- 88 Followers
- 105 Following
- 57 Posts
he/they
You won't find moments in a box. NJ➡️TX. Looking for evil @ Splunk
Jerry 🦙💝🦙Thinking about making a book featuring my photography with inspirational Infosec messages
Star Trek Minus Context
cryptographers coming up with increasingly convoluted hijinks for the Alice/Bob/Charlie/Eve/Mallory polycule to get up to
Filippo ValsordaA PSA since there's some confusion on this...
There is no vulnerability in Gorilla Sessions.
The vulnerability is in Palo Alto's internal SessDiskStore, which looks similar to FilesystemStore. Early analysis came to the mistaken conclusion that the vulnerable path was in FilesystemStore, but it's not. FilesystemStore authenticates the Session.ID with securecookie, SessDiskStore does not.
Got a couple spare bluesky codes if anyone is interested.
I hate getting really awesome news at work on a Thursday that I'm not allowed to talk about until Monday evening.
So, I got this working Friday night but wanted to wait until I had something up and running with at least some content on it. My personal blog (the verified link in my bio) is now finally up and running. https://loustella.io for anyone interested.
Been giving BlueSky a try the last few days. Thinking there's a chance that's the one that "wins" for the public.
Having relatively intimate knowledge of the very specific systems impacted currently, staffing levels, and the internal politics... maybe some day I'll write about my time at #Rackspace