GitHub’s Post

I think it's wonderful they've open sourced deoendbot! 🤖 (we currently use it on our website 😊) I'm a big fan of open source, and it's great that for security software like this it will both hopefully improve re-use/adoption (which is good for everyone!) whilst also meaning the community can quickly update to fix problems or address any new vulnerabilities. These same benefits potential apply to open sourcing our own analysis and data curation code within the health, govt and the wider public sector: ⚙️Others can reuse your hard work, potentially doubling (or more!) the benefit 🔧Others may find issues, or help you improve the code, meaning in the end you get a better product if you want to learn more about why open sourcing is good and how to go about it check our NHS RAP guidance! https://lnkd.in/dQc3cFgr

Such a simple tool provides so much value! It's great to find it open-sourced.

Some simple instructions to find online industrial control systems, and illustrating the risks associated. Its a how-to, give it a try.

Saturday fun; open source intelligence hack yourself, some simple instructions. In this post I show a very simple 'search for rockwell' followed by 'the earth caught fire', with some detail left for the reader. shodan, curl, nmap. Give it a try on your own targets. https://lnkd.in/gys53XP8

Supporting critical opensource #infrastructure .. Tim Bray proposes a structure for improving the safety and quality of opensource software. Code that was put up quickly because it seemed like a good idea at the time turned out to be such a good idea that it got incorporated into all sorts of other things, without consideration for how it was being maintained; and now it enables skilled, patient, malicious attacks. https://lnkd.in/eCsQcdFs An OSQI is a public-sector organization that employs software engineers. Its mission would be to improve the quality, and especially safety, of popular Open-Source software. obligatory XCKD https://xkcd.com/2347

New tool "Snappy" can help detect fake or rogue WiFi access points that attempts to steal data from unsuspecting people o spoofing the MAC addresses and SSIDs of legitimate access points on open networks is trivial for determined #cyberattack to deploy man-in-the-middle attacks; o devices of those who revisit the locations of open wireless networks they previously connected to will automatically attempt to reconnect to a saved access point, and their owners will be oblivious to the fact that they connecting to a #malicious device; o Snappy helps people detect if the access point they're using is the same as the one they used the last time (and every time) or if it might be a fake or rogue device by checking static elements such as the vendor, BSSID, supported rates, channel, country, max transmit power, and others that vary between different 802.11 wireless access points but are consistent for a specific access point over time; -> This functionality was incorporated into a Python script called Snappy that was published on Trustwave's GitHub repository and made available for free: https://lnkd.in/dVsDCj2A o source&details: https://lnkd.in/dW_NwpV4

Do you know all the components of a URL? Uniform Resource Locator (URL) is a term familiar to most people, as it is used to locate resources on the internet. When you type a URL into a web browser's address bar, you are accessing a "resource", not just a webpage. URLs comprise several components: 🔹The protocol or scheme, such as http, https, and ftp. 🔹The domain name and port, separated by a period (.) 🔹The path to the resource, separated by a slash (/) 🔹The parameters, which start with a question mark (?) and consist of key-value pairs, such as a=b&c=d. 🔹The fragment or anchor, indicated by a pound sign (#), which is used to bookmark a specific section of the resource. Follow Mohamed Rilwan for more insights Like | Share | Comment Credits - ByteByteGo

Check out my blog post https://wix.to/f9UYjsQ

xz backdoor scary summary: https://lnkd.in/dUW6D4Jk -> again an open source project everyone rely on is not well funded... + a bad intention = 💥 (luckily found by luck 🍀 - before landed in stable distribution releases)

Hey folks! Wanted to share our work on Tarsier 🙈 An open source utility library that enables LLMs like #gpt4 to browse the web. The library helps answer the following: - How do you map LLM responses back into web elements? - How can you mark up a page for an LLM to better understand its action space? - How do you feed a "screenshot" to a text-only LLM? Checkout a demo of browsing below and read more on GitHub: https://lnkd.in/gXAd_XNs