Speakers
- morioka12 (@scgajge12)
- mokusou (@Mokusou4)
- RyotaK (@ryotkak)
Summary (Linkのみ)
- [大テーマ] 最近の取り組みについて
- Meta Bug Bounty scope
- https://bugbounty.meta.com/scope/
- https://x.com/NahamSec/status/1873779040693231680
- Clone2Leak: Your Git Credentials Belong To Us
- https://flatt.tech/research/posts/clone2leak-your-git-credentials-belong-to-us/
- https://github.com/git/git/security/advisories/GHSA-2hvf-7c8p-28fx
- https://github.com/gogs/gogs
- https://github.com/go-gitea/gitea
- DUMANGキーボード 再配置可能なマグネット付きメカニカルキーボード
- https://akizukidenshi.com/catalog/g/g114963/
- [中テーマ] トレンドの出来事や脆弱性についてなど
- Wiz Research Uncovers Exposed DeepSeek Database Leaking Sensitive Information, Including Chat History
- https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak
- Attacks on Maven proxy repositories
- https://github.blog/security/vulnerability-research/attacks-on-maven-proxy-repositories/
- Stealing HttpOnly cookies with the cookie sandwich technique
- https://portswigger.net/research/stealing-httponly-cookies-with-the-cookie-sandwich-technique
- WorstFit: Unveiling Hidden Transformers in Windows ANSI!
- https://blog.orange.tw/posts/2025-01-worstfit-unveiling-hidden-transformers-in-windows-ansi/
- Pwn2Own Automotive 2025
- https://x.com/thezdi/status/1882694954415439915
- https://x.com/SinSinology
- DoubleClickjacking: A New Era of UI Redressing
- https://www.paulosyibelo.com/2024/12/doubleclickjacking-what.html
- Hacking Subaru: Tracking and Controlling Cars via the STARLINK Admin Panel
- https://samcurry.net/hacking-subaru
- [Q&A] なし
Web Page
- https://bugbountyjppodcast.notion.site/Bug-Bounty-JP-Podcast-8bf1080383a54c4a8848f10bfeb874b3?pvs=4
Survery
- https://forms.gle/wkr2jkc3m9o8NhPk7
BBJP_Podcast で話して欲しいテーマや聞きたいことなどを Google Form で募集しています。
感想も X(Twitter)でハッシュタグ「#BBJP_Podcast」や Google Formでいただけると嬉しいです。