Fileless RCE on stock Android (~2.5B devices). Reported to Google VRP, confirmed by their own engineering team, closed as NSBC anyway.

Full writeup:
https://www.researchgate.net/publication/407433163_Fileless_Code_Execution_via_Semantic_Gap_in_Android_WebView_Bridge_Architecture_A_Case_Study_in_Platform_Security_Boundary_Ambiguity

#AndroidSecurity #infosec #Android #MobileSecurity #VulnerabilityResearch #RCE #BugBounty #VRP #ResponsibleDisclosure #AppSec #ThreatIntel #WebView #ZeroDay #CVE

You demonstrate a fileless RCE chain. Complex delivery, in-memory execution, zero detections, confirmed working on multiple devices.

The vendor reviews it twice, involves engineering, then tells you:

"Your research demonstrates a complex chain for delivering and executing code."

...and closes it as 'intended behavior. Not a platform vulnerability.'

Question: is it a vulnerability?

Follow-up: does your answer change if the attack surface exists *between* components — where no single owner's scope definition covers the full chain?

Asking because I have a paper dropping soon about that.

#VRP #responsibleDisclosure #semanticGap #infosec #securityResearch

Calcul du meilleur chemin qui passe par 255 villes en seulement 3 min 😱 😍

Je kiff la méthode que j'ai utilisé

#machinelearning #vrp

Решаем VRP-задачи, или Как мы в Додо доставку оптимизировали

Все сервисы доставки рано или поздно сталкиваются с аббревиатурой VRP. За ней скрывается сложная и важная задача оптимизации доставки. От того, насколько эффективно вы её решите, зависит и удовлетворённость клиентов, и реальные показатели бизнеса: скорость доставки, расходы на логистику. В этой статье я расскажу о типах VRP-задач, их отличиях, и о готовых решениях, которые вы можете затестить в ваших кейсах уже сейчас. Поделюсь подходами и инструментам, которые открыл в ходе исследования темы, опытом их использования и причинами, по которым я сразу отказался от некоторых из них.

https://habr.com/ru/companies/dododev/articles/904464/

#ORTools #Комбинаторная_оптимизация #VRP #Подбор_оптимального_маршрута #Алгоритмы #Транспорт #Курьерская_доставка #Логистика #Маршрутизация #Планирование_маршрутов

How to minimize driver costs for the Vehicle Routing Problem.

In this video, I cover dealing with a mixed fleet of employees and contractors. As well as overtime costs.

https://www.youtube.com/watch?v=2Foa68i9CSU

#OperationsResearch #VRP #FieldService #AI #PlanningAI

Google Cloud’s new Vulnerability Reward Program

https://cloud.google.com/blog/products/identity-security/google-cloud-launches-new-vulnerability-rewards-program

#bugbounty #googlecloud #googlevrp #security #vrp

Ok, I just had to limit a remote account for spamming the VRChat hashtag from VRP with TONS of posts of VRC "ERP". Like I was scrolling it IT JUST KEPT GOING must have been like 100 posts just from what I saw... wtf.  

#vrp #vrchat #vrc

 New Instance Update:

Small instance update here, I reenabled approval for new users on the instance. My reason for turning them back on is that I haven’t had many people joining anyways and that with them on if someone does join I will be notified about it, acceptance times should be decently quick unless I am sleep!

#vrp #vrparty

Finally hit that sweet 90 days of uptime for https://join.vrp.social, lets goooo!

#mastodon #mastoadmin #uptime #vrp #vrparty

Looks like VRParty passed 500 posts! Pretty neat, onward to a thousand now!  

https://fedidb.org/network/instance/vrparty.social

#vrp #vrparty #mastoadmin #mastodon