out unless something weird happened. I think I bought mine in Spring 2022.

Great choice, though. Contra is one of my favorite series.
 
  • Like
Reactions: Rebels57
For those interested, intriguing interview with Putin by Tucker.

Be brave enough to watch (kicks in after about 30min).
 
  • Haha
Reactions: Rebels57
Status
Not open for further replies.

Latest posts

Ad

Upcoming events

Ad

Top Bottom