Загрузка видео...

Не удалось загрузить видео

На главную

My challenge is actually based on a bug I found in Apollo Server; in its default configuration, it uses the same blacklist-based approach to prevent CSRF. I was able to bypass it and use it as an XS-Leak in default configs. I’ll be writing a detailed write-up soon about...

AmirMSafari's profile picture

AmirMohammad Safari

8,306 subscribers

28,275 просмотров • 3 месяцев назад •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 0

Нет доступных комментариев

Здесь появятся комментарии из оригинального поста

Похожие видео

✨ A dream I had finally came true: I can now chat directly with my sites to build any feature or fix any bug just via Telegram I've been playing with OpenClaw for 3 weeks now and it's great but I was always too scared to run it on any production server And I was right a bit as Marc Köhlbrugge was able to hack it by social engineering and acting as if it was me, and with enough tries it believed him, and was able to modify the server, change SSH keys etc. of course I had it isolated properly on its own VPS and it didn't touch anything sensitive (as it should!) Marc then reported that bug to Peter Steinberger 🦞 who patched it fast But I wanted to try something more basic and simple, and I think maybe more secure: to just connect Claude Code on my server to Telegram which would be hard locked to only messages from me So I installed claude-code-telegram by Richard Atkinson on the server and run it as a system daemon and it works really well The cool thing is that I was already using Telegram for server errors like this: > Photo AI - ❌ Random credits giveaway failed (Attempt 30/30) with an exception: SQLSTATE[HY000]: General error: 5 database is locked So now I can just reply, "Ok fix this", and Claude Code on the server in production will try (and probably succeed) in fixing it In the video below I asked it to make show [🌳 Parks ] on the map by default on load, it did that, then I reloaded the page and it instantly worked One thing it still needs is sending actual messages while it's doing stuff which OpenClaw does really well, it's annoying to just wait while it says "Working..." but that's probably next
1:30

✨ A dream I had finally came true: I can now chat directly with my sites to build any feature or fix any bug just via Telegram I've been playing with OpenClaw for 3 weeks now and it's great but I was always too scared to run it on any production server And I was right a bit as Marc Köhlbrugge was able to hack it by social engineering and acting as if it was me, and with enough tries it believed him, and was able to modify the server, change SSH keys etc. of course I had it isolated properly on its own VPS and it didn't touch anything sensitive (as it should!) Marc then reported that bug to Peter Steinberger 🦞 who patched it fast But I wanted to try something more basic and simple, and I think maybe more secure: to just connect Claude Code on my server to Telegram which would be hard locked to only messages from me So I installed claude-code-telegram by Richard Atkinson on the server and run it as a system daemon and it works really well The cool thing is that I was already using Telegram for server errors like this: > Photo AI - ❌ Random credits giveaway failed (Attempt 30/30) with an exception: SQLSTATE[HY000]: General error: 5 database is locked So now I can just reply, "Ok fix this", and Claude Code on the server in production will try (and probably succeed) in fixing it In the video below I asked it to make show [🌳 Parks ] on the map by default on load, it did that, then I reloaded the page and it instantly worked One thing it still needs is sending actual messages while it's doing stuff which OpenClaw does really well, it's annoying to just wait while it says "Working..." but that's probably next

@levelsio

641,661 просмотров • 4 месяцев назад

Asmongold throws it back to some clips of Hasan's implications about Frogan's default judgement and helping out Kaceytron behind closed doors "Why'd the court say it was a default judgement then? I don't know what happened but I know what a default judgement is, u can just look it up" "This is like QAnon, well nobody understands Donald Trump and the patriots plan, just wait 2 weeks and everything is going to be revealed..can u just explain it?" "It's actually crazy how dumb these ppl are, it's so sad"
3:05

