正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

My challenge is actually based on a bug I found in Apollo Server; in its default configuration, it uses the same blacklist-based approach to prevent CSRF. I was able to bypass it and use it as an XS-Leak in default configs. I’ll be writing a detailed write-up soon about... show more

AmirMohammad Safari

8,306 subscribers

28,275 次观看 • 3 个月前 •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

✨ A dream I had finally came true: I can now chat directly with my sites to build any feature or fix any bug just via Telegram I've been playing with OpenClaw for 3 weeks now and it's great but I was always too scared to run it on any production server And I was right a bit as Marc Köhlbrugge was able to hack it by social engineering and acting as if it was me, and with enough tries it believed him, and was able to modify the server, change SSH keys etc. of course I had it isolated properly on its own VPS and it didn't touch anything sensitive (as it should!) Marc then reported that bug to Peter Steinberger 🦞 who patched it fast But I wanted to try something more basic and simple, and I think maybe more secure: to just connect Claude Code on my server to Telegram which would be hard locked to only messages from me So I installed claude-code-telegram by Richard Atkinson on the server and run it as a system daemon and it works really well The cool thing is that I was already using Telegram for server errors like this: > Photo AI - ❌ Random credits giveaway failed (Attempt 30/30) with an exception: SQLSTATE[HY000]: General error: 5 database is locked So now I can just reply, "Ok fix this", and Claude Code on the server in production will try (and probably succeed) in fixing it In the video below I asked it to make show [🌳 Parks ] on the map by default on load, it did that, then I reloaded the page and it instantly worked One thing it still needs is sending actual messages while it's doing stuff which OpenClaw does really well, it's annoying to just wait while it says "Working..." but that's probably next

✨ A dream I had finally came true: I can now chat directly with my sites to build any feature or fix any bug just via Telegram I've been playing with OpenClaw for 3 weeks now and it's great but I was always too scared to run it on any production server And I was right a bit as Marc Köhlbrugge was able to hack it by social engineering and acting as if it was me, and with enough tries it believed him, and was able to modify the server, change SSH keys etc. of course I had it isolated properly on its own VPS and it didn't touch anything sensitive (as it should!) Marc then reported that bug to Peter Steinberger 🦞 who patched it fast But I wanted to try something more basic and simple, and I think maybe more secure: to just connect Claude Code on my server to Telegram which would be hard locked to only messages from me So I installed claude-code-telegram by Richard Atkinson on the server and run it as a system daemon and it works really well The cool thing is that I was already using Telegram for server errors like this: > Photo AI - ❌ Random credits giveaway failed (Attempt 30/30) with an exception: SQLSTATE[HY000]: General error: 5 database is locked So now I can just reply, "Ok fix this", and Claude Code on the server in production will try (and probably succeed) in fixing it In the video below I asked it to make show [🌳 Parks ] on the map by default on load, it did that, then I reloaded the page and it instantly worked One thing it still needs is sending actual messages while it's doing stuff which OpenClaw does really well, it's annoying to just wait while it says "Working..." but that's probably next

@levelsio

641,898 次观看 • 5 个月前

Asmongold throws it back to some clips of Hasan's implications about Frogan's default judgement and helping out Kaceytron behind closed doors "Why'd the court say it was a default judgement then? I don't know what happened but I know what a default judgement is, u can just look it up" "This is like QAnon, well nobody understands Donald Trump and the patriots plan, just wait 2 weeks and everything is going to be revealed..can u just explain it?" "It's actually crazy how dumb these ppl are, it's so sad"

Asmongold throws it back to some clips of Hasan's implications about Frogan's default judgement and helping out Kaceytron behind closed doors "Why'd the court say it was a default judgement then? I don't know what happened but I know what a default judgement is, u can just look it up" "This is like QAnon, well nobody understands Donald Trump and the patriots plan, just wait 2 weeks and everything is going to be revealed..can u just explain it?" "It's actually crazy how dumb these ppl are, it's so sad"

yeet

31,769 次观看 • 18 天前

“Once national socialism has been cleansed of all its lies and distortions it will be as powerful a force as it was in the 30’s… and I’ll tell you why. It is based on the natural order of things. It is tailor made for European men and women.” -Ernst Zundel

“Once national socialism has been cleansed of all its lies and distortions it will be as powerful a force as it was in the 30’s… and I’ll tell you why. It is based on the natural order of things. It is tailor made for European men and women.” -Ernst Zundel

Uncommon Sense

70,626 次观看 • 10 个月前

Thinking about adding this feature as a default one for my heads because I really like it! Especially on toothy mouths, when the tongue is out, it have a weird pose. This small magnet takes it in a more natural position 👅

Thinking about adding this feature as a default one for my heads because I really like it! Especially on toothy mouths, when the tongue is out, it have a weird pose. This small magnet takes it in a more natural position 👅

StuffedTailsFursuits |STF|

25,419 次观看 • 1 年前

Very very true! When I worked at Loyola Healthcare in Administration, I learned that the billing was based on how much money is available to use up and not what it actually costs or true price. #SchoolSessionEconomics

Very very true! When I worked at Loyola Healthcare in Administration, I learned that the billing was based on how much money is available to use up and not what it actually costs or true price. #SchoolSessionEconomics

®️SheLuv

22,179 次观看 • 8 个月前

The violence I experienced in the past accustomed me to enduring extreme levels of pressure. The good thing is that I was able to see it as a teacher, process it, and put it at the service of the Argentine people to prevent the greatest crisis in history.

The violence I experienced in the past accustomed me to enduring extreme levels of pressure. The good thing is that I was able to see it as a teacher, process it, and put it at the service of the Argentine people to prevent the greatest crisis in history.

Milei in English - Official Account

30,924 次观看 • 17 天前

#ZVICHANAKA - Wrote this one a few nights ago as I was in a dark place and I found solace in knowing that God has my back, he loves me and he always chooses me. “Zvichanaka” means “It will be alright” 200 retweets and I’ll make it an Open Verse Challenge.

#ZVICHANAKA - Wrote this one a few nights ago as I was in a dark place and I found solace in knowing that God has my back, he loves me and he always chooses me. “Zvichanaka” means “It will be alright” 200 retweets and I’ll make it an Open Verse Challenge.

SEWE OUT NOW!🤘🏿🎸

17,377 次观看 • 2 年前

Few months into Web3… and it already changed my story. Same week I secured a Core i7 elitebook setup and an iPhone 16 Plus all from staying consistent, learning, and actually putting in the work in this space. This is just the beginning. I’ll be sharing more updates, insights, and opportunities as I grow. If you’re serious about Web3, tap in I’ll be dropping everything on my Telegram channel soon.

Few months into Web3… and it already changed my story. Same week I secured a Core i7 elitebook setup and an iPhone 16 Plus all from staying consistent, learning, and actually putting in the work in this space. This is just the beginning. I’ll be sharing more updates, insights, and opportunities as I grow. If you’re serious about Web3, tap in I’ll be dropping everything on my Telegram channel soon.

Kappy

13,505 次观看 • 4 个月前

#dream: “i will be making a smp soon, a titan smp. i don’t onow exactly who will be playing on it… it will be happening probably in a couple months” dsmp 2.0??? first one was based on hamilton this one will be based on attack on titan 😭

#dream: “i will be making a smp soon, a titan smp. i don’t onow exactly who will be playing on it… it will be happening probably in a couple months” dsmp 2.0??? first one was based on hamilton this one will be based on attack on titan 😭

mari ❤️‍🔥 ⁷

22,077 次观看 • 1 年前

I just created my own web AI agent. I can give it a topic or a news URL and it will take over my computer to look it up, summarize it, and draft a post about it in my own writing style. All on its own 🤯 Here’s how you can do it too:

I just created my own web AI agent. I can give it a topic or a news URL and it will take over my computer to look it up, summarize it, and draft a post about it in my own writing style. All on its own 🤯 Here’s how you can do it too:

Alvaro Cintas

77,997 次观看 • 1 年前

A good quick summary of my approach to writing. If I can't write something I feel great about in 5-10 minutes, I just throw it away and start over. I don't try to massage the bad into the good, I erase the bad to make way for something better to emerge. For me, throwing it away is faster, and the outcome better, than trying to recover a piece of writing that isn't headed where I want it.

