Till REcollapse: #Fuzzing the web for mysterious bugs

Some very cool #webapp #hacking techniques that exploit encoding normalization and regex behavior differences to bypass input validation, explained by @0xacb

https://0xacb.com/2022/11/21/recollapse/
https://github.com/0xacb/recollapse

If you are running your own #mastodon #instance your storage will fill up pretty quickly, as Mastodon will cache any images, videos etc, from your federated feed. (I have racked up 16GB in just two weeks, on my tiny single user instance.) By default that cache doesn't ever appear to be cleared out, which not only leads to inherently unlimited growth, but is probably a #gdpr / data protection nightmare too.

Run these two commands on a crontab (daily / hourly / whatever) to continously clear out old media data from your cache:

# Remove local thumbnails for preview cards.
RAILS_ENV=production bin/tootctl preview_cards remove --days {days}
# Remove locally cached copies of media attachments from other servers.
RAILS_ENV=production bin/tootctl media remove --days {days}

(replace {days} with whatever you fancy, obviously. It’s the number of days you want to keep media for - the smaller the number the faster things will be deleted.)

#mastoadmin

We are Austin Hackers Anonymous. A loose group of hackers, security professionals, tinkerers, troublemakers, and life long learners of all sorts of topics and projects who exist in Austin, TX (and some extended friends afar).

We meet once a month to deliver short (5-10min) turbo talks about whatever it is we’re working on or wanting to share with others.

Participation is mandatory and if it is your first time you MUST give an intro.

Many of us owe our careers, friendships, and a hell of a lot to this amazing group of people.

See our website for full details, rules, and more: https://takeonme.org/

If you are not local to Austin, you may be interested in some of our other chapters & friends. We’ve created a (inter?)national branch at HackersAssociation which is also where you can find AHA on Discord, in #aha-public.

https://hackersassociation.org/

#introduction #HackerGroups
#ATX #AustinTX