I use my blog to mainly write about stuff I do that I really don't want to forget about, like interesting vulnerabilities I found or projects I want to share, reach is ~30k visits/month (still no idea how since I think it's kinda niche) but so far is working.
I consider it also a good way to force myself to keep thoughts in order and to do a recap on the activities I do that most of the time are very chaotic.
I would probably consider integrating messages also to receive feedbacks.
I use hugo with the backend hosted on GitHub Pages, so far is a pretty solid setup that requires minimal effort since I just wrote an action to build pages every time a commit is done on the main branch
Exploring how AION’s old housing system, introduced over 10 years ago, left the client vulnerable to remote code execution through Lua scripting. Even though official servers removed the feature years ago, it’s still alive (and exploitable) in legacy versions.
Write-up: https://appsec.space/posts/aion-housing-exploit/
I talk about application security and other stuff (common pitfalls from working on the field, career advices etc). I have yet to migrate the content from my old blog, but a new post will be released soon™.
- Don't disable Secure Boot, Windows Defender and Windows Firewall
- If you really think updates are annoying shift the monthly updates by one month BUT always confirm the security updates
- If you have a PRO license give a try to VBS [0] and Controlled Folder access [1] (spoiler: this will be a little annoying at the beginning but will became almost perfect with a well configured whitelist)
- Also from the next (major) patch you should use Windows Sandbox [2] to run untrusted software(still a PRO feature)
I consider it also a good way to force myself to keep thoughts in order and to do a recap on the activities I do that most of the time are very chaotic.
I would probably consider integrating messages also to receive feedbacks.
I use hugo with the backend hosted on GitHub Pages, so far is a pretty solid setup that requires minimal effort since I just wrote an action to build pages every time a commit is done on the main branch
In case you are interested: https://appsec.space