2026-10-25T18:31:13Z https://nostr.now Dr. Christopher Kunz https://nostr.now/npub1sttn3l2n40lkk5eyt2czgeqnsct9ql6ltau6nmcqq4s8422ahcjqkjddpm https://assets.chaos.social/accounts/avatars/109/285/603/109/052/081/original/6edfda60fa1061a9.jpg https://assets.chaos.social/accounts/avatars/109/285/603/109/052/081/original/6edfda60fa1061a9.jpg https://nostr.now/nevent1qqsq25zemda53hw0rxyxleek75ulewwsv0tx8lde4vcr9ew60tr62ggzyzpdww8a2w4l766ny3dtqfryzwrpv5rlta0hn200qqzkq74ftklzgrfetk9 OK, this is an innovative directory traversal vuln:<br/>GET /download/resources/jira.webresources:color-picker-popup/images/..::..::..::..::..::WEB-INF::web.xml HTTP/1.1<br/><br/>This is from CVE-2026-21589, <a href="https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/">https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/</a> <br/><br/>The &#34;::&#34; gets replaced with &#34;/&#34; by some weird sanitation method, read more about it in the writeup.<br/><br/>Tagging @nynbinary for humorous memeing. 2026-10-07T06:28:40Z https://nostr.now/nevent1qqsg3fsm53y7fg0eakc6kdshqs6q7mjgqjk7e7hp2dqw68ytsvnzz8qzyzpdww8a2w4l766ny3dtqfryzwrpv5rlta0hn200qqzkq74ftklzg8ua7q3 In reply to <a href='/nevent1qqsp2ztax8zm5dkreqma8q8stglrh6favw53ee9kuhvqsqqm7ng3ewsxp2g4g'>nevent1q…2g4g</a><br/>_________________________<br/><br/>I&#39;m afraid I&#39;m not getting the point about that &#34;different light&#34;. The article is a somewhat technical analysis of this specific type of fingerprinting, with the general warning that intrusive fingerprinting is used (or attempted to use) by many companies. 2026-08-26T10:34:05Z https://nostr.now/nevent1qqsquavksj9r2q9j6v79vqg35t9qe4xv09q8ffnn5wmlw592w4tyn7szyzpdww8a2w4l766ny3dtqfryzwrpv5rlta0hn200qqzkq74ftklzgj5dczf In reply to <a href='/nevent1qqstl3eru9k7tssehs7zer36suvsz3wemyyc5p44q52s4k6gjw05kjqc55wch'>nevent1q…5wch</a><br/>_________________________<br/><br/>I have questions. Especially one: Which is the PAN-OS release preferred by the folks at <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub13vn8wz94qmpd8m4324llvtaqeg9xyl22qt45pf9c5vxdeajlnttqhjf849" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>watchTowr</span> (<span class="italic">npub13vn…f849</span>)</a></span> Labs? 2026-07-09T14:30:37Z https://nostr.now/nevent1qqs9cx7lfs08dsprk3ewfg7nuc8ld98q8mhgmdrqx8vuyxgfq6hp8pszyzpdww8a2w4l766ny3dtqfryzwrpv5rlta0hn200qqzkq74ftklzgnpvt0x In reply to <a href='/nevent1qqste7d8jxrxnhwfpernuhjkanw2fmmyff72efkugm5zrsfqcarev2qqjszfd'>nevent1q…szfd</a><br/>_________________________<br/><br/>Wait, we have preferred releases now? Like, as in &#34;beta&#34;, &#34;latest&#34;, &#34;lts&#34;, &#34;preferred&#34;, &#34;notso-hotso&#34;? 2026-07-09T14:24:01Z https://nostr.now/nevent1qqsqtga4rgakhyat9ykux468jtut7xlma4s72djd4t57lqkdssv8g3szyzpdww8a2w4l766ny3dtqfryzwrpv5rlta0hn200qqzkq74ftklzg94gc9e May 11, 2026: The Red Sun still prevails. <br/><br/>However, I noticed something odd. Either this is purely coincidence, or the exploit has less reliability now (?). On a freshly booted system, it works 100%, but after a couple minutes of runtime, it seems that it doesn&#39;t always win the race condition (or it takes longer than the usual ~10 seconds). 2026-05-11T06:23:51Z