papers-we-love

Papers We Love PWL は、アカデミックなコンピュータサイエンス論文を読み、議論し、学ぶことを中心に構築されたコミュニティです。このリポジトリは、コミュニティが見つけられる最高の論文のいくつかをまとめたディレクトリとして機能し、ウェブ上に散在するドキュメントを集約しています。詳細については、Papers We Love サイトもご覧ください。 ライセンスの都合上、論文自体を常にホストできるとは限りませんホストしている場合は、ディレクトリのREADME内のタイトルの横に 📜 絵文字が表示されますが、その場所へのリンクを提供することはできます。...

be-a-hacker

はじめに ハッキングとは、物事を意図しない方法で使う技術です。例えば、ソフトウェアのトライアル期間がもうすぐ切れる場合、コンピュータの日付を先週に変更することで延長できるかもしれません。それがハッキングです。 ハッキングは非常に広い用語であるため、学ぶための「唯一の正しい方法」はありません。そのため、このガイドの目的は、ロードマップではなく方向性を提供することです。 追加・改善すべきことがあれば、issueを作成してください。 目次 ハッキングの起源 基本原則 仕組みを理解する 共有はクール ロックスターにならない クールなことをやる ロードマップ 始めるにあたって...

how_to_become_a_malware_analyst

マルウェア解析者になるための勉強方法work-in-progress これは@PINKSAWTOOTHの私見で、必ずしもあなたにとって一番良い方法ではないかもしれません。勉強方法の一例として参照してもらえれば幸いです。 これを読む前に、私が尊敬するマルウェア解析者の@hasherezade氏がマルウェア解析の勉強をどのように始めたらよいかをブログにまとめています。 重複する部分があると思いますが、一読することをおすすめします。また、以下のブログは英語のソースが中心なので、可能な限り日本語を中心にしたソースを紹介したいと思います。...

A Bootiful Podcast: José Paumard, Java developer advocate and professor

Hi, Spring fans! In this installment, recorded at Devoxx UK 2025, I talk to the legendary professor of computer science and legend José Paumard about Java, the ecosystem, and more,...

Hiding Prompt Injections in Academic Papers

Academic papers were found to contain hidden instructions to LLMs: It discovered such prompts in 17 articles, whose lead authors are affiliated with 14 institutions including Japan's Waseda University, South Korea's KAIST, China's Peking University and the National University of Singapore, as wel...

CVE-2024-24105

SQL Injection vulnerability in Code-projects Computer Science Time Table System 1.0 allows attackers to run arbitrary code via adminFormvalidation.php...

Sql injection

SQL Injection vulnerability in Code-projects Computer Science Time Table System 1.0 allows attackers to run arbitrary code via adminFormvalidation.php...

Computer Science Time Table System Security Vulnerability

Computer Science Time Table System is a computer science time table system. A security vulnerability exists in Code-projects Computer Science Time Table System version 1.0, which stems from an SQL injection vulnerability. The vulnerability can be exploited to run arbitrary code via...

CVE-2024-24105

SQL Injection vulnerability in Code-projects Computer Science Time Table System 1.0 allows attackers to run arbitrary code via adminFormvalidation.php...

CVE-2024-24105

The CVE-2024-24105 entry concerns Code-projects Computer Science Time Table System 1.0 (adminFormvalidation.php). The issue is an SQL injection vulnerability in that endpoint, enabling attackers to potentially run arbitrary code via that file. CVSS v3.1 metrics indicate Local attack vector, Low a...

Security Analysis of a Thirteenth-Century Venetian Election Protocol

Interesting analysis: This paper discusses the protocol used for electing the Doge of Venice between 1268 and the end of the Republic in 1797. We will show that it has some useful properties that in addition to being interesting in themselves, also suggest that its fundamental design principle is...

FREE Cybersecurity Education Courses

Navigating the nuanced realm of digital defense doesn't need to feel like a herculean task. This section aims to shed light on the intricacies of digital defense and aid you in leveraging freely available Cybersecurity Learning Programs. Deciphering Digital Defense Digital defense, also referred ...

[SECURITY] Fedora 37 Update: openmpi-4.1.4-6.fc37

Open MPI is an open source, freely available implementation of both the MPI-1 and MPI-2 standards, combining technologies and resources from several other projects FT-MPI, LA-MPI, LAM/MPI, and PACX-MPI in order to build the best MPI library available. A completely new MPI-2 compliant...

[SECURITY] Fedora 38 Update: openmpi-4.1.4-9.fc38

Open MPI is an open source, freely available implementation of both the MPI-1 and MPI-2 standards, combining technologies and resources from several other projects FT-MPI, LA-MPI, LAM/MPI, and PACX-MPI in order to build the best MPI library available. A completely new MPI-2 compliant...

topcomputersciencedegrees.com Cross Site Scripting vulnerability OBB-3447496

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

“Oops, I insecurely coded again!”

The call is coming from inside the house It’s no secret that companies need to be vigilant about application security. However, frequently the source of application vulnerabilities may come as a surprise to security teams. While zero-day exploits are a principal focus of vulnerability mitigation...

One Microsoft manager’s entrepreneurial vision for multicloud identity and access

In July 2021, Microsoft acquired CloudKnox, a leader in cloud infrastructure entitlement management CIEM. Over the past two years, I’ve had the pleasure of getting to know the founder and chief executive officer CEO, Balaji Parimi, who is now the Partner General Manager of Permissions Management ...

How a leading Microsoft engineer extends culture to service resiliency

It’s hard to underestimate the impact that people can have on us in our formative years. Huiwen Ru, who spent several years working in identity and access management and is now a Principal Software Engineering Manager on the Singularity team at Microsoft, is a living example of how important...

How a leading Microsoft engineer extends culture to service resiliency

It’s hard to underestimate the impact that people can have on us in our formative years. Huiwen Ru, who spent several years working in identity and access management and is now a Principal Software Engineering Manager on the Singularity team at Microsoft, is a living example of how important...

Security Assessor – Job Description and How to Become

Introduction It requires a ton of work to turn into a QSA and keep your affirmation. In truth, there is an enormous rundown of standards to meet to be thought of. What is a Cyber security control assessor? The Security Control Assessor SCA is a cybersecurity personnel that utilizes security testi...