internet | Marcin Lis

02/19/2023marcin

Critical vulnerability in Fortinet products

https://www.fortiguard.com/psirt/FG-IR-22-300

Summary

An external control of file name or path vulnerability [CWE-73] in FortiNAC webserver may allow an unauthenticated attacker to perform arbitrary write on the system.

Affected Products

FortiNAC version 9.4.0
FortiNAC version 9.2.0 through 9.2.5
FortiNAC version 9.1.0 through 9.1.7
FortiNAC 8.8 all versions
FortiNAC 8.7 all versions
FortiNAC 8.6 all versions
FortiNAC 8.5 all versions
FortiNAC 8.3 all versions

11/12/2022marcin No Comments

Is Mastodon a new Twitter?

What is Mastodon

Mastodon is a microblogging network, it is not controlled by a company or a server, it works through a decentralized federation of servers. The network is open source and we can access it on GitHub, where it is hosted so that anyone can access it.

Mastodon does not use a single server, it consists of several, and it is fast in terms of loading both the network and the application. The user has the option to create a community or instance. In addition, if you don’t want to do that, you can join one of the many available.

The first thing to start using Mastodon is to register with a short registration, when we say concise, that is, it won’t ask for much information about us. There will be four fields you must fill out to register with the site/app, including your username.

How does the VPN work? – A question from the telegram.

My today’s answer to the question from the telegram – maybe someone will need such a summary of information about VPN 😀

The VPN set itself encrypts the data, but what servers do I connect to, etc., it still goes to the ISP?

No matter how the VPN is set, whether it’s your own or bought, it should encrypt the data. If you set it yourself you know how it was configured and you know who has the encryption key – in case of purchased VPN not exactly.
As for the ISP – you have to get out of that VPN somewhere, so at the point of the appointment, when traffic from a VPN starts to come out of the world with a “normal” connection yes – this or that ISP sees what comes out of you unencrypted + DNS queries.