Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Vulnerability to malicious pushover? #219

Open
dglittle opened this issue Aug 11, 2024 · 1 comment
Open

Vulnerability to malicious pushover? #219

dglittle opened this issue Aug 11, 2024 · 1 comment

Comments

@dglittle
Copy link
Collaborator

Other tools (...and pushover) may have similar [compromsing] powers in this environment
[...]
The goal is not to cast aspersions on the vendor, but to point out that the system is fundamentally trusting them in a way that might not be safe in the case of nation-state level adversaries.

Originally posted by @mspecter in #195

@arianabuilds
Copy link
Member

Entry Summary for HACK SIV @ DEF CON 2024

Thanks again for participating! This submission earned $113.38 from SIV and $57.29 from the Public Vote, for a total of $170.67.

Here's what we noted in our evaluation:

What's interesting about this submission

  • Could cause some alerting to fail to send to server admin.

What takes away from it

  • Nearly all the underlying data this is sending is still being stored elsewhere.

Issue to track getting paid: siv-org/hack.siv.org#11

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants