Haasjes / gehaakte applicatie

Yoors security

- Yoors Security - Disclaimer: This post is intended for security researchers & testersScopeEligible domainsyoo.rsVulnerabilities that we accept:✅ Stored or reflected Cross-Site Scripting✅ CSRF/XSRF✅ SQL injection✅ S3 bucket uploads✅ Remote Code Execution✅ Authentication Bypass✅ Unauthorized data access✅ User enumerationVulnerabilities that we don't accept:❌ "Self" Cross-Site Scripting❌ Missing best practices in DNS configuration (DKIM/DMARC/SPF/TXT)❌ Denial of Service (DOS) attacks❌ Vulnerabilities in third party applications that integrate with Yoors❌ Rate limiting❌ Non-security-impacting UX issues❌ Social Engineering attacks❌ Insecure cookies❌ Only affecting outdated browsers/platforms/frameworks❌ Considered by the Yoors staff to be of low severityRulesTake responsibility and act with extreme care and caution. When investigating the matter, only use methods or techniques that are necessary in order to find or demonstrate the weaknesses.You must be the first one that reported the vulnerability Do not use weaknesses you discover for purposes other than your own investigation Do not use social engineering to gain access to a system or a Yoors account Do not install any backdoors – not even to demonstrate the vulnerability of a system Do not alter or delete any information in the system. If you need to copy information for your investigation, never copy more than you need. If one record is sufficient, do not go any further Do not alter the system in any way If you do manage to infiltrate a system, do not share access with others Do not use brute force techniques to gain access to systemsHow to reportProvide your IP address in the report. This will be kept private for tracking your testing activities and to review the logs from our sideYou can report weaknesses to us by email: security@yoo.rsDescribe the found weakness as explicit and detailed as possible and provide any evidence you might have, so that we can reproduce itWe will not accept only automated scanners output as evidenceParticularly include the following in your e-mail:Which vulnerabilityThe steps you undertookThe entire URLObjects/files that were involvedVideos and/or screenshots of an attack are highly appreciated

Fun and Food

Many times the end justifies the means, one of my children when he was little was eating badly, we had to engineer it so that he would eat well, we encouraged him to accompany us to cook, thus we prepared dishes with figures or landscapes and then we played with challenging him to eat them: always in my house the diet has been healthy, with many vegetables and legumes such as carrots, lettuce, potatoes, beets, squash, beans, peas, among others, also many natural fruit juices, we love mangoes, guava, melon, papaya. As time passed, my son learned not to be so selective with food, he eats almost everything, he has been healthy and of good bearing, hahaha like the rest of our family - Diversión y Alimentación - Muchas veces el fin justifica los medios, uno de mis hijos cuando pequeño era de mal comer, debíamos ingeniárnosla para que se alimentará bien, lo motivábamos a que nos acompañara a cocinar, preparábamos así platos con figuras o paisajes y jugábamos luego con el retándolo para que los devorara: siempre en mi casa la alimentación ha sido sana, con muchos vegetales y legumbre como zanahoria, lechuga, papa, remolacha, auyama, frijoles, arvejas, entre otros, también muchos jugos naturales de fruta, nos encanta el mango, la guayaba, el melón, la papaya. Al pasar el tiempo mi hijo aprendió a no ser tan selectivo con la comida, come casí de todo, ha sido sano y de buen porte, jajaja como el resto de nuestra familia -