Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

My challenge is actually based on a bug I found in Apollo Server; in its default configuration, it uses the same blacklist-based approach to prevent CSRF. I was able to bypass it and use it as an XS-Leak in default configs. I’ll be writing a detailed write-up soon about...

AmirMSafari's profile picture

AmirMohammad Safari

8,197 subscribers

27,406 görüntüleme • 2 ay önce •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

✨ A dream I had finally came true: I can now chat directly with my sites to build any feature or fix any bug just via Telegram I've been playing with OpenClaw for 3 weeks now and it's great but I was always too scared to run it on any production server And I was right a bit as Marc Köhlbrugge was able to hack it by social engineering and acting as if it was me, and with enough tries it believed him, and was able to modify the server, change SSH keys etc. of course I had it isolated properly on its own VPS and it didn't touch anything sensitive (as it should!) Marc then reported that bug to Peter Steinberger 🦞 who patched it fast But I wanted to try something more basic and simple, and I think maybe more secure: to just connect Claude Code on my server to Telegram which would be hard locked to only messages from me So I installed claude-code-telegram by Richard Atkinson on the server and run it as a system daemon and it works really well The cool thing is that I was already using Telegram for server errors like this: > Photo AI - ❌ Random credits giveaway failed (Attempt 30/30) with an exception: SQLSTATE[HY000]: General error: 5 database is locked So now I can just reply, "Ok fix this", and Claude Code on the server in production will try (and probably succeed) in fixing it In the video below I asked it to make show [🌳 Parks ] on the map by default on load, it did that, then I reloaded the page and it instantly worked One thing it still needs is sending actual messages while it's doing stuff which OpenClaw does really well, it's annoying to just wait while it says "Working..." but that's probably next
1:30

✨ A dream I had finally came true: I can now chat directly with my sites to build any feature or fix any bug just via Telegram I've been playing with OpenClaw for 3 weeks now and it's great but I was always too scared to run it on any production server And I was right a bit as Marc Köhlbrugge was able to hack it by social engineering and acting as if it was me, and with enough tries it believed him, and was able to modify the server, change SSH keys etc. of course I had it isolated properly on its own VPS and it didn't touch anything sensitive (as it should!) Marc then reported that bug to Peter Steinberger 🦞 who patched it fast But I wanted to try something more basic and simple, and I think maybe more secure: to just connect Claude Code on my server to Telegram which would be hard locked to only messages from me So I installed claude-code-telegram by Richard Atkinson on the server and run it as a system daemon and it works really well The cool thing is that I was already using Telegram for server errors like this: > Photo AI - ❌ Random credits giveaway failed (Attempt 30/30) with an exception: SQLSTATE[HY000]: General error: 5 database is locked So now I can just reply, "Ok fix this", and Claude Code on the server in production will try (and probably succeed) in fixing it In the video below I asked it to make show [🌳 Parks ] on the map by default on load, it did that, then I reloaded the page and it instantly worked One thing it still needs is sending actual messages while it's doing stuff which OpenClaw does really well, it's annoying to just wait while it says "Working..." but that's probably next

@levelsio

640,316 görüntüleme • 4 ay önce

In the European Union, from February 10th, they will be able to use up to 4% UV-treated mealworm powder in our foods. As an European woman I have a message to say… GFY. We need to make Europe great again and we need to do it now! Very soon it will be too late to reverse it.
1:21

In the European Union, from February 10th, they will be able to use up to 4% UV-treated mealworm powder in our foods. As an European woman I have a message to say… GFY. We need to make Europe great again and we need to do it now! Very soon it will be too late to reverse it.

