Vulnerability analyses, disclosures and fixes. · 3 articles
I woke up this morning to a very interesting news article on BleepingComputer: a new vulnerability has been disclosed that affects almost all the major Linux distributions. It allows any logged in user to easily elevate their privileges to that of root. Like, really easily!
The VaxiCode Verif application recently launched by the Government of Québec was the subject of a vulnerability disclosure allowing fake codes to be validated. Here is our analysis.
Things must have been heating up in the offices of the Ministère de la Santé et des Services sociaux (MSSS) on Friday morning. After hammering home that using the QR code as proof of vaccination was 100% secure, two flaws were reported in the media. First, hackers demonstrated that it was possible to download proofs of vaccination that were not intended for them. Second, another individual demonstrated that it was possible to create fake QR codes from scratch. In less than 24 hours.
