2024-05-02 19:11 UTC
Replies (2)
-
@eb@social.coop 2024-05-02 19:14
@briankrebs@infosec.exchange @alex@feed.yopp.me I’ve received private disclosure of a potential vulnerability that I have independently verified as still active. I would disclose it as we are a whole year past the responsible disclosure period, but it’s the state of Georgia and incompetent governments don’t take too kindly to this: https://www.theverge.com/2021/10/14/22726866/missouri-governor-department-elementary-secondary-education-ssn-vulnerability-disclosure
-
@alex@feed.yopp.me 2024-05-02 19:43
@eb@social.coop @briankrebs@infosec.exchange I’ve seen another subtle hack recently: I suppose CMS haven’t been patched, so all the content on a website had few words in article to be made in links that also point to some shady pharma site. I wonder if it’s possible to check backlinks from Georgia’s site. But referrer check is 👌. So simple, much efficient!