Ada Lluch

131,357 görüntüleme • 1 yıl önce

“Once national socialism has been cleansed of all its lies and distortions it will be as powerful a force as it was in the 30’s… and I’ll tell you why. It is based on the natural order of things. It is tailor made for European men and women.” -Ernst Zundel
3:33

“Once national socialism has been cleansed of all its lies and distortions it will be as powerful a force as it was in the 30’s… and I’ll tell you why. It is based on the natural order of things. It is tailor made for European men and women.” -Ernst Zundel

Uncommon Sense

70,626 görüntüleme • 9 ay önce

Thinking about adding this feature as a default one for my heads because I really like it! Especially on toothy mouths, when the tongue is out, it have a weird pose. This small magnet takes it in a more natural position 👅
0:31

Thinking about adding this feature as a default one for my heads because I really like it! Especially on toothy mouths, when the tongue is out, it have a weird pose. This small magnet takes it in a more natural position 👅

StuffedTailsFursuits |STF|

25,419 görüntüleme • 1 yıl önce

Very very true! When I worked at Loyola Healthcare in Administration, I learned that the billing was based on how much money is available to use up and not what it actually costs or true price. #SchoolSessionEconomics
1:41

Very very true! When I worked at Loyola Healthcare in Administration, I learned that the billing was based on how much money is available to use up and not what it actually costs or true price. #SchoolSessionEconomics

®️SheLuv

22,179 görüntüleme • 7 ay önce

#ZVICHANAKA - Wrote this one a few nights ago as I was in a dark place and I found solace in knowing that God has my back, he loves me and he always chooses me. “Zvichanaka” means “It will be alright” 200 retweets and I’ll make it an Open Verse Challenge.
1:06

#ZVICHANAKA - Wrote this one a few nights ago as I was in a dark place and I found solace in knowing that God has my back, he loves me and he always chooses me. “Zvichanaka” means “It will be alright” 200 retweets and I’ll make it an Open Verse Challenge.

SEWE OUT NOW!🤘🏿🎸

17,377 görüntüleme • 2 yıl önce

Few months into Web3… and it already changed my story. Same week I secured a Core i7 elitebook setup and an iPhone 16 Plus all from staying consistent, learning, and actually putting in the work in this space. This is just the beginning. I’ll be sharing more updates, insights, and opportunities as I grow. If you’re serious about Web3, tap in I’ll be dropping everything on my Telegram channel soon.
0:40

Few months into Web3… and it already changed my story. Same week I secured a Core i7 elitebook setup and an iPhone 16 Plus all from staying consistent, learning, and actually putting in the work in this space. This is just the beginning. I’ll be sharing more updates, insights, and opportunities as I grow. If you’re serious about Web3, tap in I’ll be dropping everything on my Telegram channel soon.

Kappy

13,505 görüntüleme • 3 ay önce

I just created my own web AI agent. I can give it a topic or a news URL and it will take over my computer to look it up, summarize it, and draft a post about it in my own writing style. All on its own 🤯 Here’s how you can do it too:
0:21

I just created my own web AI agent. I can give it a topic or a news URL and it will take over my computer to look it up, summarize it, and draft a post about it in my own writing style. All on its own 🤯 Here’s how you can do it too:

Alvaro Cintas

77,997 görüntüleme • 1 yıl önce

#dream: “i will be making a smp soon, a titan smp. i don’t onow exactly who will be playing on it… it will be happening probably in a couple months” dsmp 2.0??? first one was based on hamilton this one will be based on attack on titan 😭
0:32

#dream: “i will be making a smp soon, a titan smp. i don’t onow exactly who will be playing on it… it will be happening probably in a couple months” dsmp 2.0??? first one was based on hamilton this one will be based on attack on titan 😭

mari ❤️‍🔥 ⁷

22,077 görüntüleme • 1 yıl önce

A good quick summary of my approach to writing. If I can't write something I feel great about in 5-10 minutes, I just throw it away and start over. I don't try to massage the bad into the good, I erase the bad to make way for something better to emerge. For me, throwing it away is faster, and the outcome better, than trying to recover a piece of writing that isn't headed where I want it.
0:46

A good quick summary of my approach to writing. If I can't write something I feel great about in 5-10 minutes, I just throw it away and start over. I don't try to massage the bad into the good, I erase the bad to make way for something better to emerge. For me, throwing it away is faster, and the outcome better, than trying to recover a piece of writing that isn't headed where I want it.

Jason Fried

63,944 görüntüleme • 2 yıl önce

Assassin’s Creed being based in Japan and then NOT using a Japanese male protagonist is stupid. We know exactly why they’re using Yasuke (THE MESSAGE) and it’s annoying. It would be as dumb as having it based in Africa and deciding to use a white male protagonist.
2:47

Assassin’s Creed being based in Japan and then NOT using a Japanese male protagonist is stupid. We know exactly why they’re using Yasuke (THE MESSAGE) and it’s annoying. It would be as dumb as having it based in Africa and deciding to use a white male protagonist.

