aviCC
Joined 4 years ago
Karma
53
Submissions
45
Member since
Mar 29
Recent submissions
Comment · 2 years ago
Wow if that's true and affects more websites, then it's super cool and huge
Comment · 2 years ago
And a link, if you want to read the official blog post:
https://salt.security/blog/security-flaws-within-chatgpt-ext...
Comment · 2 years ago
Technical details:
"The plugin does not authenticate the request, which means that the attacker can insert another memberId (aka the victim) and get a code that represents the victim. With that code, he can use ChatGPT and access the GitHub of the victim."
Comment · 3 years ago
Invest money on companies who want to improve our life
Comment · 3 years ago
https://platform.intervee.io/
Provides practical challenges with guidance for graduates in various subjects including Linux, Network, Security, and more..
Computer Science can sometimes be theoretical and learning from practical example is a must.
Comment · 3 years ago
Actually, the CVE-2023-283131 vulnerability was published with the full details just two days ago. In April Expo published a short post but without too much technical information.
You can find more details about CVE-2023-283131 in the link I shared here:
https://salt.security/blog/a-new-oauth-vulnerability-that-ma....
Thank you for bringing up the distinction, and I agree that OpenID can help address some of the issues, but not all of them...
Comment · 3 years ago
TLDR: A direct link to the interesting technical information:
https://salt.security/blog/a-new-oauth-vulnerability-that-ma...