FedSearch - Federated network search engine

There was a #misconfiguration on #mastodon.social that allowed unauthorized actors do download some user's archive takeout (containing public information).

Eugen Rochko informed the affected users immediately:
"They DO NOT contain your e-mail address or any other Personal Identifiable Information from your account, excepting anything you’ve manually put in your public profile or shared in posts."

#misconfiguration #mastodon

Last updated 1 year ago

Original post

sudoheader :verified: · @sudoheader

15 followers · 51 posts · Server infosec.exchange

Bugged - I have just completed this room! Check it out: https://tryhackme.com/room/bugged #tryhackme #network protocols #IoT #misconfiguration #command execution #bugged via @RealTryHackMe

#tryhackme #network #iot #misconfiguration #command #bugged

Last updated 1 year ago

Original post

M · @Mysteryx

1 followers · 4 posts · Server infosec.exchange

We just publish a new article:

Exploiting IAM security misconfigurations and how to detect them

https://sysdig.com/blog/iam-security-misconfiguration

#IAM #AWS #misconfiguration

#iam #aws #misconfiguration

Last updated 2 years ago

Original post

M · @Mysteryx

1 followers · 8 posts · Server infosec.exchange

We just published a new article:

Exploiting IAM security misconfigurations and how to detect them

https://sysdig.com/blog/iam-security-misconfiguration

#IAM #AWS #misconfiguration

#iam #aws #misconfiguration

Last updated 2 years ago

Original post

FilesWithThreateningAuras · @iaintshootinmis

330 followers · 412 posts · Server digitaldarkage.cc

Sparsely populated instances may inadvertently leak their users' follower list; even if users have opted to hide their social graph.

This happens because users who have opted to hide their social graph aren't opted-out of their incoming posts being displayed in the social graph.

This can be mitigated. Admins can disable unauthenticated access to the instances federated timeline.

https://www.justinmcafee.com/2022/11/mastodon-privacy-for-small-instances.html

#Mastodon #Privacy #Safety #DigitalLeakage #ThreatModel #RiskProfile #Misconfiguration

#mastodon #privacy #safety #digitalleakage #threatmodel #riskprofile #misconfiguration

Last updated 2 years ago

Original post

🏴󠁧󠁢󠁷󠁬󠁳󠁿 TJ 🏴󠁧󠁢󠁷󠁬󠁳󠁿 · @apjone

144 followers · 31 posts · Server infosec.exchange

Open media

Font Awesome service #misconfiguration lead to possible #leak of SSL #privatekey

#misconfiguration #leak #privatekey

Last updated 2 years ago

Original post

Tru Huynh · @tru

28 followers · 20 posts · Server fosstodon.org

for self hosting individual: caveat #minio #s3 #mastodon #misconfiguration and ethical report... https://www.alevsk.com/2022/11/system-misconfiguration-is-the-number-one-vulnerability-at-least-for-mastodon/ @alevsk thx!

#minio #s3 #mastodon #misconfiguration

Last updated 2 years ago

Original post

Tru Huynh · @tru

39 followers · 39 posts · Server fosstodon.org

for self hosting individual: caveat #minio #s3 #mastodon #misconfiguration and ethical report... https://www.alevsk.com/2022/11/system-misconfiguration-is-the-number-one-vulnerability-at-least-for-mastodon/ @alevsk thx!

#minio #s3 #mastodon #misconfiguration

Last updated 2 years ago

Original post

DarkOperator 🚀 · @DarkOperator

512 followers · 224 posts · Server infosec.exchange

CySecurity News - Latest Information Security and Hacking Incidents - Amazon, Microsoft Cloud Leaks Highlight Lingering Misconfiguration Issues

#Amazon, #Microsoft Cloud #Leaks Highlight Lingering #Misconfiguration Issues https://bit.ly/3DXyEU4

#amazon #microsoft #leaks #misconfiguration

Last updated 2 years ago

Original post

Julien M. · @julm

485 followers · 4935 posts · Server framapiaf.org

#InfoSec #DoS #censorship
> Weaponizing Middleboxes for #TCP Reflected #Amplification
> Censors pose a #threat to the entire #Internet.

> We discover a new way that attackers could launch reflected denial of service (#DoS) amplification attacks over #TCP by abusing middleboxes and #censorship infrastructure. […]

> We found multiple types of middlebox #misconfiguration in the wild that can lead to technically infinite amplification for the attacker […]
https://geneva.cs.umd.edu/posts/usenix21-weaponizing-censors/
#Geneva #USENIX

#usenix #geneva #misconfiguration #internet #threat #amplification #tcp #censorship #dos #infosec