brand new tube hacker’s tips

Sh*ts

August 14, 2022, 06:44 PM

Cybersecurity 101 featuring BrandNewTube and boomer administrators.

1) Remove rewrite rules for the admin panel. After all, only staff know how to access this area.
2) Remove FFMPEG-injectable elements from the admin panel. AJAX requests have become self aware and stop working when UI elements are gone.
3) Run a prehistoric version of the already vulnerable CMS (and nulled). Dragging and dropping newer update files is too hard. What’s the worse that can happen, anyway?
4) Use an AV that scans every set interval. Threat actors are slow and won’t have enough time to do any damage!

LOL! This is fucking great. Love ya @thrax

(August 14, 2022, 06:26 PM)thekilob Wrote:

Thanks  Heart

breached . to / Thread-BrandNewTube-Aug-2022

JSON Web Tokens (JWTs) are not safe

Uncategorized

In this book, we go into JWTs, their perceived benefits, and actual dangers. We’ll also discuss battle-tested solutions to replace them. We’ll explore:

  • HTTP Sessions, Authentication, and Authorization
  • The need for something like JWT
  • JWTs’ perceived benefits and actual dangers 
  • JWT workarounds and the complexities around that
  • Using Redis for session storage instead of JWTs
  • Sessions storage when Redis is used as a Primary DB 
  • Finally, you’ll also learn how to use Redis + JWT! Another common approach to managing user session

Article link

FastCGI sent in stderr: “PHP message: PHP Fatal error: Uncaught Error: Class ‘Elementor\Scheme_Color’

Wordpress 

2022/03/24 04:21:34 [error] 48814#48814: *3018415 FastCGI sent in stderr: "PHP message: PHP Fatal error: Uncaught Error: Class 'Elementor\Scheme_Color' not found in ... /wp-content/plugins/tz-feature-pack/includes/elementor/class-tz-fp-site-logo.php:115
Stack trace:

Last night elementor update was causing me this fatal error.

The solution is to replace Scheme_Color with \Elementor\Core\Schemes\Color

As seen on https://forum.elementor.com/fixing-common-issues-33/wordpress-error-with-elementor-plugin-10649

wordpress update 5.9.2 – images issues

Uncategorized

On WP 5.9.2 the includes/css/dist/block-library/style.min.css has the following CSS declaration:

    html :where(img){ height: auto; max-width: 100% }

You can try to use replace with, the the file or use a plugin for custom css.

    html :where(img){ height: auto; max-width: fit-content; }

More readings at