iiinova — where your digital self keeps evolving

Jérémy Derussé

@jderusse.bsky.social

developer @blackfire.io core team & security team @symfony

Jérémy Derussé @jderusse.bsky.social · 23/01/2025

La @FFME_officiel vient d'envoyer un email à tous ses adhérants pour les informer que leurs données personnelles ont fuitées ☠️. Je ne suis pas surpris, je leur ai signalé la faille en Juillet 2021 🤷‍♂️ ! Il y a putain de 3 ans et demi 🤬! 🧵détails ⤵️ 1/7

143

Jérémy Derussé @jderusse.bsky.social · 23/01/2025

The french Moutain and Climbing Sport Federation @FFME_officiel just sent an email to report a data breach ☠️. All personal information of their members (present and past) was publicly accessible. I'm not surprised, I warn them about the vulnerability in July 2021 🤷‍♂️ !

000

Jérémy Derussé @jderusse.bsky.social · 08/12/2024

This is how command injection looks like in 2024. It involves GitHub Actions and a branch names. github.com/advisories/G...

011

Jérémy Derussé @jderusse.bsky.social · 03/12/2024

Dude reported false vulnerability reports to cve.mitre.org. @github.com created advisory for these CVE, and users are now complaining and asking to fix something that does not exist 😢

183

Reposted by Jérémy Derussé

Fabien Potencier @fabien.potencier.org · 29/11/2024

#Symfony 7.2 has just been released. Here is a list of curated features symfony.com/blog/symfony... Big thanks to all the contributors!

symfony.com

Symfony 7.2 curated new features (Symfony Blog)

Symfony 7.2 curated new features

19337

Reposted by Jérémy Derussé

Marcel Pociot @marcelpociot.bsky.social · 21/11/2024

It doesn't just happen on your open-source project that you need to patch things immediately before the official release

1171