da_667@da_667@infosec.exchange
"Just fucken serialize it, bro. What could go wrong, bro"
"Sir another deserialization RCE has hit the protocol."
da_667@da_667@infosec.exchange
da_667@da_667@infosec.exchange
da_667@da_667@infosec.exchange
da_667@da_667@infosec.exchange
da_667@da_667@infosec.exchange
"Just fucken serialize it, bro. What could go wrong, bro"
"Sir another deserialization RCE has hit the protocol."
da_667@da_667@infosec.exchange
or. OR. "It doesn't need its own registered port number. Put it over 443/TCP (or udp now, I guess) and its unblockable.
what If I want to be able to block it?How dare you not be webscale, forward-thinking and/or cypherpunk by handing over yet another fucking web protocol to Google, Cloudflare or Microsoft.
da_667@da_667@infosec.exchange
da_667@da_667@infosec.exchange
I like how everything network-related is revolutionary by either serializing it, or just shitting it out over UDP. "Trust the network, bro."
da_667@da_667@infosec.exchange
or. OR. "It doesn't need its own registered port number. Put it over 443/TCP (or udp now, I guess) and its unblockable.
what If I want to be able to block it?How dare you not be webscale, forward-thinking and/or cypherpunk by handing over yet another fucking web protocol to Google, Cloudflare or Microsoft.
da_667@da_667@infosec.exchange
I want to make a sticker out of this, a unicorn shitting out a rainbow, with that as the caption.
Who the fuck needs session orientation. Fuck you. you're not webscale if you're session oriented.
da_667@da_667@infosec.exchange
I like how everything network-related is revolutionary by either serializing it, or just shitting it out over UDP. "Trust the network, bro."
da_667@da_667@infosec.exchange
just shit it out over UDP. It'll be fine.
da_667@da_667@infosec.exchange
I want to make a sticker out of this, a unicorn shitting out a rainbow, with that as the caption.
Who the fuck needs session orientation. Fuck you. you're not webscale if you're session oriented.
da_667@da_667@infosec.exchange
just shit it out over UDP. It'll be fine.
da_667@da_667@infosec.exchange
I understand the need for encryption, trust me, I do, but I really don't like making the web more opaque than it already is.
da_667@da_667@infosec.exchange
I really wish you all weren't so cocksure about letting shit like HTTP/1.1 die.
Gonna miss the last vestige of the web that doesn't require wireshark to fuckin' parse it.
I kinda hate that HTTP/2 is straight binary and requires wireshark to make any sense of it, and that http/3 is basically just quic, which is google's love child of weird shit.
da_667@da_667@infosec.exchange
just shit it out over UDP. It'll be fine.
da_667@da_667@infosec.exchange
I really wish you all weren't so cocksure about letting shit like HTTP/1.1 die.
Gonna miss the last vestige of the web that doesn't require wireshark to fuckin' parse it.
I kinda hate that HTTP/2 is straight binary and requires wireshark to make any sense of it, and that http/3 is basically just quic, which is google's love child of weird shit.
da_667@da_667@infosec.exchange
A tv show of the undead called the golden ghouls, and its all mummies in full raiment from ancient egypt