LiveOverflow 🔴 @liveoverflow.bsky.social · 08/08/2026Reminder: if you are at #DEFCON, come by our booth and say hi :) 👋 1170
LiveOverflow 🔴 @liveoverflow.bsky.social · 19/02/2025Got two RTX 3090 for local AI stuff. And yes, I do see that the thermals are not optimal 🙃 3140
LiveOverflow 🔴 @liveoverflow.bsky.social · 29/01/2025Fancy Bear! what are young russian hackers up to?? 1160
LiveOverflow 🔴 @liveoverflow.bsky.social · 24/01/2025This is the kind of issue where you need to change your perspective. If you are stuck with "we as the attacker want to directly access cached data", you will miss the obvious. Turns out, we can control the cache parameter, by forcing the victim to visit the link with our value!! 1110
LiveOverflow 🔴 @liveoverflow.bsky.social · 24/01/2025OP clarifies it's not the browser cache. Server-side cache would still be exploitable, right? But no... OP explains that it's not exploitable, because an attacker cannot guess the random cache key parameter :( 160
LiveOverflow 🔴 @liveoverflow.bsky.social · 24/01/2025Those are the real bug bounty tricks nobody talks about :P Faking bugs!!! Jokes aside, that's not the end of the story! A fellow hunter asks some clarifying questions. Browser cache? Server side cache? Or maybe even a service worker? 160
LiveOverflow 🔴 @liveoverflow.bsky.social · 24/01/2025This is a great post on bug bounty reddit! OP reported an IDOR, gets paid $2,000, and then realizes it never was IDOR. It's just a cached response... 3525
LiveOverflow 🔴 @liveoverflow.bsky.social · 06/01/2025When I was still early in my career, 7 years ago at 31C3, I saw Ange Albertini's talk. His work on file formats always was one of those "aha!" moments for me. So it was really nice to see @angealbertini.bsky.social (corkami) back again at #38C3 <3 1271
LiveOverflow 🔴 @liveoverflow.bsky.social · 02/12/2024My cat roomate always pranks me when I don't lock my laptop 3330
