Andrew Savinykh AndrewSav

Table of Contents

Account Rewards info

SKS Keyserver Network Under Attack

This work is released under a Creative Commons Attribution-NoDerivatives 4.0 International License.

Terminological Note

"OpenPGP" refers to the OpenPGP protocol, in much the same way that HTML refers to the protocol that specifies how to write a web page. "GnuPG", "SequoiaPGP", "OpenPGP.js", and others are implementations of the OpenPGP protocol in the same way that Mozilla Firefox, Google Chromium, and Microsoft Edge refer to software packages that process HTML data.

Who am I?

Steps to install 7zip on Linux » Ubuntu and Fedora or CentOS / RHEL

Ubuntu

cat /etc/*release
sudo apt-get update -yqq
sudo apt-get install -yqq p7zip-full

The following attack will display a "you've been signed out" page for GMail, and attempt to steal your account credentials.

DO NOT PUT ANY ACCOUNT CREDENTIALS INTO ANY TABS CREATED AFTER VISITING THESE LINKS :)

I received an email in my GMail inbox with a fake attachment image, styled to look like the real GMail attachment UI:

This linked to a page that ended up displaying a fake "you've been signed out" link, via the data:text/html... URL feature of Chrome:

Note for community:

A. IdentityServer3 docs, samples and source code use OIDC & OAuth2 terms interchangeably to refer to same thing in many areas. I think that's make sense because OIDC introduced as complement & extension for OAuth2.

B. IdentityServer3, STS, OP, OIDC server, OAuth2 server, CSP, IDP and others: means same thing (software that provide/issue tokens to clients) as explained in [Terminology] (http://identityserver.github.io/Documentation/docs/overview/terminology.html).

C. Grants and flows mean same thing, grant was the common term in OAuth2 specs and flow is the common term in OIDC specs.

D. This document will not focus on custom flow/grant.

E. [Important] Choosing wrong flow leads to security threat.

	using Microsoft.AspNetCore.Mvc.ActionConstraints;
	using Microsoft.AspNetCore.Mvc.ModelBinding;
	using MoreLinq;
	using System;
	using System.Linq;

	namespace Api.Constraints
	{
	/// <summary>
	/// Use amount of matching query parameters to find the right action.

	$Process = @(Get-CimInstance Win32_Process -Filter "Name='powershell.exe' AND CommandLine LIKE '%mordheim.ps1%'")
	if ($Process.Count -gt 1) {
	exit
	}

	Add-Type -Name Window -Namespace Console -MemberDefinition '
	[DllImport("Kernel32.dll")]
	public static extern IntPtr GetConsoleWindow();

	[DllImport("user32.dll")]

	#!/usr/bin/env bash
	set -e

	# Dreamhost Mosh Install Script
	# Jay Williams (https://gist.github.com/jaywilliams/c9ffab789b3f622abc932dd4cfaaeef5)

	# Based on the gracious work of:
	# Paul R Alexander (https://gist.github.com/palexander/2975305)
	# Sami Samhuri https://gist.github.com/samsonjs/4076746

	#!/usr/bin/env python3

	"""
	Python 3 code that can decompress (to a .gvas file), or recompress (to a .savegame file)
	the UE4 savegame file that Astroneer uses.

	Though I wrote this for tinkering with Astroneer games saves, it's probably
	generic to the Unreal Engine 4 compressed saved game format.

	Examples:

	using System;
	using System.Runtime.InteropServices;
	using Microsoft.Win32.SafeHandles;
	using System.IO;

	namespace heri16
	{

	/// <summary>
	/// Static class to help Start a GUI/Console Windows Process as any user that is logged-in to an Interactive Terminal-Session (e.g. RDP).