privacylog.blogspot.com 31. 7. 2023NEW BLOG URL – privacylog.blogspot.com 15. 12. 2021Log4j2 more zero days – privacylog.blogspot.com 29. 9. 2021NPM zero-day: npm installation runs unspecified scripts with shell access – privacylog.blogspot.com 29. 9. 2021OpenSea allows unauthenticated access to "private" token lists – privacylog.blogspot.com 27. 9. 2021Implementation issues make Number Board marketplace bidding vulnerable – privacylog.blogspot.com 19. 7. 2021Mexican federal government COVID vaccination certificates are vulnerable to photo manipulation attack (en/es) – privacylog.blogspot.com 2. 5. 2021GitHub Pages Zero Day with Wildcard Subdomains Allows Anyone to Publish on Your Site – privacylog.blogspot.com 1. 5. 2021Upcoming Event: Zero Day Live 2021-05-01 2PM New York Time – privacylog.blogspot.com 25. 4. 2021The Ethics of Not Disclosing Vulnerabilities – privacylog.blogspot.com 13. 4. 2021Poker Players Getting Scammed by Venmo Password Reset/Instant Withdraw – privacylog.blogspot.com 13. 8. 2020Google Apps Publishes Administrator Contact Information – privacylog.blogspot.com 17. 5. 2020WeWorked 0-day: Unauthorized users can gain admin access and change their own pay rate – privacylog.blogspot.com 31. 12. 2019The Second SHA Collision – privacylog.blogspot.com 21. 10. 2019Compound Finance zero-day: prices can move faster than advertised – privacylog.blogspot.com 27. 9. 2019IPv6 hurts your privacy, removes plausible deniability and is on by default – privacylog.blogspot.com 21. 9. 2019Zno User-Uploaded Photos are Publicly Accessible, Again – privacylog.blogspot.com 25. 6. 2019Safari zero-day: any website can request your admin password through indistinguishable popup – privacylog.blogspot.com 6. 5. 2019Security Flaws With Apple's Two-Factor Authentication – privacylog.blogspot.com 8. 3. 2019What is Ethical Hacking? – privacylog.blogspot.com 31. 1. 2019American Express Prepaid Holiday Cards Vulnerable to Enumeration Attack – privacylog.blogspot.com 20. 11. 2018Security Vulnerability with United's Ticketing System (0-day) – privacylog.blogspot.com 26. 10. 2018Information in Apple's data about you that I did not expect – privacylog.blogspot.com 2. 8. 201899% of Pennsylvania Parents Give Newborn DNA to State Database – privacylog.blogspot.com 11. 6. 2018Pennsylvania Corporate Tax Records Were Available to Public – privacylog.blogspot.com 21. 4. 2017What Happens When You Send a Zero-Day to a Bank? – privacylog.blogspot.com 23. 9. 2016Password strength meter – privacylog.blogspot.com 29. 2. 2016Introducing System Bus Radio – privacylog.blogspot.com 25. 2. 2016Trust is the biggest threat to privacy & security – privacylog.blogspot.com 11. 2. 2016Internet Marketing Ninjas client report vulnerability – privacylog.blogspot.com 29. 1. 2016Poor security at OPM – privacylog.blogspot.com
31. 7. 2023NEW BLOG URL – privacylog.blogspot.com 15. 12. 2021Log4j2 more zero days – privacylog.blogspot.com 29. 9. 2021NPM zero-day: npm installation runs unspecified scripts with shell access – privacylog.blogspot.com 29. 9. 2021OpenSea allows unauthenticated access to "private" token lists – privacylog.blogspot.com 27. 9. 2021Implementation issues make Number Board marketplace bidding vulnerable – privacylog.blogspot.com 19. 7. 2021Mexican federal government COVID vaccination certificates are vulnerable to photo manipulation attack (en/es) – privacylog.blogspot.com 2. 5. 2021GitHub Pages Zero Day with Wildcard Subdomains Allows Anyone to Publish on Your Site – privacylog.blogspot.com 1. 5. 2021Upcoming Event: Zero Day Live 2021-05-01 2PM New York Time – privacylog.blogspot.com 25. 4. 2021The Ethics of Not Disclosing Vulnerabilities – privacylog.blogspot.com 13. 4. 2021Poker Players Getting Scammed by Venmo Password Reset/Instant Withdraw – privacylog.blogspot.com 13. 8. 2020Google Apps Publishes Administrator Contact Information – privacylog.blogspot.com 17. 5. 2020WeWorked 0-day: Unauthorized users can gain admin access and change their own pay rate – privacylog.blogspot.com 31. 12. 2019The Second SHA Collision – privacylog.blogspot.com 21. 10. 2019Compound Finance zero-day: prices can move faster than advertised – privacylog.blogspot.com 27. 9. 2019IPv6 hurts your privacy, removes plausible deniability and is on by default – privacylog.blogspot.com 21. 9. 2019Zno User-Uploaded Photos are Publicly Accessible, Again – privacylog.blogspot.com 25. 6. 2019Safari zero-day: any website can request your admin password through indistinguishable popup – privacylog.blogspot.com 6. 5. 2019Security Flaws With Apple's Two-Factor Authentication – privacylog.blogspot.com 8. 3. 2019What is Ethical Hacking? – privacylog.blogspot.com 31. 1. 2019American Express Prepaid Holiday Cards Vulnerable to Enumeration Attack – privacylog.blogspot.com 20. 11. 2018Security Vulnerability with United's Ticketing System (0-day) – privacylog.blogspot.com 26. 10. 2018Information in Apple's data about you that I did not expect – privacylog.blogspot.com 2. 8. 201899% of Pennsylvania Parents Give Newborn DNA to State Database – privacylog.blogspot.com 11. 6. 2018Pennsylvania Corporate Tax Records Were Available to Public – privacylog.blogspot.com 21. 4. 2017What Happens When You Send a Zero-Day to a Bank? – privacylog.blogspot.com 23. 9. 2016Password strength meter – privacylog.blogspot.com 29. 2. 2016Introducing System Bus Radio – privacylog.blogspot.com 25. 2. 2016Trust is the biggest threat to privacy & security – privacylog.blogspot.com 11. 2. 2016Internet Marketing Ninjas client report vulnerability – privacylog.blogspot.com 29. 1. 2016Poor security at OPM – privacylog.blogspot.com