BTCPay: the server changed. Who can still spend?
Replacing a machine calls for reviewing the authority attached to its wallet. Organize migration and integration acceptance before reopening the payment workflow.
Blog
Guides pratiques sur le pentesting, la recherche de vulnérabilités et les outils de sécurité à base d’IA.
Les articles sont publiés en anglais et en portugais.
Articles
150 articles
Linux kernel fixes: approve the kernel that actually runs
Available updates and packages undergoing qualification require different decisions. Acceptance should identify the kernel loaded after each server’s maintenance.
False alerts: who can publish and restore a channel?
A message can arrive through the expected app and still require investigation. Review publishing permissions, alternative channels and criteria for restoring each function.
LXD and MicroCloud: verify the fix on every cluster member
The maintenance record should identify the version serving each administrative endpoint. Track the cluster update with evidence for every member.
Polymarket: what can a third-party script do in a session?
A familiar supplier should be considered alongside the code actually delivered and the operations it can reach inside the page.
Binance: evidence for validating withdrawal authorization
An operation accepted by a system should match the authorization the business intended. Verify that connection before accepting the recovery of a sensitive workflow.
Legacy Windows: how to verify privileged logon restrictions
An older endpoint needs maintenance without receiving credentials that can administer the entire company. Turn that separation into an acceptance criterion.
EPICS Base 7.0.11: plan for the complete package and older clients
The selected package and the clients that must keep working belong in the remediation plan. Connect the official distribution to the IOC and validate compatibility in a representative environment.
Microsoft Authenticator on Android: what to verify after updating
An authentication update needs to reach the device and preserve the correct access decision. Separate the installed version, requesting app identity and earlier-activity investigation.