yes, no, maybe, i don't know. can you repeat the question?
Bitola, Macedonia
Joined June 2010
- Tweets220
- Following447
- Followers187
- Likes599
Viktor Chuchurski retweeted
↓ A Race to the Bottom
How inadequate concurrency control in databases can lead to race condition bugs
@owasp AppSec Lisbon talk by @doyensec's @viktorot
🛠️ Vulnerable Go app
github.com/doyensec/db-race-…
📖 Slides
doyensec.com/resources/Globa…
+Semgrep rules
blog.doyensec.com/2024/07/11…
Viktor Chuchurski retweeted
We're proud our testing helps ensure the security of @ThinkstCanary's OSS Canary Tokens! As part of their transparency efforts, you can read the results of our latest round of testing here:
doyensec.com/resources/Doyen…
#doyensec #appsec #security #thinkst
Viktor Chuchurski retweeted
Let's welcome @viktorot in our lineup with his talk "A Race to the Bottom - Database Transactions Undermining Your AppSec". Congrats!
Viktor Chuchurski retweeted
💳 The case for improving crypto wallet security
Research from @viktorot on phishing scams targeting crypto wallets and how their security can be improved
🧰 Check their PoC, a service to collect information on ETH Dapps:
github.com/doyensec/wallet-i…
blog.doyensec.com//2023/03/2…
Viktor Chuchurski retweeted
New advisory! @viktorot provides details on a CSRF protection bypass he discovered in Sveltekit. Ensure your apps are up-to-date.
#doyensec #appsec #javascript #DevSecOps
doyensec.com/resources/Doyen…
Viktor Chuchurski retweeted
📚 tl;dr sec 163
With great work from:
@nicolas_frankel, @raesene, @Doyensec, @viktorot, @includesecurity, @8x5clPW2, @sethsec, @luketucker, @emtunc, @mihai, @Tailscale, @blastbots, @simonw, @mikepsecuritee, @DanielMiessler
and more!
tldrsec.com/blog/tldr-sec-16…
![[tl;dr sec] #163 - Rebuilding Detection and IR at LinkedIn, CVEs and Misaligned Incentives, 2022 in...](https://pbs.twimg.com/card_img/2116562353227534337/oBJ_pmmZ?format=jpg&name=800x419)
Viktor Chuchurski retweeted
Announcing the release of `safeurl` - a library to help #golang devs "Build with Security"! This module provides tested & versatile protection against Server Side Request Forgery (SSRF)! Hurry and check it out!
#doyensec #AppSec
blog.doyensec.com/2022/12/13…
github.com/doyensec/safeurl
Viktor Chuchurski retweeted
The latest coordinated disclosure from our researchers (Norbert Szetei @73696e65 & Viktor Chuchurski @viktorot) details a SQLi and DoS via Prototype Pollution in #TypeORM! Time to update!
More details: doyensec.com/research.html#8…
#doyensec #TypeScript #Electron #NodeJS #appsec
Viktor Chuchurski retweeted
To lighten up your #ElectionDay, I’m giving away some phones. 5 random followers who RT this in 24hrs will win a Google Pixel. Good luck!
Viktor Chuchurski retweeted
New ActorDB release is available for download: actordb.com/downloads.html
Changelog: github.com/biokoda/actordb/b…
#sql #newsql #database #erlang
