I think they’re lacking explanation of what the data means.
This can be very nuanced, and dependent on your goals.
For example, in the context of fingerprinting, sometimes it’s better to provide fake data instead of no data, because that itself can be a unique characteristic.
Weekly thread for any and all career, learning and general guidance questions. Thinking of taking a training or going for a cert? Wondering how to level up your career? Wondering what NOT to do? Got other questions? This is the time and place to ask!
npm search RCE? - Escape Sequence Injection (blog.solidsnail.com)
It’s not a Feature, It’s a Vulnerability (blog.solidsnail.com)
cross-posted from: infosec.pub/post/5707149...
From Terminal Output to Arbitrary Remote Code Execution (blog.solidsnail.com)
cross-posted from: infosec.pub/post/2466014...
Which browsers are best for privacy? (privacytests.org)
Mentorship Monday - Discussions for career and learning!
Weekly thread for any and all career, learning and general guidance questions. Thinking of taking a training or going for a cert? Wondering how to level up your career? Wondering what NOT to do? Got other questions? This is the time and place to ask!