A good quick summary of my approach to writing. If I can't write something I feel great about in 5-10 minutes, I just throw it away and start over. I don't try to massage the bad into the good, I erase the bad to make way for something better to emerge. For me, throwing it away is faster, and the outcome better, than trying to recover a piece of writing that isn't headed where I want it.

Jason Fried

63,944 次观看 • 2 年前

Assassin’s Creed being based in Japan and then NOT using a Japanese male protagonist is stupid. We know exactly why they’re using Yasuke (THE MESSAGE) and it’s annoying. It would be as dumb as having it based in Africa and deciding to use a white male protagonist.

Assassin’s Creed being based in Japan and then NOT using a Japanese male protagonist is stupid. We know exactly why they’re using Yasuke (THE MESSAGE) and it’s annoying. It would be as dumb as having it based in Africa and deciding to use a white male protagonist.

Kaida 🌊

9,571,946 次观看 • 2 年前

So i bought pandan flower just to try to write it using my pengrupak (a balinese knife that specialized only for writing) because I read in hinzler’s journal that pandan flower was used as media for writing love poem. Then my friend found a rare illustration of it from a book.

So i bought pandan flower just to try to write it using my pengrupak (a balinese knife that specialized only for writing) because I read in hinzler’s journal that pandan flower was used as media for writing love poem. Then my friend found a rare illustration of it from a book.

Tante 🐇🍢

86,492 次观看 • 6 个月前

"I rely on a $150,000/year medication to survive. If Trump enacts pharmaceutical tariffs, I don’t know if I’ll still be able to afford it. If I can’t get it, I’ll be disabled in months and dead in a few years." – Ruth

"I rely on a $150,000/year medication to survive. If Trump enacts pharmaceutical tariffs, I don’t know if I’ll still be able to afford it. If I can’t get it, I’ll be disabled in months and dead in a few years." – Ruth

Home of the Brave

12,611 次观看 • 1 年前

Tommy gives an awesome answer about winning a major. "It might happen for me, it might not ... I don't want to think about it as, if it doesn't happen, oh, my God, like, all those hours I spent chasing my dreams, what was it for kind of thing." "Whatever happens in my career I will be able to look back and I gave it everything and I had an amazing time doing it."

Tommy gives an awesome answer about winning a major. "It might happen for me, it might not ... I don't want to think about it as, if it doesn't happen, oh, my God, like, all those hours I spent chasing my dreams, what was it for kind of thing." "Whatever happens in my career I will be able to look back and I gave it everything and I had an amazing time doing it."

Golf Channel

356,637 次观看 • 6 天前

last time i was barely able to use the sword in BR so this time i made sure to use it A LOT (Golden version soon)

last time i was barely able to use the sword in BR so this time i made sure to use it A LOT (Golden version soon)

Shany

20,211 次观看 • 5 个月前

While taxiing back to parking after unloading the freight this evening, I saw a plane on approach ripping it in, and I thought, “man, I bet there’s no PAX on there.” I assumed it to be military. But once I parked and chocked my plane… I saw it was the 10 Tanker! I wish I could’ve shared the approach, it was sick.

While taxiing back to parking after unloading the freight this evening, I saw a plane on approach ripping it in, and I thought, “man, I bet there’s no PAX on there.” I assumed it to be military. But once I parked and chocked my plane… I saw it was the 10 Tanker! I wish I could’ve shared the approach, it was sick.

Colleen Loustalot ✈️

102,589 次观看 • 1 年前