Asmongold throws it back to some clips of Hasan's implications about Frogan's default judgement and helping out Kaceytron behind closed doors "Why'd the court say it was a default judgement then? I don't know what happened but I know what a default judgement is, u can just look it up" "This is like QAnon, well nobody understands Donald Trump and the patriots plan, just wait 2 weeks and everything is going to be revealed..can u just explain it?" "It's actually crazy how dumb these ppl are, it's so sad"

yeet

31,769 просмотров • 12 дней назад

“Once national socialism has been cleansed of all its lies and distortions it will be as powerful a force as it was in the 30’s… and I’ll tell you why. It is based on the natural order of things. It is tailor made for European men and women.” -Ernst Zundel
3:33

“Once national socialism has been cleansed of all its lies and distortions it will be as powerful a force as it was in the 30’s… and I’ll tell you why. It is based on the natural order of things. It is tailor made for European men and women.” -Ernst Zundel

Uncommon Sense

70,626 просмотров • 10 месяцев назад

Thinking about adding this feature as a default one for my heads because I really like it! Especially on toothy mouths, when the tongue is out, it have a weird pose. This small magnet takes it in a more natural position 👅
0:31

Thinking about adding this feature as a default one for my heads because I really like it! Especially on toothy mouths, when the tongue is out, it have a weird pose. This small magnet takes it in a more natural position 👅

StuffedTailsFursuits |STF|

25,419 просмотров • 1 год назад

Very very true! When I worked at Loyola Healthcare in Administration, I learned that the billing was based on how much money is available to use up and not what it actually costs or true price. #SchoolSessionEconomics
1:41

Very very true! When I worked at Loyola Healthcare in Administration, I learned that the billing was based on how much money is available to use up and not what it actually costs or true price. #SchoolSessionEconomics

®️SheLuv

22,179 просмотров • 7 месяцев назад

The violence I experienced in the past accustomed me to enduring extreme levels of pressure. The good thing is that I was able to see it as a teacher, process it, and put it at the service of the Argentine people to prevent the greatest crisis in history.
1:18

The violence I experienced in the past accustomed me to enduring extreme levels of pressure. The good thing is that I was able to see it as a teacher, process it, and put it at the service of the Argentine people to prevent the greatest crisis in history.

Milei in English - Official Account

30,231 просмотров • 11 дней назад

#ZVICHANAKA - Wrote this one a few nights ago as I was in a dark place and I found solace in knowing that God has my back, he loves me and he always chooses me. “Zvichanaka” means “It will be alright” 200 retweets and I’ll make it an Open Verse Challenge.
1:06

#ZVICHANAKA - Wrote this one a few nights ago as I was in a dark place and I found solace in knowing that God has my back, he loves me and he always chooses me. “Zvichanaka” means “It will be alright” 200 retweets and I’ll make it an Open Verse Challenge.

SEWE OUT NOW!🤘🏿🎸

17,377 просмотров • 2 лет назад

Few months into Web3… and it already changed my story. Same week I secured a Core i7 elitebook setup and an iPhone 16 Plus all from staying consistent, learning, and actually putting in the work in this space. This is just the beginning. I’ll be sharing more updates, insights, and opportunities as I grow. If you’re serious about Web3, tap in I’ll be dropping everything on my Telegram channel soon.
0:40

Few months into Web3… and it already changed my story. Same week I secured a Core i7 elitebook setup and an iPhone 16 Plus all from staying consistent, learning, and actually putting in the work in this space. This is just the beginning. I’ll be sharing more updates, insights, and opportunities as I grow. If you’re serious about Web3, tap in I’ll be dropping everything on my Telegram channel soon.

Kappy

13,505 просмотров • 3 месяцев назад

#dream: “i will be making a smp soon, a titan smp. i don’t onow exactly who will be playing on it… it will be happening probably in a couple months” dsmp 2.0??? first one was based on hamilton this one will be based on attack on titan 😭
0:32

#dream: “i will be making a smp soon, a titan smp. i don’t onow exactly who will be playing on it… it will be happening probably in a couple months” dsmp 2.0??? first one was based on hamilton this one will be based on attack on titan 😭

mari ❤️‍🔥 ⁷

22,077 просмотров • 1 год назад

I just created my own web AI agent. I can give it a topic or a news URL and it will take over my computer to look it up, summarize it, and draft a post about it in my own writing style. All on its own 🤯 Here’s how you can do it too:
0:21

