2019-01-09 News Feed

Today’s Principle to Follow:
Principle #12: Value Knowledge and Practices That Have Stood the Test of Time.
   Humans are constantly learning and teaching each other the new things that we learn. But we have to keep in mind our track record. At one time we thought the Earth was flat. At one time we didn’t realize germs were spread through contact and that we should wash our hands. At another time many people believed the same creatures had always lived on the planet (rather than evolution). Of course, often newer findings may be accurate, but it can be a mistake to assume that all newer findings are accurate. In science, often one study appears to confirm something radical. A problem happens when further studies try to confirm those findings and fail – and we are forced to realize that the original experiment had an error. Also, you keep in mind that the media often reports on new findings either with wrong facts and interpretations, or they may exaggerate the implications of a minor finding to try to gain readers. If you stay up to date with the latest findings, maintain your skepticism.

---

---

Microsoft Patch Tuesday — January 2019 Security Updates Released
https://thehackernews.com/2019/01/windows-security-updates.html
#hackerstuff #HackThePlanet

---

20-Year-Old Man Arrested For Carrying Out Germany’s Biggest Data Leak
https://thehackernews.com/2019/01/germany-data-leak-arrested.html
#hackerstuff #HackThePlanet

---

Zerodium is paying $2 million for Apple iOS remote jailbreak

Zerodium is paying $2 million for Apple iOS remote jailbreak

#hackerstuff #HackThePlanet

---

Page Cache Attacks
https://arxiv.org/pdf/1901.01161.pdf
#hackerstuff #HackThePlanet

---

‘Spoofing’ Google Search results
https://wietzebeukema.nl/blog/spoofing-google-search-results
#hackerstuff #HackThePlanet

---

LeakLooker: Find Open Databases in Seconds
https://hackernoon.com/leaklooker-find-open-databases-in-a-second-9da4249c8472
#hackerstuff #HackThePlanet

---

Gradle Plugin Portal: Clickjacking & Cross-Site Request Forgery enabling Account Takeover
https://medium.com/@jonathan.leitschuh/gradle-plugin-portal-clickjacking-cross-site-request-forgery-enabling-account-takeover-d65c2e43082b
#hackerstuff #HackThePlanet

---

HackerOne – XSS in steam react chat client
https://hackerone.com/reports/409850
#hackerstuff #HackThePlanet

---

polkit: temporary auth hijacking via PID reuse and non-atomic fork
https://bugs.chromium.org/p/project-zero/issues/detail?id=1692
#hackerstuff #HackThePlanet

---