http (@[email protected]) @SwissHttp

I tweet mainly about IT security, iOS / iPhone jailbreaking. I have a Microsoft background. Administrator on theiphonewiki․com. Blue team. Switzerland Joined April 2010

Tweets

23K
Followers

6K
Following

360
Likes

16K

blasty @bl4sty

3 years ago

Decided to publish the Lexmark printer exploit + writeup + tools instead of sell it for peanuts. 0day at the time of writing: github.com/blasty/lexmark -- enjoy!

17 277 923 147K 191

View Details

http (@[email protected]) @SwissHttp

3 years ago

@spale75 @S1D_ @lufthansa You cannot use two tickets for the same passenger, so they have to refund. If they refuse, simply undo the original charge with your card issuer. Works pretty well.

0 1 4 142 0

View Details

We (@winterdeaf @kientuong114 and I) took a deep dive on Threema, a Swiss-made secure messaging app. We found 6 new cryptographic vulnerabilities. Full paper at breakingthe3ma.app; mini-thread follows. #threema

5 118 300 139K 44

View Details

http (@[email protected]) @SwissHttp

3 years ago

@esizkur @nervoir Sure, you cannot guarantee bug-freeness, but you can get pretty close. At $1000 per line of code. fastcompany.com/28121/they-wri…

0 0 1 68 0

View Details

http (@[email protected]) @SwissHttp

3 years ago

@ptracesecurity @KitPloit Isn’t there a typo in the ASCII-art title? #Exhange

0 0 0 131 0

View Details

Sam Curry @samwcyo

3 years ago

Super excited to release our car hacking research discussing vulnerabilities affecting hundreds of millions of vehicles, dozens of different car companies: samcurry.net/web-hackers-vs… Contributors: @_specters_ @bbuerhaus @xEHLE_ @iangcarroll, @sshell_ @infosec_au @NahamSec @rez0__

59 722 2K 342K 490

View Details

dragosr @dragosr

3 years ago

Hi Auto Industry. It's the internet calling... (Subtitle: How to take over a Ferrari account with zero interaction.) samcurry.net/web-hackers-vs…

1 19 38 6K 3

View Details

http (@[email protected]) @SwissHttp

3 years ago

@iagox86 Yes, I found that one too. Too bad that it’s empty.

0 0 0 59 0

View Details

http (@[email protected]) @SwissHttp

3 years ago

Does anyone have a copy or working link to original netcat 1.00 (version 951010), file nc100.tgz or is that lost forever? I can only find dead ftp links or a MinGW fork or v1.10 versions.

2 3 6 6K 0

View Details

http (@[email protected]) @SwissHttp

3 years ago

@plntxtoffenders @omervk Is your site still active? I see last entry from 2021. If yes, please add:

tihmstar @tihmstar

3 years ago

TIL: @netzclub speichert Passwörter im Klartext, gibt Mitarbeitern eine API um "die ersten 3 Zeichen abzufragen" und der Support fordert von den Kunden ihr passwort zu verraten. WTF!? Sogar als 2010 der Laden gegründet wurde war sowas schon absolutes No-Go o.O

6 1 24 17K 1

1 0 0 20 0

View Details

http (@[email protected]) @SwissHttp

3 years ago

@tihmstar @netzclub not sure if still active, but start page has entries from 2021: plaintextoffenders.com

0 0 0 209 0

View Details

http (@[email protected]) @SwissHttp

3 years ago

@noahkagan @esizkur “My phone number is only for friends” is hard to say at a startup.

0 1 0 219 0

View Details

http (@[email protected]) @SwissHttp

3 years ago

@paulg @mikko and all sources it was trained on.

0 0 0 167 0

View Details

http (@[email protected]) @SwissHttp

3 years ago

@red5heep I did try the archive, but only searched for the file name. It could be on some iso file of distributed CDs of course. If you have an idea on how to search there and find it, let me know.

0 0 0 167 0

View Details

vx-underground @vxunderground

3 years ago

If you sent an API request to Twitter with an e-mail address, and an incorrect password, the API returned a JSON response containing the username associated with the account. A Threat Actor compiled 221,608,279 entries. This list includes celebrities, politicians, and more...

41 608 3K 573K 310

View Details

http (@[email protected]) @SwissHttp

3 years ago

@RandChange @jerblack @Slav636 @vxunderground If I read that documentation and there is a limit on authentication, that would be the 450 requests per 15 minutes, right? With 1000 bearer tokens in parallel, you can check 1 billion emails in 23 days.