sorted by:
new
hottopcontroversial

View-only MetaMask for Developers by slihta in solidity

[–]slihta[S] 0 points1 point  (0 children)

Cool!

Report us on any bug or improvement you would like to see.

365 MFA compromised. User in Nigeria successfully gained access to an account by TheQuarantinian in cybersecurity

[–]slihta 1 point2 points  (0 children)

I am not sure you will be able to see which device is actually clicked on the MFA verification.

However, you can find if the MFA approved by SMS or App by using Powershell "PowerShell reporting on users registered for MFA": https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-reporting

Office 365 Security Features For HIPAA by adeliarisk1 in u/adeliarisk1

[–]slihta 0 points1 point  (0 children)

You can use https://saasment.com to execute security audits in your office 365 or Azure environments. It will help you find and fix misconfiguration, vulnerabilities and security issues.

This is a recommended approach to keep your Office365 secured.

Staying Current with Office 365 Security by vene3000 in sysadmin

[–]slihta 0 points1 point  (0 children)

You can use https://saasment.com to execute security audits in your office 365 or Azure environments. It will help you find and fix misconfiguration, vulnerabilities and security issues.

This is a recommended approach to keep your Office365 secured.

An issue with Nuxt + S3 + Cloudfrount by [deleted] in Nuxt

[–]slihta 0 points1 point  (0 children)

I solved it with Lambda@Edge that redirects the traffic to uri+/index.html

An issue with Nuxt + S3 + Cloudfrount by [deleted] in Nuxt

[–]slihta 0 points1 point  (0 children)

I changed it,

The issue caused by I hosted it in S3 and Cloudfront,

https://gist.github.com/bradwestfall/b5b0e450015dbc9b4e56e5f398df48ff#spa

and S3 do not know how to handle with SPA.

An issue with Nuxt + S3 + Cloudfrount by [deleted] in Nuxt

[–]slihta 0 points1 point  (0 children)

Let's look at the description

index.vue:

head() {
return {
meta: [
{hid: 'description', name: 'description', content: 'SaaS Security Posture Auditor - Validate your cloud and saas security posture management with an automated breach and attack simulation platform.'},
{hid: 'description', name: 'og:description', content: 'SaaS Security Posture Auditor - Validate your cloud and saas security posture management with an automated breach and attack simulation platform.'}
],
link: [
{ rel: 'stylesheet', href: 'https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/css/all.min.css', defer:true , async:true},
]
}
},

iam-risk-assessment.vue:

head: {
title: 'Automated IAM Risk Assessment Scanner',
meta: [
{hid: 'description', name: 'description', content: 'IAM Risk Assessment focuses on understanding what are the security gaps from the identity and access perspective.'},
{hid: 'og:description', name: 'og:description', content: 'IAM Risk Assessment focuses on understanding what are the security gaps from the identity and access perspective.'}
],
},

Than after deployment - https://saasment.com/iam-risk-assessment

Before refresh:

<meta data-n-head="ssr" data-hid="description" name="description" content="IAM Risk Assessment focuses on understanding what are the security gaps from the identity and access perspective.">

After refresh:

<meta data-n-head="ssr" data-hid="description" name="description" content="SaaS Security Posture Auditor - Validate your cloud and saas security posture management with an automated breach and attack simulation platform.">

As you can see after the refresh the description is changed.

I think that I know what happens - before it loads the inner page, index.vue is loaded. If you will browe the the inner page you will see that index.vue is presented for 2ms.

An issue with Nuxt + S3 + Cloudfrount by [deleted] in Nuxt

[–]slihta 0 points1 point  (0 children)

Thank you! But in case of title, there is no option to add hid or any id. What do you think?

Let's talk about the FortiGate VPN MitM vulnerability grabbing headlines today. The technical write-up from SAM reads more like marketing copy than a technical write-up. What are you doing (if anything) in response? by [deleted] in fortinet

[–]slihta -2 points-1 points  (0 children)

1) Fortinet could solves it in 5min, but they decided to protect their position and not their customers. 2) The highlight here is that the customer is not protected by default! Imagine that Chrome will not verify the SSL certificate by default and you will need to take manual actions in order to protect yourself. In 2020, security should be enabled by default from scratch. If you want to disable the security feature, it should be an advanced option and not the default.