typokign

Zoom Sucks

• Zoom abuses the installer flow on MacOS to bypass permissions dialogs (source)
• Zoom sends identifying device info to Facebook, even when users don't have a Facebook account (source) (fixed)
• A bug in Zoom sent identifying information (including email addresses and profile pictures) of thousands of users to strangers (source)
• Zoom claims that meetings are end-to-end encrypted in their white paper and marketing materials, but meetings are only encrypted in transit, and are available in plaintext to Zoom servers and employees. (source)
• zoomAutenticationTool can be used to escalat

lizthegrey

default['sshd']['sshd_config']['AuthenticationMethods'] = 'publickey,keyboard-interactive:pam'
default['sshd']['sshd_config']['ChallengeResponseAuthentication'] = 'yes'
default['sshd']['sshd_config']['PasswordAuthentication'] = 'no'

dzt

Node.js Cheat Sheet

Setting up Passport.js (REST API w/token auth) Example

• app.js

  var express = require('express'),
    app = express(),
    port = process.env.PORT || 3000,
    mongoose = require('mongoose'),

abachman

# proxying through apache to a local rails instance, http & https

# apache *.conf file
<VirtualHost *:80>
  ServerName psl.localhost
  ServerAlias cms.psl.localhost
  ServerAlias *.psl.localhost

  ProxyPass / http://localhost:3000/
  ProxyPassReverse / http://localhost:3000/