I just created my own web AI agent. I can give it a topic or a news URL and it will take over my computer to look it up, summarize it, and draft a post about it in my own writing style. All on its own 🤯 Here’s how you can do it too:

Alvaro Cintas

77,997 просмотров • 1 год назад

A good quick summary of my approach to writing. If I can't write something I feel great about in 5-10 minutes, I just throw it away and start over. I don't try to massage the bad into the good, I erase the bad to make way for something better to emerge. For me, throwing it away is faster, and the outcome better, than trying to recover a piece of writing that isn't headed where I want it.
0:46

A good quick summary of my approach to writing. If I can't write something I feel great about in 5-10 minutes, I just throw it away and start over. I don't try to massage the bad into the good, I erase the bad to make way for something better to emerge. For me, throwing it away is faster, and the outcome better, than trying to recover a piece of writing that isn't headed where I want it.

Jason Fried

63,944 просмотров • 2 лет назад

Assassin’s Creed being based in Japan and then NOT using a Japanese male protagonist is stupid. We know exactly why they’re using Yasuke (THE MESSAGE) and it’s annoying. It would be as dumb as having it based in Africa and deciding to use a white male protagonist.
2:47

Assassin’s Creed being based in Japan and then NOT using a Japanese male protagonist is stupid. We know exactly why they’re using Yasuke (THE MESSAGE) and it’s annoying. It would be as dumb as having it based in Africa and deciding to use a white male protagonist.

Kaida 🌊

9,571,839 просмотров • 2 лет назад

So i bought pandan flower just to try to write it using my pengrupak (a balinese knife that specialized only for writing) because I read in hinzler’s journal that pandan flower was used as media for writing love poem. Then my friend found a rare illustration of it from a book.
1:14

So i bought pandan flower just to try to write it using my pengrupak (a balinese knife that specialized only for writing) because I read in hinzler’s journal that pandan flower was used as media for writing love poem. Then my friend found a rare illustration of it from a book.

Tante 🐇🍢

86,492 просмотров • 6 месяцев назад

"I rely on a $150,000/year medication to survive. If Trump enacts pharmaceutical tariffs, I don’t know if I’ll still be able to afford it. If I can’t get it, I’ll be disabled in months and dead in a few years." – Ruth
1:27

"I rely on a $150,000/year medication to survive. If Trump enacts pharmaceutical tariffs, I don’t know if I’ll still be able to afford it. If I can’t get it, I’ll be disabled in months and dead in a few years." – Ruth

Home of the Brave

12,611 просмотров • 1 год назад

last time i was barely able to use the sword in BR so this time i made sure to use it A LOT (Golden version soon)
1:17

last time i was barely able to use the sword in BR so this time i made sure to use it A LOT (Golden version soon)

Shany

20,211 просмотров • 4 месяцев назад

While taxiing back to parking after unloading the freight this evening, I saw a plane on approach ripping it in, and I thought, “man, I bet there’s no PAX on there.” I assumed it to be military. But once I parked and chocked my plane… I saw it was the 10 Tanker! I wish I could’ve shared the approach, it was sick.
0:21

While taxiing back to parking after unloading the freight this evening, I saw a plane on approach ripping it in, and I thought, “man, I bet there’s no PAX on there.” I assumed it to be military. But once I parked and chocked my plane… I saw it was the 10 Tanker! I wish I could’ve shared the approach, it was sick.

Colleen Loustalot ✈️

102,589 просмотров • 1 год назад

Kimi-K2.5 is the best model at browser use, it's been able to handle complex setups, purchasing stuff, working on Stripe. Scraping, QA, etc.. I love it. I am making it the default model and making a paid experience for Parchi but will keep it OSS.
1:15

Kimi-K2.5 is the best model at browser use, it's been able to handle complex setups, purchasing stuff, working on Stripe. Scraping, QA, etc.. I love it. I am making it the default model and making a paid experience for Parchi but will keep it OSS.

0xSero

24,291 просмотров • 4 месяцев назад