Kaida 🌊

9,548,413 görüntüleme • 2 yıl önce

So i bought pandan flower just to try to write it using my pengrupak (a balinese knife that specialized only for writing) because I read in hinzler’s journal that pandan flower was used as media for writing love poem. Then my friend found a rare illustration of it from a book.
1:14

So i bought pandan flower just to try to write it using my pengrupak (a balinese knife that specialized only for writing) because I read in hinzler’s journal that pandan flower was used as media for writing love poem. Then my friend found a rare illustration of it from a book.

Tante 🐇🍢

86,492 görüntüleme • 5 ay önce

last time i was barely able to use the sword in BR so this time i made sure to use it A LOT (Golden version soon)
1:17

last time i was barely able to use the sword in BR so this time i made sure to use it A LOT (Golden version soon)

Shany

18,138 görüntüleme • 4 ay önce

"I rely on a $150,000/year medication to survive. If Trump enacts pharmaceutical tariffs, I don’t know if I’ll still be able to afford it. If I can’t get it, I’ll be disabled in months and dead in a few years." – Ruth
1:27

"I rely on a $150,000/year medication to survive. If Trump enacts pharmaceutical tariffs, I don’t know if I’ll still be able to afford it. If I can’t get it, I’ll be disabled in months and dead in a few years." – Ruth

Home of the Brave

12,611 görüntüleme • 11 ay önce

While taxiing back to parking after unloading the freight this evening, I saw a plane on approach ripping it in, and I thought, “man, I bet there’s no PAX on there.” I assumed it to be military. But once I parked and chocked my plane… I saw it was the 10 Tanker! I wish I could’ve shared the approach, it was sick.
0:21

While taxiing back to parking after unloading the freight this evening, I saw a plane on approach ripping it in, and I thought, “man, I bet there’s no PAX on there.” I assumed it to be military. But once I parked and chocked my plane… I saw it was the 10 Tanker! I wish I could’ve shared the approach, it was sick.

Colleen Loustalot ✈️

102,588 görüntüleme • 1 yıl önce

Kimi-K2.5 is the best model at browser use, it's been able to handle complex setups, purchasing stuff, working on Stripe. Scraping, QA, etc.. I love it. I am making it the default model and making a paid experience for Parchi but will keep it OSS.
1:15

Kimi-K2.5 is the best model at browser use, it's been able to handle complex setups, purchasing stuff, working on Stripe. Scraping, QA, etc.. I love it. I am making it the default model and making a paid experience for Parchi but will keep it OSS.

0xSero

24,291 görüntüleme • 4 ay önce

Private-by-default means everything is private unless specified. As it should be. Leo explains Aleo's approach to enabling true privacy in this walkthrough. 🔒
1:40

Private-by-default means everything is private unless specified. As it should be. Leo explains Aleo's approach to enabling true privacy in this walkthrough. 🔒

Aleo

22,654 görüntüleme • 2 yıl önce

Another episode of A Lovelee Snack with Dr Lovelee is up! 🙌🏽🗣️ In this episode I chat with my daughter about the differences to what is perceived as normal and is expected by most to just happen that way” by society when it comes to the schooling system… meanwhile… no two children are the same, even those born to same parents & grow up together. “Don’t be default.. Instead, dare to be different… because default is boring.” ~ Fenzo Million 🌸🩷 🔗 below ⬇️
1:14

Another episode of A Lovelee Snack with Dr Lovelee is up! 🙌🏽🗣️ In this episode I chat with my daughter about the differences to what is perceived as normal and is expected by most to just happen that way” by society when it comes to the schooling system… meanwhile… no two children are the same, even those born to same parents & grow up together. “Don’t be default.. Instead, dare to be different… because default is boring.” ~ Fenzo Million 🌸🩷 🔗 below ⬇️

Dr Lerato • Keynote Speaker

23,487 görüntüleme • 11 ay önce