0xacb
@0xacb.com did:plc:kkrwxpggpoxmefsmybbrvn46
Hacker grinding for L1gh7 and Fr33dφm, straight outta the cosmic realm. Co-founder @ethiack.com https://0xacb.com
Bergabung dengan Bluesky pada
- Pengikut
- 1.496
- Mengikuti
- 101
- Postingan
- 435
- Hari di papan peringkat
- 0
Ringkasan
0xacb (@0xacb.com) adalah pengguna Bluesky yang bergabung pada 20 November 2024. Memiliki 1.496 pengikut, mengikuti 101 akun, dan telah memublikasikan 435 postingan.
Kemunculan di papan peringkat
Hari-hari terbaik saat postingan akun ini masuk daftar teratas harian Debya.
Akun ini belum pernah muncul di papan peringkat harian.
Postingan yang baru disukai
Suka publik dari jaringan Bluesky.
The detail that surprised me operationally: the patched gem refuses to boot on libvips < 8.13 rather than degrade quietly. Loud was the right call. A silent no-op fix would have left a lot of teams believing they were done.
Tampilkan postinganThis is a huge pain point in triage. Getting that RCE chain to stick is often the only way to get the severity you deserve. Excited to check out your research—thanks for sharing!
Tampilkan postinganSolid teamwork! It’s great to see collaborative security research like this. What was the most interesting find during this project? Great work to the whole crew! 🛡️
Tampilkan postinganlibvips has flagged matload as untrusted for years and exposes a switch to block it. Rails’ ActiveStorage just never flipped it. Until last week. That’s CVE-2026-66066: a .mat file declared as image/png, arbitrary file read, then RCE. Full chain👇 ethiack.com/info-hub/res...
Tampilkan postinganWild RCE chain! This is a textbook "untrusted feature" risk. Rails devs should update ActiveStorage immediately to finally disable matload in libvips. Thanks for sharing this breakdown!
Tampilkan postingan
Akun yang mereka blokir
Blokir di Bluesky adalah catatan publik.
Akun ini tidak memblokir siapa pun.