In his groundbreaking new research, HTTP/1.1 Must Die: The Desync Endgame, Kettle challenges the security community to completely rethink its approach to request smuggling. He argues that, in practical terms, it's nigh on impossible to consistently and reliably determine the boundaries between HTTP/1.1 requests, especially when implemented across the chains of interconnected systems that comprise modern web architectures. Mistakes such as parsing discrepancies are inevitable, and when using upstream HTTP/1.1, even the tiniest of bugs often have critical security impact, including complete site takeover.

This research demonstrates unequivocally that patching individual implementations will never be enough to eliminate the threat of request smuggling. Using upstream HTTP/2 offers a robust solution.

I just read this article in a marketing blog from portswigger, the maker of the penetration testing tool burp suite.

Can someone with more insight explain what we're supposed to do? Completely disabling HTTP/1.1 is probably not doable for many organisations.

Context

Made with Mistral / Le Chat.

create a funny 4 panel comic, how to draw a lion. panels 1-3 contain extremely basic shapes of the lion, panel 4 the finished, colored lion. this comic should be fun because the step from 3 to 4 will be ridiculously hard.

Love it when someone falls for phishing, gives away their login, and just… says nothing. Really helpful.

As a fun experiment, I asked ChatGPT to create an image of me based on my chat history. I've been chatting with it for a while, so it has some ideas. Here is an example prompt that you could use to try this too:

Create an image of how you imagine me to look based solely on our chat history. Estimate my age, gender, hairstyle, skin tone, body type, clothing, and background scene. Use clues from my personality, interests, and writing style to visualize a realistic portrait.

If you use ChatGPT, feel free to share how the AI imagines you to look - based solely on your conversations!

Context

And what can other leaders learn from it?

Please share your success stories :)

Just as an experiment, it appears that drawing maps isn't one of the strengths of AI.

Made with le chat, ChatGPT does a little better.

From a simple KeePass database to enterprise credential management solutions—what’s your setup at work?

How on earth can you both not accept the password I copied from my password safe and tell me that I cannot use the same pasaword again?