/explore
|
You are here 
|
www.sektioneins.de | ||
| | | | |
blog.fabiopires.pt
|
|
| | | | | CVE's Oracle - Unauthenticated XML eXternal Entity (XXE) [2017]CVE-2017-10310The XML parser of the Oracle Hyperion Financial Reporting Web Studio was configured to process document type definition (DTD) files provided by users. This allowed unauthenticated attackers to exploit this misconfiguration in the XML processor and read arbitrary files on the host system. In addition, it was also possible to obtain directory listings, perform server-side requests or cause a denial of service by using different variations of the payload. | |
| | | | |
vxlabs.com
|
|
| | | | | Web Key Directory (WKD) "is a standard for discovery of OpenPGP keys by email address, via the domain of its email provider". In short, through some DNS and files-on-your-webserver conventions, some email clients (e.g. Thunderbird or ProtonMail) and tools like GnuPG are able to retrieve your PGP keys automatically. This is of course super convenient and desirable for your correspondents, because PGP encryption is hard enough as it is. OpenPGP makes this even better by offering "WKD as a service", which m... | |
| | | | |
slxh.nl
|
|
| | | | | [AI summary] A technical analysis and comparison of various DNS-based mechanisms (CERT, OPENPGPKEY, PKA, WKD) used by GnuPG to automatically retrieve PGP keys from the internet. | |
| | | | |
www.sethvargo.com
|
|
| | | Ruby 2.0 is still a work in progress, but it's already at preview 2. If you're looking to play with it, here are some steps to install Ruby 2.0 Preview 2 on Mac OSX Mountain Lion (and older OSX versions) | ||
